如何删除Azure SSL绑定? [英] How to remove Azure SSL binding?

问题描述

我在Azure上有一个生产站点，带有按需付费订阅.我也为此设置了两个自定义域名. MySite.org和www.MySite.org

I have a production site on Azure, with a Pay-As-You-Go subscription. I have two custom domain names set up for it, too. MySite.org and www.MySite.org

我的某些网站访问者通过HTTPS访问我的网站，尽管我从未打算使用HTTPS.我不需要此站点的SSL.他们得到一个令人震惊的浏览器警告:该网站的安全证书有问题.我不知道他们为什么或如何使用HTTPS，但是无论如何，我应该能够从服务器端解决这个问题.

Some of my site's visitors are hitting my site via HTTPS, though I never intended to use HTTPS. I don't need SSL for this site. They get an alarming browser warning: There is a problem with this website’s security certificate. I don't know why or how they are using HTTPS, but no matter, I should be able to address this from the server side.

我想禁用SSL绑定，但是在Azure管理门户中找不到任何可以执行此操作的地方.作为一种解决方法，我决定尝试使用URL重写规则将HTTPS定向到HTTP(通常是要重定向另一个方向.)，但是证书警告仍然会在浏览器中触发，因为浏览器仍在处理HTTPS请求.首先，在重定向之前，先转到已设置SSL的网站. gh.

I want to disable the SSL binding, but I cannot find any place to do it in the Azure management portal. As a workaround, I decided to try a URL Rewrite rule to direct from HTTPS to HTTP (usually one would want to redirect the other direction.), but the certificate warning still fires in the browser, because the browser is still processing an HTTPS request first, before the redirect, to a site that does have SSL set up. Ugh.

我发现了:

Windows Azure网站实际上已预先配置为可以在SSL上运行， 如果您不想拥有自己的域，则可以使用SSL 立即地.您所要做的就是浏览它！在你的 浏览器，将前缀从HTTP://更改为HTTPS://，瞧！你的 网站将做出响应，并且您将与其建立安全连接. 但是，我们不建议使用此方法来保护敏感内容或 应用程序，因为使用的通配符证书对所有应用程序都是通用的 Azure网站.

Windows Azure Web Sites actually comes pre-configured to run on SSL, and if you don’t want your own domain, then you can use SSL immediately. All you have to do is simply browse to it! In your browser, change the prefix from HTTP:// to HTTPS:// and voila! Your site will respond and you will have a secure connection to it. However, we do not recommend using this to secure sensitive content or applications, because the wildcard certificate used is generic for all Azure Web Sites.

那太好了，但是如何关闭它呢?

提前致谢，
李C.

That's great, but how do I turn it off?!

Thanks in advance,
Lee C.

推荐答案

虽然您没有自己的证书，但是如果有人采用了您不打算支持的方案，那么这对他们来说就不会很有趣.目前，他们将获得azurewebsites.net的Azure通配符证书，当然，该证书对mydomain.com(或任何其他名称)无效，并且他们将从浏览器中收到讨厌的安全警告.

Whilst you don't have your own certificate, if someone is hitting a scheme you don't intend to support then it's not going to be much fun for them. At the moment they'd be getting the Azure wildcard cert for azurewebsites.net which, of course, won't be valid for mydomain.com (or whatever) and they'll get a nasty security warning from the browser.

尝试从HTTPS重定向到HTTP没有任何意义，因为它们仍然会在HTTPS请求中收到浏览器警告.

There's no point trying to redirect from HTTPS to HTTP as they'll still get the browser warning on the HTTPS request.

您也不能在Azure网站上禁用HTTPS方案，这是集中配置的一件事，您无法打开或关闭.

You also can't disable the HTTPS scheme on an Azure website, that's one thing configured centrally and not something you have the ability to turn on or off.

您最好的选择是简单地将免费的SSL证书加载到对您的域有效的网站上，然后执行建议的重定向.查看加载免费内容的完整指南将SSL证书导入Azure网站.

Your best bet is to simply load a free SSL certificate onto the site that's valid for your domain and do the redirect you suggest. Check out The complete guide to loading a free SSL certificate into an Azure website.

请记住，您只能在Basic和Standard Azure网站上加载自己的证书，如果您处于免费"或共享"状态，则将无法执行此操作.

Keep in mind that you can only load your own cert on Basic and Standard Azure websites, you won't be able to do this if you're on Free or Shared.

这篇关于如何删除Azure SSL绑定?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！