Does AWS cloudfront support TLSv1.3 for custom origin? - amazon-cloudfront

Does cloudfront support TLSv1.3 I dont see any docs that says that it supports between cloudfront and custom origin? I have a very strong requirement to use TLSv1.3

CloudFront now supports TLS 1.3—it's enabled by default.
Here are the docs:
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/secure-connections-supported-viewer-protocols-ciphers.html

CloudFront doesn't support TLS1.3. (Viewer to CloudFront and CloudFront to Origin both).
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/secure-connections-supported-viewer-protocols-ciphers.html

Related

Accept Stripe Webhooks with TLS 1.3 / Kubernetes Ingress

I need to listen to Stripe events at a webhook that is deployed on Kubernetes.
The certificate used in the Ingress is using TLS 1.3 but according to Stripe docs, their webhook requests are using TLS 1.2.
Therefore I am getting TLS Errors in the Stripe Webhooks Dashboard.
I am not sure if it is even possible to accept TLS 1.2 requests from a certificate with TLS 1.3 or if I need to add some annotations in the Ingress.
Would greatly appreciate any help.

Install AWS SSL Certificate to home server

I have a domain name bought from AWS, and can get SSl certificate from AWS ACM.
I could install the certificates to Load Balancer for EC2.
Now I am hosting a server at home, either a NodeJS app or Python Flask app.
How can I get the website to use https protocol?
How can I get the website to use https protocol?
Yes, you can, but not from AWS ACM. The SSL certificates from ACM can only be used on:
Elastic Load Balancing
Amazon CloudFront
Amazon API Gateway
For home server, you have to get a SSL certificate from a third party. A popular choice is https://letsencrypt.org/ which offers free public SSL certificates. But to register an SSL cert, you will need a DNS domain for your home server.

How to install Cloudflare Origin CA certificate on server Node.js

I am developing an application with Node.js to consume apis. I want to use Cloudflare protection services with my server, one of the services is SSL / TLS.
Is it possible to implement the "end to end" certificate that cloudflare gives in an application with Node.js?
I have the private key and origin key files that Cloudflare gives me for this.
Thx.

Issue AWS S3 RoutingRules and SSL

Im facing some problems with AWS S3, i figured out that if i set some RoutingRules, it will only works at <bucket_name>.s3-website-us-east-1.amazonaws.com endpoint but this endpoint don't have SSL, is there another endpoint that has SSL s3.amazonaws.com/<bucket_name> but these RoutingRules doesn't work there.
Is there a way to make RoutingRules works at s3.amazonaws.com/<bucket_name> endpoint? or SSL works at <bucket_name>.s3-website-us-east-1.amazonaws.com?
I hear something about cloudfront but idk much about.
<bucket_name>.s3-website-us-east-1.amazonaws.com is a website endpoint, whereas the other one is a REST API endpoint. You can see the difference here.
You can see the example walkthroughs how to setup a static website on S3 and add CloudFront (where you can add SSL/TLS).
For your use case, as you have already identified you can use AWS CloudFront. It mainly provides two functions,
Acts as a CDN caching the static content based on your configuration.
Acts as a proxy where you can connect S3 buckets or other endpoints to CloudFront with routing rules where your DNS points to CloudFront.
In addition you can associate AWS Certificate Manager issued free SSL certificates with CloudFront.
Configuring CloudFront to S3 is straightforward. Check the AWS Getting Started Guide for more details.

Secure Gateway - TLS version

I can't find details about what version of TLS is implemented by Secure Gateway.
The documentation is very detailed about how to implement TLS, but I can't find the version used.
https://www.ng.bluemix.net/docs/services/SecureGateway/index-gentopic3.html#sg_007
Where is this information available?
For the application side TLS, Secure Gateway will accept connections from applications that are using TLS 1, 1.1, 1.2. It is up to the app to decide which version of TLS to connect with. If you want to limit what version of TLS is accepted, you can use the REST API to manage the secure options of your destination. This setting is not configurable via the UI.

Resources