AWS Certificate Manager vs. OpenSSL

I would always recommend AWS Certificate Manager for anyone using AWS cloud services. The perfect scenario would be with your domain managed by AWS Route 53 as you can obtain auto renewal of certificates with really good security for all your public facing application that uses CloudFront, ALB or API Gateway.

Incentivized

I would recommend OpenSSL for just about any kind of cryptographic operations that you may need. I can't think of a particular situation where it would not be appropriate to use OpenSSL for a cryptographic function of some sort or another. If you are going to provide some sort of encryption service in a product, OpenSSL is probably the best way to get it off the ground and going. With other competitors, you may get it working, but I fear long term support and interoperability will be an issue.

Incentivized

• Issue, Renew and Validate SSL Certificates.
• Allows us to integrate it with other AWS Services.

• integrates into just about everything
• codebase is well managed and follows predictable paths
• although there are alternatives, OpenSSL is vastly better supported

Incentivized

• Sometimes ACM certificates don't work with ELB.
• No automatic alert on certificate expiration.

Incentivized

• the entire project could be completely refactored while preserving the library apis
• the documentation on command line usage is not usually the best
• code examples are not very well explained

Incentivized

AWS historically has had very confusing interfaces. But in recent times they have improved them. AWS Certificate Manager is a clear sample of this. The interface is clear and straightforward, with no useless or cryptic options. Really I can't think of a way the interface could be better with the actual options available.

Incentivized

They do a great job.

Incentivized

Easy to implement within a few clicks, or even from command line, the alternatives doesn't integrate that easy with AWS Application Load Balancers or AWS CloudFront

Incentivized

LibreSSL is another option to OpenSSL, however, the sheer volume of other applications using OpenSSL and the wide support for it makes OpenSSL a compelling product.

Incentivized

• We're saving our spent on SSL certificates As it dosen't costs at all.
• Limited to AWS only, Certificates issued by ACM can be used with AWS managed services only.
• It doesn't support automatic domain verification with other DNS management systems.

• roi is hard to measure for openssl. It's not that it doesn't provide a significant roi, but it is in the background of an application, not the foreground.

Incentivized