自定义域和 ElastiCache Redis SSL 问题

Question

我刚刚创建了一个支持 SSL 的 EC Redis 复制组。

这是主要终点：master.dev-my-site.wmrsll.use1.cache.amazonaws.com:6379

dev-my-site.mydomain.com我还创建了一个 CNAME：master.dev-my-site.wmrsll.use1.cache.amazonaws.com

在我的机器上，我可以通过 cli 连接到 redis：

redis-cli -h dev-my-site.mydomain.com -p 6379 --tls

但是当我使用Lambda时，我可以连接master.dev-my-site.wmrsll.use1.cache.amazonaws.com 但不能连接 CNAME：dev-my-site.mydomain.com

当我尝试使用 CNAME 时，收到以下错误：

2021-08-26T19:15:27.442Z    5801f8d4-08ae-4bd0-8091-e856d95d008c    ERROR   Uncaught Exception  {"errorType":"Error","errorMessage":"Redis connection to dev-my-site.mydomain.com:6379 failed - Hostname/IP does not match certificate's altnames: Host: dev-my-site.mydomain.com. is not in the cert's altnames: DNS:*.dev-ec-my-site.wmrsll.use1.cache.amazonaws.com","trace":["Error [ERR_TLS_CERT_ALTNAME_INVALID]: Hostname/IP does not match certificate's altnames: Host: dev-my-site. is not in the cert's altnames: DNS:*.dev-ec-my-site.wmrsll.use1.cache.amazonaws.com","    at Object.checkServerIdentity (tls.js:297:12)","    at TLSSocket.onConnectSecure (_tls_wrap.js:1524:27)","    at TLSSocket.emit (events.js:400:28)","    at TLSSocket._finishInit (_tls_wrap.js:936:8)","    at TLSWrap.ssl.onhandshakedone (_tls_wrap.js:708:12)"]}
[ERROR] [1630005327499] LAMBDA_RUNTIME Failed to post handler success response. Http response code: 400.

我不知道如何解决此证书问题。我将不胜感激的帮助。