Installing a new SSL certificate in your ELB via CLI

Tue, 14 Oct 2014 12:01:49 +0000

For future me:

Create the key and CSR:

$ openssl req -out wildcard.site.com.csr -new -newkey rsa:2048 -nodes -keyout wildcard.site.com.key

Upload the CSR to your SSL vendor (in this case, DigiCert) and obtain the signed SSL certificate.
Create a PEM-encoded version of the signing key. This is required for AWS/IAM certs. To check if your key is already PEM-encoded, just “head -1 site.key”. If the first line says “—–BEGIN PRIVATE KEY—–” then it’s NOT PEM-encoded. The first line should be “—–BEGIN RSA PRIVATE KEY—–”.

Iam on Evan Hoffman