Azure Web应用程序证书 [英] Azure web app certificates

问题描述

你好

我们拥有内部CA，我们的Web应用托管在Azure中.我们已在内部CA颁发的Azure Web应用程序上安装了证书.

We have our internal CA and our web app is hosted in Azure. We have installed cert on Azure web app which is issued by our internal ca. 

通过此设置，由于我们的CA位于同一网络上，因此我应该能够从我们的组织网络访问我的webapp.但是我仍然遇到错误.

By this setup I should be able to access my webapp from our org network as our CA is on same network. But I am still getting an error.

我的理解是，如果您和您的ca位于同一网络上，那没关系，您应该可以在内部访问它.但是，为什么在webapp中绑定正确的证书后却出现此错误.

My understanding is if your ca and you are on same network, it doesn't matter, you should be able to access it internally. But why I am getting this error after binding a correct cert in webapp.

我不想公开使用此url，以供内部访问.

I don't want to use this url publically, its for internal access.

谢谢

Akshay 

Akshay 

Akshay Vithalkar； MCTS(AD)MCTS(网络基础设施)MCTS(服务器虚拟化)MCITP(WindowsServer 2K8)MCSA(WindowsServer 2K8)MCTS(WindowsServer 2K12)MCTS(ExchangeServer 2013)MCTS(Office365身份和要求)MCTS(启用Office 365服务)

Akshay Vithalkar; MCTS(AD) MCTS(Network Infra) MCTS(Server Vitrtualization) MCITP(WindowsServer 2K8) MCSA(WindowsServer 2K8) MCTS(WindowsServer 2K12) MCTS(ExchangeServer 2013) MCTS(Office365 Identities and Requirements) MCTS(Enabling Office 365 Services)

推荐答案

这不是证书的真正工作方式.您收到的错误可能是因为向您的应用颁发证书的证书颁发机构不受Azure应用服务的信任，这仅仅是因为您的证书的根CA 未在受信任的根CA"存储中安装授权.您是从Internet还是从公共网络浏览网站都没关系.

That's not really how certificates work. The error you are getting is probably saying that the Certification Authority that issued the certificate to your App is not trusted by Azure App service and that's simply because the Root CA for your Certification Authority is not installed in the Trusted Root CA store. It doesn't matter if you browse the site from internet or public network.

要查看默认情况下由Azure App Service信任的CA的列表，请查看本文-  https://blogs.msdn.microsoft.com/benjaminperkins/2018/01/24/what-root-certificates -exist-on-an-azure-app-service-ca-root/

To see the list of CA's that are trusted by default by Azure App Service, check out this article - https://blogs.msdn.microsoft.com/benjaminperkins/2018/01/24/what-root-certificates-exist-on-an-azure-app-service-ca-root/

此外，您不能将根证书添加到App Service商店.您可以添加中间证书，尽管就像我在上面共享的同一篇文章中提到的那样.

Also, you cannot add Root Certificates to an App Service store. You can add intermediate certificates though as mentioned in the same article that I shared above.

简而言之，如果在Azure App服务中使用CA颁发的证书，则会收到此错误消息.

In short, if you use a certificate issued by your CA in Azure App service, you will get this error message.

这篇关于Azure Web应用程序证书的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！