From 9f0b0654a221131d2ab6b6d855c70748dd771f98 Mon Sep 17 00:00:00 2001 From: Mauricio Wyler Date: Mon, 3 Jan 2022 14:35:31 -0300 Subject: [PATCH] Dont send ssl_support_method for default certificate (#80) Co-authored-by: cloudpossebot <11232728+cloudpossebot@users.noreply.github.com> --- README.md | 2 +- main.tf | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index c34a1c3..2636706 100644 --- a/README.md +++ b/README.md @@ -355,7 +355,7 @@ In general, PRs are welcome. We follow the typical "fork-and-pull" Git workflow. ## Copyright -Copyright © 2017-2021 [Cloud Posse, LLC](https://cpco.io/copyright) +Copyright © 2017-2022 [Cloud Posse, LLC](https://cpco.io/copyright) diff --git a/main.tf b/main.tf index 2fb944a..dee7a56 100644 --- a/main.tf +++ b/main.tf @@ -127,7 +127,7 @@ resource "aws_cloudfront_distribution" "default" { viewer_certificate { acm_certificate_arn = var.acm_certificate_arn - ssl_support_method = "sni-only" + ssl_support_method = var.acm_certificate_arn == "" ? null : "sni-only" minimum_protocol_version = var.viewer_minimum_protocol_version cloudfront_default_certificate = var.acm_certificate_arn == "" ? true : false }