尝试将证书添加到功能应用时，获取httpresponsemessage

Question

我正在通过ARM模板部署功能应用程序。我添加了以下片段，以添加Azure键Vault的证书，并添加了一个主机名绑定。

{
              "type": "Microsoft.Web/certificates",
              "apiVersion": "2019-08-01",
              "name": "[parameters('certificateName')]",
              "location": "North Europe",
              "dependsOn": [
                  "[resourceId('Microsoft.Web/sites', parameters('functionAppName'))]"
              ],
              "properties": {
                  "keyVaultId": "[resourceId(parameters('keyvaultRG'), 'Microsoft.KeyVault/vaults', parameters('keyvaultName'))]",
                  "keyVaultSecretName": "[parameters('existingKeyVaultSecretName')]",
                  "serverFarmId": "[resourceId('Microsoft.Web/serverFarms', parameters('hostingPlanName'))]"
              }
          },
          {
              "type": "Microsoft.Web/sites/hostnameBindings",
              "name": "[concat(parameters('functionAppName'), '/', parameters('customDomainName'))]",
              "apiVersion": "2019-08-01",
              "location": "North Europe",
              "dependsOn": [
                  "[resourceId('Microsoft.Web/certificates', parameters('certificateName'))]"
              ],
              "properties": {
                  "sslState": "SniEnabled",
                  "thumbprint": "[reference(resourceId('Microsoft.Web/certificates', parameters('certificateName'))).Thumbprint]"
              }
          }

但是当我不部署ARM模板时，我会在Microsoft.web/证书上遇到以下错误 “消息”：“参数httpresponsemessage具有无效的值。”

Answer 1

请检查以下步骤是否有助于解决该问题：

Microsoft.web/证书的错误“消息”：“参数{0}具有无效的值。”

请按以下步骤解决此问题：

• 启用Microsoft.web资源提供商，使用Azure PowerShell指导Azure键值访问Azure键值。

Login-AzureRmAccount 
Set-AzureRmContext -SubscriptionId AZURE_SUBSCRIPTION_ID 
Set-AzureRmKeyVaultAccessPolicy -VaultName KEY_VAULT_NAME -ServicePrincipalName <ServicePrincipalId> -PermissionsToSecrets get 

• 检查Azure密钥库的访问策略：Azure键Vault＆gt;访问政策＆GT;添加新（microsft.web）您的函数 - app

• azure powerShell命令将证书插入keyVault：

$pfxFilePath = "PFX_CERTIFICATE_FILE_PATH" # Change this path 
$pwd = "PFX_CERTIFICATE_PASSWORD" # Change this password 
$flag = [System.Security.Cryptography.X509Certificates.X509KeyStorageFlags]::Exportable 
$collection = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2Collection 
$collection.Import($pfxFilePath, $pwd, $flag) 
$pkcs12ContentType = [System.Security.Cryptography.X509Certificates.X509ContentType]::Pkcs12 
$clearBytes = $collection.Export($pkcs12ContentType) 
$fileContentEncoded = [System.Convert]::ToBase64String($clearBytes) 
$secret = ConvertTo-SecureString -String $fileContentEncoded -AsPlainText –Force 
$secretContentType = 'application/x-pkcs12' 
Set-AzureKeyVaultSecret -VaultName KEY_VAULT_NAME -Name KEY_VAULT_SECRET_NAME -SecretValue $Secret -ContentType $secretContentType # Change Name of Azure KV & Secret

下一步是使用keyVaultSecretName直接访问键车以获取值。

网站。参数 ：

 {
  "$schema": "https://schema.management.azure.com/schemas/2019-08-01/deploymentParameters.json",
  "contentVersion": "1.0.0.0",
  "parameters": {
    "functionAppName": {
      "value": "yourfunctionappname"
    },
    "customHostname": {
      "value": "yourcustomdomianname"
    },
    "existingKeyVaultId": {
      "value": "/subscriptions/subscriptionsID/resourceGroups/resourceGroupsName/providers/Microsoft.KeyVault/vaults/vaultsName"
    },
    "existingKeyVaultSecretName": {
      "value": "The key vaults SecretName"
    }
  }
}