假设您已经在使用 HTTPS 访问您的网站时测试了 HTTPS 工作正常。如果没有,您可以添加此文件.ebextensions/loadbalancer-terminatehttps.config
,其内容如下:
option_settings:
aws:elb:listener:443:
ListenerProtocol: HTTPS
SSLCertificateId: arn:aws:acm:us-west-2:<your-account-id>:certificate/<certificate-arn-on-aws-acm>
InstancePort: 80
InstanceProtocol: HTTP
剩下的就是配置实例 Apache config 以将使用 HTTP 访问您网站的客户端重定向到 HTTPS,将以下代码添加到新文件中 .ebextensions/001_ssl_rewrite.config
阿帕奇 2.4+
files:
"/etc/httpd/conf.d/ssl_rewrite.conf":
mode: "000644"
owner: root
group: root
content: |
RewriteEngine On
<If "-n '%{HTTP:X-Forwarded-Proto}' && %{HTTP:X-Forwarded-Proto} != 'https'">
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R,L]
</If>
阿帕奇 2.2.X
files:
"/etc/httpd/conf.d/ssl_rewrite.conf":
mode: "000644"
owner: root
group: root
content: |
LoadModule rewrite_module modules/mod_rewrite.so
RewriteEngine On
# This will enable the Rewrite capabilities
RewriteCond %{HTTPS} !=on
# This checks to make sure the connection is not already HTTPS
RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L]
您可以从此处检查 Elastic Beanstalk 上安装了哪个 Apache
有关更多信息,请阅读这两个答案:https ://stackoverflow.com/a/38751749/1772245和https://stackoverflow.com/a/40670047/1772245