Reputation: 95
I am trying to retrieve SSL certificate from ACM, but unable to. I tried using the old aws-java-sdk-acm but it has a http client which is no more usable. Hence I am not able to fetch the certificate from the AWS. Please help me out as I dont see any option / acm methods in the latest aws sdk.
Upvotes: 4
Views: 1461
Reputation: 81454
You cannot download an SSL certificate stored in ACM. The private key is protected. ACM provides FREE SSL certificates for Amazon services and controls where they can be installed and who can create them. If Amazon did not control this, the certificates would be worthless.
That said, ACM can deploy/install your SSL certificate(s) to endpoints managed by the following supported services in your AWS account: http://docs.aws.amazon.com/acm/latest/userguide/acm-services.html
Additional Information:
To download the public key using openssl:
openssl s_client -connect www.mywebsite.com:443 | openssl x509 -pubkey -noout
Upvotes: 3
Reputation: 375
What do you mean by "retrieve SSL certificate"? Do you want to pull the certificate with the private key? If so, please refer to John Hanley's answer.
If you just want the public portion of the certificate (what is served from a webserver, etc.), you can call ACM's GetCertificate to pull the certificate with chain.
Upvotes: 4