I have found instructions for enabling ssl on an azure service when I give it a custom domain, but if I just use the default *.azurewebsites.net, how do I turn on SSL for that?
No action needed. SSL is enabled by default for web app services under azurewebsites.net
Note: You'll need at least a Basic service plan. SSL is not available in the Free and Shared plan. See https://azure.microsoft.com/en-us/pricing/details/app-service/plans/
Related
I have a dotnet website on Azure App Service, with a custom domain and their generated SSL cert. I get about a dozen hits a day (LOW traffic). The service level that azure requires is a B1 which includes the ssl cert. and custom domain, but $70 a month seems crazy high for the amount of traffic.
Is there any alternatives/solutions/workarounds to use the shared tier level with custom domain and SSL to have a server in the $20 range instead? I have looked at cloudflare, but still azure won't allow their ssl on any lower levels tiers.
I suppose an alternative is aws or google, but I imagine they have the same pricing? plus, I like the integrated tools with dotnet and Azure :(
Is there any alternatives/solutions/workarounds to use the shared tier
level with custom domain and SSL to have a server in the $20 range
instead?
No, As per the current Azure documentation To create custom domains & custom TLS/SSL bindings or enable client certificates for your App Service app, your App Service plan must be in the Basic and above tier ( Standard, Premium, or Isolated tier). It is the ASP (App Service Plan) tier.
Alternatively, As mentioned in this SO thread, you can use Azure front-door service Create Linux-based proxy server, and setup proxy and use it as a ssl-termination.
CloudFlare Free plan comes with a free SSL certificate. So essentially your traffic is SSL secured.
For more information you can refer this SO thread.
I wonder how exactly the https/ssl works on Azure when i have a shared plan. Microsoft states that i need at least basic plan to have SSL. When i try to access my site over "https://" protocol, apparently it works, and the browsers (I tested with Opera and Chrome) states that i have a secure connection.
Do you know how is this works? I have SSL even with shared plan, but it must be the certificate of the azurewebsites.net domain, and I just can't use my own?
On shared plan you can set a custom domain name but you cannot upload a custom SSL certificate. So you have to remain on the generic certificate *.azurewebsites.net that only matches yoursite.azurewebsites.net but not your custom domain name.
Question Background:
I am trying to upload an SSL certificate to Azure for my web app.
The Issue:
I located the SSL Certificate option within the settings and the following is shown.
There should be an option to upload my own SSL certificate but this is not present, why not?
In Azure App Service, you can only configure SSL on a custom domain if you are on a Basic pricing plan or Higher. The Free and Shared pricing plans do not support SSL configuration with custom domains.
If I create an azure website let's assume: myname.azurewebsites.net, I can access this by using http (http://myname.azurewebsites.net) or https (https://myname.azurewebsites.net).
What does this mean? Did I understood it right that basically I don't need an SSL certificate as it has one by default?
I need to build a web service that needs to use SSL. Therefore do I need to buy an ssl certificate and custom domain (not important)? I don't need a custom domain and the default one works fine for me. So can I use my service over SSL provided by Azure: https://myname.azurewebsites.net (is a wildcard certificate)?
If you need to build a web service that needs to use SSL I highly suggest that you use your own domain and your own SSL certificate (buy one) if you are going in production with it. If you just test/play around - than you can safely use the default provided one.
And you are correct about default provided one - you get a (free) SSL for your azure web site as long as it is only bound to the default XXX.azurewebsites.net domain. However the certificate you get there is a wildcard certificate issued to *.azurewebsites.net. I would not use it if I have to go for a production service!
If you are to use SSL features of Azure Web Sites with your own domain and certificate, check out the Pricing and requirement pages. There are important things to note!
I'll admit i am very new to web app development and have primarily developed offline. I am developing a facebook application and have decided to give windows azure a shot at being my host.
Facebook requires SSL to use and of course on my development machine this works fine, but i do not have my own SSL certificate. In order to have a custom SSL certificate I need to upgrade my azure subscription to get a custom domain and be able to upload my own custom SSL certificate.
Is there any alternative to get my site to allow SSL (https) requests during my development process because paying for a custom SSL, domain and reserved azure instance in an application during the initial build process seems to be a needless expense.
Windows Azure Web Sites is a prime candidate for Facebook application development. If you use the base domain mysite.azurewebsites.net you have SSL without needing your custom domain.
The reason for this being the azurewebsites.net domain has a wild card certificate in place.