Lets encrypt
No edit summary |
No edit summary |
||
| Line 1: | Line 1: | ||
Let's encrypt issues free shortlived SSL certs - you can set up azure to renew them automatically: | |||
<nowiki>https://www.hanselman.com/blog/SecuringAnAzureAppServiceWebsiteUnderSSLInMinutesWithLetsEncrypt.aspx</nowiki> | <nowiki>https://www.hanselman.com/blog/SecuringAnAzureAppServiceWebsiteUnderSSLInMinutesWithLetsEncrypt.aspx</nowiki> | ||
Let's encrypt: | |||
# Add custom domain to your App | # Add custom domain to your App | ||
| Line 9: | Line 9: | ||
# Azure AD , App reg: xxxxLetsEncrypt | # Azure AD , App reg: xxxxLetsEncrypt | ||
## remember AppId: xxxxxxxx | ## remember AppId: xxxxxxxx | ||
# | # Add secret - name it login yyyyyyyy | ||
# Resource group running xxx, AccessControl, add permission, contributor , your app xxxLetsEncrypt should be contributor | # Resource group running xxx, AccessControl, add permission, contributor , your app xxxLetsEncrypt should be contributor | ||
# | # Go to the app service in azure portal xxx, Extensions, Azure Lets Encrypt, you must add connection strings in setting | ||
## AzureWebJobsDashboard | ## AzureWebJobsDashboard | ||
## AzureWebJobsStorage , both with the same valeu: connection string to your storage account | ## AzureWebJobsStorage , both with the same valeu: connection string to your storage account | ||
# | # Configure extension <nowiki>http://YOURSITENAME.scm.azurewebsites.net/LetsEncrypt</nowiki> | ||
## ...follow the guide/next - you get a box with your domain names, select one +request and install, repeat, -> you now have certs | ## ...follow the guide/next - you get a box with your domain names, select one +request and install, repeat, -> you now have certs | ||
# | # Go back to the app and use them on your custom domains, turn on always SSL. | ||
[[Category:Security]] | [[Category:Security]] | ||
Revision as of 08:17, 21 March 2023
Let's encrypt issues free shortlived SSL certs - you can set up azure to renew them automatically:
https://www.hanselman.com/blog/SecuringAnAzureAppServiceWebsiteUnderSSLInMinutesWithLetsEncrypt.aspx
Let's encrypt:
- Add custom domain to your App
- Add or reuse a storage account and copy the connectionstring for use in step 6 (the lets encrypt extension store data here)
- Azure AD , App reg: xxxxLetsEncrypt
- remember AppId: xxxxxxxx
- Add secret - name it login yyyyyyyy
- Resource group running xxx, AccessControl, add permission, contributor , your app xxxLetsEncrypt should be contributor
- Go to the app service in azure portal xxx, Extensions, Azure Lets Encrypt, you must add connection strings in setting
- AzureWebJobsDashboard
- AzureWebJobsStorage , both with the same valeu: connection string to your storage account
- Configure extension http://YOURSITENAME.scm.azurewebsites.net/LetsEncrypt
- ...follow the guide/next - you get a box with your domain names, select one +request and install, repeat, -> you now have certs
- Go back to the app and use them on your custom domains, turn on always SSL.
This page was edited 99 days ago on 02/10/2024. What links here