You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: security/security-design/shared-assets/zerossl-lb-test-certificate-setup/README.md
+17-17Lines changed: 17 additions & 17 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -46,7 +46,7 @@ Initially, we will create the load balancer and configure the HTTP listener on p
46
46
47
47
6. Select the checkbox next to your compute instance (in my case `apache`) from the list of instances.
48
48
49
-

49
+

50
50
51
51
7. Click `Add selected backends`.
52
52
@@ -66,13 +66,13 @@ Initially, we will create the load balancer and configure the HTTP listener on p
66
66
67
67
13. Since, this is a test, disable **Error logs** and **Access Logs** (if enabled).
68
68
69
-

69
+

70
70
71
71
14. Click `Submit`.
72
72
73
73
Your load balancer will be created after a few moments.
74
74
75
-

75
+

76
76
77
77
> **Note** If you have enabled the network traffic to your HTTPD server, and if it is running, **Backend sets health** shoudl be showing as **OK**. If not, check your networking and security lists.
78
78
@@ -84,7 +84,7 @@ Before we enable a HTTPS connection to the web server, let's check out load bala
84
84
85
85
1. Open a browser and navigate to `http://<your LB public IP address>/`, accepting the HTTP warning issued by your browser.
86
86
87
-

87
+

88
88
89
89
# Generate the TLS certificate
90
90
@@ -102,25 +102,25 @@ For this tutorial, i'm using [ZeroSSL](https://app.zerossl.com/dashboard), prima
102
102
103
103
The IP will be validated as shown by the green tick.
104
104
105
-

105
+

106
106
107
107
5. Click **Next Step ->**
108
108
109
109
4. Under **Validity**, select `90-Day Certificate`.
110
110
111
-

111
+

112
112
113
113
5. Click **Next Step ->**
114
114
115
115
6. Don't select any add-ons.
116
116
117
-

117
+

118
118
119
119
7. Click **Next Step ->**
120
120
121
121
8. On the **CSR & Contact** screen, ensure `Auto-Generate CSR` is enabled.
122
122
123
-

123
+

124
124
125
125
9. Click **Next Step ->**
126
126
@@ -134,15 +134,15 @@ Before ZeroSSL will issue a certificate, you must verify that you control the IP
134
134
135
135
12. Follow the instructions to upload the pki-validation file to your web server into the folder specified by ZeroSSL.
136
136
137
-

137
+

138
138
139
139
13. Once the file is in place, click **Verify Domain** to start the verification process.
140
140
141
141
After successful verification, your certificate will be generated.
142
142
143
143
14. Click **Download Certificate (.zip)** to obtain the necessary certificate and key files from ZeroSSL.
144
144
145
-

145
+

146
146
147
147
15. Extract the zip file to a suitable folder on your local machine. It contains three files:
148
148
@@ -166,35 +166,35 @@ Before creating the HTTPS listener, we need to import our new certificate.
166
166
167
167
4. Change the **Certificate Resources** to `Load balancer managed certificate`.
168
168
169
-

169
+

170
170
171
171
5. Click **Add certificate**.
172
172
173
173
6. Provide a name for your certificate such as its IP address.
174
174
175
-

175
+

176
176
177
177
7. Under **Choose SSL certificate file**, drop your `certificate.crt` file into the box.
178
178
179
-

179
+

180
180
181
181
8. Check the **Specify CA certificate** check box.
182
182
183
183
9. Under **Choose CA certificate file**, drop your `ca_bundle.crt` file into the box.
184
184
185
-

185
+

186
186
187
187
8. Check the **Specify private key** check box.
188
188
189
189
9. Under **Choose CA private key file**, drop your `private.key` file into the box.
190
190
191
-

191
+

192
192
193
193
10. Click **Add certificate** to to finalise the addition of the certificate.
194
194
195
195
11. Click **Close** on the **Work Request** and wait for the new certificat to appear in the list of certificates (a new moments).
196
196
197
-

197
+

198
198
199
199
Now that we have our certificate imported, we can create the new listener.
200
200
@@ -225,7 +225,7 @@ Now that we have created the HTTPS listener, we can test it.
225
225
226
226
You will see that you now have a secure connection to your web server, as indicated by the padlock in your browser address bar.
227
227
228
-

228
+

0 commit comments