: Avoiding SSL certificate errors with Amazon S3 subdomain I have an Amazon S3 bucket set up for hosting static image files. I have set up subdomain redirection so that "static.example.com" points

@Sent6035632

Posted in: #AmazonS3 #Https #SecurityCertificate #Subdomain

I have an Amazon S3 bucket set up for hosting static image files. I have set up subdomain redirection so that "static.example.com" points to my S3 bucket. The bucket is named "static.example.com" with an appropriate CNAME record.
static.example.com/someimage.jpg does load from the S3 bucket.

The problem arises when I enable SSL for the website. When I load www.example.com I get errors because I'm loading insecure content from a secure page as expected.

After changing image sources to load static.example.com/someimage.jpg, images do not load because the browser blocks them because the certificate doesn't match.

Amazon's certificate is good for *.s3.amazonaws.com, which would include "somebucket.s3.amazonaws.com" but does not match "static.example.com.s3.amazonaws.com" as I need it to.

So the question is, how do I implement SSL as recommended when using a custom subdomain?

Vote Up Vote Down

Login to post a comment!