将证书安装到 Azure Web 应用程序上的受信任根证书存储区 [英] Installing certificates to the trusted root certificate store on azure web apps

问题描述

如何将证书安装到 Azure Web 应用中，以便我的 azure Web 应用可以通过 SSL 与远程服务通信(此特定证书未由公共 CA 签名)

How can I install a certificate into an Azure Web App so that my azure webapp can communicate with a remote service via SSL (this particular certificate is not signed by a public CA)

我使用 openssl 生成了一个 ssl 证书，当我将其安装到本地计算机上受信任的根证书身份验证存储时，运行良好.但是，当我通过管理门户上传证书时，我收到证书不受信任的错误(这是正确的)以及未安装证书时的正确错误.

I generated an ssl certificate with openssl and when I install it to the trusted root certificate authentication store on my local computer the runs fine. However when I upload the cert via the management portal I get errors that the certificate isn't trusted (which is correct) and the correct error for when a certificate is not installed.

如何将私有 SSL 证书安装到 Azure Web 应用程序的受信任根证书存储中?

How can I install a private SSL certificate into the trusted root certificate store on an azure web app?

推荐答案

很遗憾，我们无法将证书添加到 Azure Web 应用上的受信任证书颁发机构.如果可能的话，安全隐患将非常糟糕.更多详细信息请参考另一个 SO线程.

但是我们可以使用允许我们这样做的 Azure 云服务.更多信息请参考 文件.

But We can use Azure Cloud Service that allowed us to do that. More info please refer to the document.

如果我们想将证书安装到 Personal certificate store ，我们可以将 .pfx 文件上传到 Azure App，并添加一个名为 WEBSITE_LOAD_CERTIFICATES 的 App 设置 将其值设置为证书的指纹将使您的 Web 应用程序可以访问它.然后证书将安装到个人证书存储.更多详情请参考 在 Azure 中使用证书网站应用程序.SSL证书获取方法请参考官方文档使用 HTTPS 保护您应用的自定义域.

If we want to install certificates to Personal certificate store , we could upload a .pfx file to the Azure App, and add an App setting named WEBSITE_LOAD_CERTIFICATES with its value set to the thumbprint of the certificate will make it accessible to your web application. Then the certificates will be installed to the Personal certificate store . More detail please refer to Using Certificates in Azure Websites Applications. How to obtained an SSL certificate please refer to the official document Secure your app's custom domain with HTTPS.  

获得满足所有要求的 SSL 证书的最简单方法是 直接在 Azure 门户中购买一个.本文将向您展示如何手动执行此操作，然后将其绑定到应用服务中的自定义域.

The easiest way to get an SSL certificate that meets all the requirements is to buy one in the Azure portal directly. This article shows you how to do it manually and then bind it to your custom domain in App Service.

这篇关于将证书安装到 Azure Web 应用程序上的受信任根证书存储区的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！