Azure 应用程序网关运行状况检查证书不匹配
我正在尝试将我们的 API 管理实例移至应用程序网关后面。我创建了一个私有 dnszone，API 管理 ETC 正在其上侦听。我为此私有 DNS zone0 创建了自签名证书。
将根证书上传到安全性下的证书选项卡以及应用程序网关的 HTTP(s) 设置选项卡下。但是我的自定义健康探针和健康检查不断提到 CN 名称与后端之一不匹配。
我必须提到的是，侦听器的主机名与我在私有 DNS 区域上使用的主机名不同。这是一个问题吗？
I am trying to move our API Management instance behind the application gateway. I created a private dnszone on which the API management ETC is listening. I created Self Signed certificates for this private DNS zone0.
Uploaded the root certificate to the certificates tabs under security, as well as under the HTTP(s) settings tab of the application gateway. however my custom healt probe and health check keep mentioning that the CN Name does not match that one of the backend.
I have to mention that hostname of the listener is a different hostname (our public domain name) than the hostname i used on the private DNS Zone. Is this a problem?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
您必须将应用程序网关使用的相同自定义域添加到 api 管理服务。
API 管理是多站点服务，因此它不会响应未在其自定义域下定义的自定义主机名，因为它根本不知道必须将传入请求路由到哪个组件/站点，也提取相同的.CER 如果您选择端到端 ssl 加密，则上传到 api 管理的 pfx 证书的证书应添加到后端 http 设置中以用于白名单，如果您添加其他证书，则应将其添加到后端 http 设置中。会得到证书不匹配的信息 错误。
You have to add the same custom domain used by application gateway to the api management service.
Api management is multi site service so it does not respond to the custom host names that are not defined under its custom domains because simply it does not know to which component/site it has to route the incoming request, also the the same extracted .CER certificate of the pfx certificate uploaded to api management should be added to the backend http settings for whitelisting purposes if you chose end to end ssl encryption, if you add a different certificate you will get a certificate mismatch error.