如何删除 Azure SSL 绑定? [英] How to remove Azure SSL binding?
问题描述
我在 Azure 上有一个生产站点，使用即用即付订阅.我也为它设置了两个自定义域名.MySite.org 和 www.MySite.org
I have a production site on Azure, with a Pay-As-You-Go subscription. I have two custom domain names set up for it, too. MySite.org and www.MySite.org
我网站的一些访问者通过 HTTPS 访问我的网站，但我从未打算使用 HTTPS.我不需要此站点的 SSL.他们收到一个令人震惊的浏览器警告:这个网站的安全证书有问题.我不知道他们为什么或如何使用 HTTPS，但无论如何，我应该能够从服务器端解决这个问题.
Some of my site's visitors are hitting my site via HTTPS, though I never intended to use HTTPS. I don't need SSL for this site. They get an alarming browser warning: There is a problem with this website’s security certificate. I don't know why or how they are using HTTPS, but no matter, I should be able to address this from the server side.
我想禁用 SSL 绑定，但在 Azure 管理门户中找不到任何地方可以执行此操作.作为一种解决方法，我决定尝试使用 URL 重写规则从 HTTPS 定向到 HTTP(通常会希望重定向到另一个方向.)，但证书警告仍然在浏览器中触发，因为浏览器仍在处理 HTTPS 请求首先，在重定向之前，到一个设置了 SSL 的站点.呃.
I want to disable the SSL binding, but I cannot find any place to do it in the Azure management portal. As a workaround, I decided to try a URL Rewrite rule to direct from HTTPS to HTTP (usually one would want to redirect the other direction.), but the certificate warning still fires in the browser, because the browser is still processing an HTTPS request first, before the redirect, to a site that does have SSL set up. Ugh.
我发现了这个:
Windows Azure 网站实际上预先配置为在 SSL 上运行，如果您不想要自己的域，则可以使用 SSL立即地.您所要做的就是浏览它！在你的浏览器，将前缀从 HTTP://更改为 HTTPS://，瞧！您的站点将响应，您将与它建立安全连接.但是，我们不建议使用它来保护敏感内容或应用程序，因为使用的通配符证书对所有Azure 网站.
Windows Azure Web Sites actually comes pre-configured to run on SSL, and if you don’t want your own domain, then you can use SSL immediately. All you have to do is simply browse to it! In your browser, change the prefix from HTTP:// to HTTPS:// and voila! Your site will respond and you will have a secure connection to it. However, we do not recommend using this to secure sensitive content or applications, because the wildcard certificate used is generic for all Azure Web Sites.
太好了，但我该如何关闭它?！
提前致谢，
李 C.
That's great, but how do I turn it off?!
Thanks in advance,
Lee C.
推荐答案
虽然你没有自己的证书，但如果有人参与了一个你不打算支持的计划，那么这对他们来说不会很有趣.目前，他们将获得 azurewebsites.net 的 Azure 通配符证书，当然，这对 mydomain.com(或其他)无效，并且他们会从浏览器收到令人讨厌的安全警告.
Whilst you don't have your own certificate, if someone is hitting a scheme you don't intend to support then it's not going to be much fun for them. At the moment they'd be getting the Azure wildcard cert for azurewebsites.net which, of course, won't be valid for mydomain.com (or whatever) and they'll get a nasty security warning from the browser.
尝试从 HTTPS 重定向到 HTTP 毫无意义，因为他们仍然会收到有关 HTTPS 请求的浏览器警告.
There's no point trying to redirect from HTTPS to HTTP as they'll still get the browser warning on the HTTPS request.
您也无法在 Azure 网站上禁用 HTTPS 方案，这是集中配置的一件事，您无法打开或关闭.
You also can't disable the HTTPS scheme on an Azure website, that's one thing configured centrally and not something you have the ability to turn on or off.
最好的办法是将免费的 SSL 证书加载到对您的域有效的网站上并执行您建议的重定向.查看 加载免费文件的完整指南将 SSL 证书导入 Azure 网站.
Your best bet is to simply load a free SSL certificate onto the site that's valid for your domain and do the redirect you suggest. Check out The complete guide to loading a free SSL certificate into an Azure website.
请记住，您只能在基本和标准 Azure 网站上加载自己的证书，如果您使用免费或共享，则无法执行此操作.
Keep in mind that you can only load your own cert on Basic and Standard Azure websites, you won't be able to do this if you're on Free or Shared.
这篇关于如何删除 Azure SSL 绑定?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
