如何在Azure App服务中信任内部根CA
我有一个使用内部根CA提供的SSL证书来调用HTTPS端点的Azure函数。 没有做任何事情，我有一个正常的SSL协商误差。
我在函数应用程序的SSL设置中添加了root ca Cert，还在功能应用程序设置中添加了设置wording_load_root_certificate。
通过使用Kudu控制台，我试图卷曲我的HTTPS端点，并且仍然遇到SSL麻烦。 我想念什么吗？
I have an Azure Function calling an HTTPS endpoint using an SSL certificate that was provided by an internal Root CA.
Without doing anything, I have an SSL negotiation error which is normal.
I added the ROOT CA cert in the SSL Settings of my Function App, and I also added the setting WEBSITE_LOAD_ROOT_CERTIFICATES in the Function App Settings.
By using the Kudu Console, I tried to curl my HTTPS endpoint, and I'm still having SSL troubles.
Am I missing something?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
您不能针对在多租户环境中的Azure功能使用内部权威签名的证书。唯一可用的方法是使用应用程序服务环境（ASE）。使用ASE，将使您能够上传由私人/内部权限签署的发行和根证书，并在商店中注册，以便受到审问。
You can't use an internal authority signed certificate against an Azure Function that is in a multi-tenant environment. The only available approach is to use App Service Environment (ASE). Using ASE, will enable you to upload an issuing and root certificates that are signed by a private/internal authority and register them in the store to be able to be interrogated.
尝试按照以下步骤启用SSL。
App Service，然后选择TLS/SSL设置。专用键证书，然后单击创建应用服务托管证书。它打开一个窗口，该窗口单击创建按钮。自定义域，然后单击添加binding。自定义域名称，私有证书thumbprint及其类型，然后单击添加binding。按照 Microsoft文档，在Azure App Service中添加TLS/SSL证书。
Try to follow the below steps to enable SSL.
App serviceand then selectTLS/SSLsettings.Private Key Certificatesand then click onCreate App Service Managed Certificate. It opens a side window in that window click oncreate button.custom domainsand click onAdd binding.custom domainname,private certificate thumbprint, and its type then click onAdd Binding.As per the Microsoft Document, Add a TLS/SSL certificate in Azure App Service.