amazon-web-servicesamazon-iamcloudflareaws-acmaws-access-policy

Certificate chain for AWS ACM using Cloudflare


I'm trying to Import a certificate from Cloudflare using the AWS Web UI and I'm stuck in this page:

enter image description here

I read that the equivalent in Cloudflare to Certificate Chain is Origin Certificates (not 100% sure on this), so I created one and chose the RSA certificate and when I try to finish the import in AWS it says:

Could not validate the certificate with the certificate chain. Choose Previous button below and fix it.

Anyone knows what's the problem?

Thanks

EDIT:

I tried the root CA and it also doesn't work:

enter image description here

This is the "solution" from AWS:

"Could not validate the certificate with the certificate chain."

If ACM can't match the certificate to the certificate chain provided, verify that the certificate chain is associated to your certificate. You might need to contact your certificate provider for further assistance.


Solution

  • Ok I found the issue, I had created a Client CE and that’s what I was using, I read on the description that it was the one used to authenticate APIs in clients so it made sense. Anyway, resolution:

    All 3 CE has to be ORIGIN and the root is from this page. So if anyone has this issue, make sure you use the CE from the Origin page + the root

    enter image description here