Amit Chaudhary
Amit Chaudhary

Reputation: 43

https security exception for amazon s3 bucket

I am having two buckets https://almaconnect.dev.s3.amazonaws.com/ and https://almaconnect.s3.amazonaws.com/

The first one when I hit gives non-secure result and asks me to add an exception in the browser. The 2nd one works fine. I am wondering what issue there can be. Please, help me guys....

Thanks, Amit Chaudhary

Upvotes: 3

Views: 296

Answers (1)

Michel Feldheim
Michel Feldheim

Reputation: 18250

The server sends a wildcard certificate for *.s3.amazon.com. This certifies all subdomains of the domain s3.amazon.com.

Certificate is valid for your working example almaconnect.s3.amazon.com but not for your second example **alamonnect.**dev.s3.amazon.com.

Create a bucket called e.g. alaconnectdev to work around this problem.

With the distribution of Firefox 3.5, all major browsers allow only a single level of subdomain matching with certificate names that contain wildcards, in conformance with RFC 2818.

In other words the certificate *.mydomain.com will work for one.mydomain.com or two.mydomain.com but NOT one.two.mydomain.com.

Resources:

Upvotes: 4

Related Questions