Azure - Why can I not upload an SSL certificate? - azure

Question Background:
I am trying to upload an SSL certificate to Azure for my web app.
The Issue:
I located the SSL Certificate option within the settings and the following is shown.
There should be an option to upload my own SSL certificate but this is not present, why not?

In Azure App Service, you can only configure SSL on a custom domain if you are on a Basic pricing plan or Higher. The Free and Shared pricing plans do not support SSL configuration with custom domains.

Related

Azure App Service SSL Certificate Not Trusted

https://www.ssllabs.com/ssltest/analyze.html?d=recruit.equitysim.ai
Situation:
A client needs to access our site over a secure connection but is unable to do so because of a problem with our certificate.
We purchased a wildcard certificate and set it up as per the documentation. If you notice in the provided link, our certificate is trusted.
We are using the Azure App Service to host our website on a paid level that includes custom domain and SSL support.
Problem:
According to the test, it appears that Microsoft's SSL certificate is not trusted - alternative names mismatch (See Certificate #2). We believe this to be the reason why our client is unable to access our site.
Any thoughts on the matter? We know it isn't an SNI problem because we have another site that is hosted on a VM that also requires SNI support and they can visit that site just fine.

how to turn on ssl for mydomain.azurewebsites.net?

I have found instructions for enabling ssl on an azure service when I give it a custom domain, but if I just use the default *.azurewebsites.net, how do I turn on SSL for that?
No action needed. SSL is enabled by default for web app services under azurewebsites.net
Note: You'll need at least a Basic service plan. SSL is not available in the Free and Shared plan. See https://azure.microsoft.com/en-us/pricing/details/app-service/plans/

Installing certificates to the trusted root certificate store on azure web apps

How can I install a certificate into an Azure Web App so that my azure webapp can communicate with a remote service via SSL (this particular certificate is not signed by a public CA)
I generated an ssl certificate with openssl and when I install it to the trusted root certificate authentication store on my local computer the runs fine. However when I upload the cert via the management portal I get errors that the certificate isn't trusted (which is correct) and the correct error for when a certificate is not installed.
How can I install a private SSL certificate into the trusted root certificate store on an azure web app?
Unfortunately, we cannot add a certificate to the trusted certificate authority on an Azure Web App. The security implications would be quite bad if that were possible. More detail info please refer to another SO thread.
But We can use Azure Cloud Service that allowed us to do that. More info please refer to the document.
If we want to install certificates to Personal certificate store , we could upload a .pfx file to the Azure App, and add an App setting named WEBSITE_LOAD_CERTIFICATES with its value set to the thumbprint of the certificate will make it accessible to your web application. Then the certificates will be installed to the Personal certificate store . More detail please refer to Using Certificates in Azure Websites Applications.
How to obtained an SSL certificate please refer to the official document Secure your app's custom domain with HTTPS.
 
The easiest way to get an SSL certificate that meets all the requirements is to buy one in the Azure portal directly. This article shows you how to do it manually and then bind it to your custom domain in App Service.

azure webapp access a CRM secure site with ssl

I have a .NET Web App on Azure space, that needs to communicate with our CRM server via Microsoft.Xrm.Client and .Portal. The CRM site is protected by SSL, we issue our own pfx files.
Currently the app brings up a "The remote certificate is invalid according to the validation procedure." error.
Is there any way to install a pfx file enabling our app to talk to our secure CRM system on our Azure account. What is the minumim pricing plan that would enable this facility?
You can read how to upload certificates and load them into the website context here,
https://azure.microsoft.com/en-us/blog/using-certificates-in-azure-websites-applications/
Remember to set the appsetting WEBSITE_LOAD_CERTIFICATES in the portal to the thumbprint or * for the certificate to be accessible from the web app.
I believe this is available even on the free plan. (But could be wrong, as normally play with SSL certs which do require Basic plan)

How to use HTTPS in Azure Web API

Currently my application url coresponds to HTTP only. How can I make it compatible with HTTPS also.. Can I do that specifically to single service only.
For first you should upload your SSL certificate through Azure Management panel (.pfx with private key) and attach it to your cloud service or web site.
Then setup HTTPS endpoint for your WEB API web role within your Azure cloud project, there you should also define SSL certificate thumbprint.
Regards.

Resources