CloudFront migrating service certificates

  • Resolved MaxStirner

    (@maxstirner)


    4 years ago

    Hello, please sorry about my bad english.

    I received a couple of emails from Amazon regarding a certificate migration. I’m sure you know what I’m talking about. But I don’t ??

    (…) Amazon Simple Storage Service (S3) and Amazon CloudFront are both migrating their services’ certificates from DigiCert to Amazon Trust Services starting March 23, 2021. If you do not send HTTPS traffic directly to your S3 bucket, or only use custom domains like https://www.example.com with your CloudFront distribution, then there is no impact and you can disregard this message. If you do send HTTPS traffic directly to your S3 bucket, or use CloudFront domains covered by *.cloudfront.net, please continue reading and review the FAQ below on which certificates are migrating.

    In other words, is it something that also affects the plugin settings? I don’t use custom domain.

    Thanks in advance for your reply.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author luckychingi

    (@luckychingi)

    Hello @maxstirner

    This article would help clear the doubts:
    https://forums.aws.amazon.com/ann.jspa?annID=7541

    The Amazon Trust Services Certificate Authority originates from AWS’ purchase of the Starfield Services Certificate Authority which has been valid since 2005. This means you shouldn’t have to take any action to use the certificates issued by Amazon Trust Services as it is already included in common trust stores across most web browsers, operating systems, and applications. However, if you build custom certificate trust stores or use certificate pinning, you may need to alter your configurations. As a best practice, we recommend verifying Amazon Trust Services is in your trust store with one of the following tests.

    Thread Starter MaxStirner

    (@maxstirner)

    Thanks for your prompt reply!

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘CloudFront migrating service certificates’ is closed to new replies.