CODEWITHSUNDEEP
amazon-web-servicessslssl-certificateamazon-cloudfront
Udara Jayawardana
Udara Jayawardana

Reputation: 1148

ACM Requested Public SSL certificate not appearing in CloudFront

I'm creating a CloudFront distribution for an S3 bucket. I successfully created it and mapped the DNS. Now I want to use HTTPS for the DNS.

I created a cert via ACM. But the cert is not appearing in the CloudFront Custom SSL pge.

enter image description here

Any ideas why?

Upvotes: 0

Views: 853

Answers (4)

paulharte
paulharte

Reputation: 1

This is very likely down to it being created in the incorrect region. I have made a blog posting on this, and how to resolve it https://www.paulspetprojects.net/solve-ssl-cert-not-appearing-in-aws-cloudfront/

Upvotes: -1

Roman Bekkiev
Roman Bekkiev

Reputation: 3118

Just in case you're reading this in 2024, when AWS just started to support ECDSA (elliptic curve) key algorithm in ACM. I faced the same issue, however, now the UI looks a bit different and you cannot just paste the certificate ARN in that box.

As it turned out, the issue was that while ACM does support ECDSA, the CloudFront supports only RSA certificates with keys between 1024-3072 bits. So make sure that your certificate has the following in the "Details" panel:

part of AWS details panel, saying "Can be used with CloudFront, Elastic Load Balancing, API Gateway and other integrated services."

Upvotes: 2

Udara Jayawardana
Udara Jayawardana

Reputation: 1148

I was able to accomplish the task, however, this is not the answer to the question.

I pasted the certificate ARN to the Custom SSL field and updated the CloudFront distribution. By this way, I was able to add SSL to my custom domain. However, my certificate still not appears in the Drop down menu.

Upvotes: 3

Mahiz
Mahiz

Reputation: 295

Pls verify whether the certificate is created in us-east-1 region. Cloud front can use certificates that are created in that specific region.

Upvotes: 2

Related Questions