Scenario

Trying to configure end to end ssl encryption from ALB to Spring boot application.

Steps Done

ACM created

• created a domain name in ACM and downloaded the public certificate chain using GetCertificateRequest API. Domain name is *.mnkartik.com
• create a truststore.jks and imported the certificates and chain as trusted sources.

spring boot application on ec2

• configure the ALB with the target source as EC2
• created self signed certificate and keystore as keystore.jks
• configured the application as below in properties

    server.port=8080
    server.ssl.key-store = classpath:keystore.jks
    server.ssl.key-store-password = password
    server.ssl.key-password = password
    server.ssl.ciphers=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_RC4_128_SHA
    server.ssl.enabled=true
    server.ssl.trust-store=classpath:truststore.jks
    server.ssl.trust-store-password=password

• when hit using the EC2 public api to spring boot application running on 8080 with https:// its working with an unsecured error ( as obvious ) with response printed successfully.

Problem

But when hitting the alb url, its returning as 502 Bad gateway error. Could not be able to solve.

This is ec2 result

ALB result