question

Matt Kruse avatar image
Matt Kruse asked

Cheapest/Easiest SSL Way to buy valid SSL Cert?

I have a couple domains that I want to convert to SSL so they can support Alexa requests. Can anyone recommend the cheapest/easiest place to buy an SSL Cert from, that Amazon will treat as being valid? My only requirement is that it work correctly with Alexa, I don't require any other options, wildcards, etc. Just one domain, cheap and easy. Thanks :)
alexa skills kitdebugging
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Matt Kruse avatar image
Matt Kruse answered
ps - I am hosting my app/site on a google cloud (Compute Engine) vm instance. I don't know if that has any impact on the best way to do this.
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

wilson-mar avatar image
wilson-mar answered
I thought that's what Amazon Gateway is for.
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

jjaquinta avatar image
jjaquinta answered
I just posted a Lambda Function in another thread whose sole purpose is to pass through to another endpoint. I haven't timed it to see what latency it introduces, but the first 1,000,000 hits on Lambda are free, you don't need an SSL certificate for it, and this technique can call your function no matter where it is, http or https. I'm not sure I'd want to run a professional service that way. (Since it only saves you the cost of a SSL cert.) But just putting it out there in case that helps.
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Matt Kruse avatar image
Matt Kruse answered
That is definitely an interesting idea, I hadn't considered using lambda as a 'proxy'. I wonder if that violates any terms or anything? Because then the JSON data is flying through the air unencrypted, not sure if Amazon intended that. In any case, thanks for the tip, that's definitely a way to go for now, at least. Eventually I want to get "real" SSL working on my server, but this is a good work-around.
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

jjaquinta avatar image
jjaquinta answered
Well, from Amazon's point of view, using a Lambda "proxy" (I like that description) clocks up time on TWO Amazon services. So they win! :-) Also, sure, it may be unencrypted, but its going on within a single Amazon data center. So the risk should be minimal. Also, you can always use https, just you don't need a super-paranoid-certificate.
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Matt Kruse avatar image
Matt Kruse answered
It doesn't have to stay within the Amazon data center, though. I am going to try using it to proxy the request off to my web service. If it works, I'll probably post a general solution.
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

James Chivers avatar image
James Chivers answered
Hi Matt, I'd check with your domain registrar as many are offering free non-wildcard SSL certs for their customer's domains. I personally use Gandi for the majority of domains - they aren't the cheapest registrar and but do provide free certs that I can confirm work with Alexa: https://www.gandi.net/ssl
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Matt Kruse avatar image
Matt Kruse answered
I host most of my stuff now using hostgator, and they do offer SSL. But I'm trying to move away from them and go to google cloud for all my hosting, so I don't want to go that route :)
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

James Chivers avatar image
James Chivers answered
Ah, so is Host Gator your registrar then too? If so, you could either buy an SSL cert from a separate company, or, transfer your domain to a registrar that provides free certs with each domain. If the former, and you don't want to transfer your domain, then Gandi charge $16 per year: https://www.gandi.net/ssl/standard#single
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

timstrader avatar image
timstrader answered
As per my experience, cheapsslcouponcode.com will remain the best and easiest platform for you as well as other people too. Because discount coupon codes will help to get low cost ssl certificate. Here, single domain price starts from $4 http://www.cheapsslcouponcode.com/coupons/standard-domain-ssl
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.