将证书安装到Azure Web应用程序上的受信任的根证书存储中 [英] Installing certificates to the trusted root certificate store on azure web apps
问题描述
如何将证书安装到Azure Web应用程序中，以便我的Azure Web应用程序可以通过SSL与远程服务通信(此特定证书未由公共CA签名)
How can I install a certificate into an Azure Web App so that my azure webapp can communicate with a remote service via SSL (this particular certificate is not signed by a public CA)
我用openssl生成了一个ssl证书，当将其安装到本地计算机上的受信任的根证书身份验证存储区时，运行正常.但是，当我通过管理门户上载证书时，会收到错误消息，表明该证书不受信任(正确)以及未安装证书时的正确错误.
I generated an ssl certificate with openssl and when I install it to the trusted root certificate authentication store on my local computer the runs fine. However when I upload the cert via the management portal I get errors that the certificate isn't trusted (which is correct) and the correct error for when a certificate is not installed.
如何将私有SSL证书安装到azure Web应用程序上的受信任的根证书存储中?
How can I install a private SSL certificate into the trusted root certificate store on an azure web app?
推荐答案
不幸的是，我们无法将证书添加到Azure Web App上的受信任证书颁发机构.如果可能的话，安全隐患将是非常糟糕的.更多详细信息，请参阅其他但是我们可以使用允许我们执行此操作的Azure云服务.有关更多信息，请参阅文档.
But We can use Azure Cloud Service that allowed us to do that. More info please refer to the document.
如果要将证书安装到个人证书存储区，我们可以将 .pfx 文件上传到Azure应用，然后添加名为 WEBSITE_LOAD_CERTIFICATES的应用设置(其值设置为证书的指纹)将使其可用于您的Web应用程序.然后，证书将被安装到个人证书存储区.有关更多详细信息，请参考在Azure中使用证书网站应用程序. 如何获取SSL证书，请参考官方文档
If we want to install certificates to Personal certificate store , we could upload a .pfx file to the Azure App, and add an App setting named WEBSITE_LOAD_CERTIFICATES with its value set to the thumbprint of the certificate will make it accessible to your web application. Then the certificates will be installed to the Personal certificate store . More detail please refer to Using Certificates in Azure Websites Applications. How to obtained an SSL certificate please refer to the official document Secure your app's custom domain with HTTPS.
The easiest way to get an SSL certificate that meets all the requirements is to buy one in the Azure portal directly. This article shows you how to do it manually and then bind it to your custom domain in App Service.
这篇关于将证书安装到Azure Web应用程序上的受信任的根证书存储中的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
