Azure应用服务中的相互SSL身份验证
我正在使用Azure App Service访问其他地方托管的Web服务。网络服务需要相互的TLS身份验证。
我已经从Web服务提供商那里获得了公共证书，但是在哪里可以在Azure安装此公共证书？在传统的服务器环境中，我将安装在证书存储中。但是在Azure中，我是否在应用程序网关上安装它？还是保险库？ Azure App Service如何知道已安装证书并显示该证书的位置？
I am using Azure App Service to access a webservice hosted elsewhere. The webservice requires mutual TLS Authentication.
I have been given the public certificate from the provider of the webservice but where do I install this public certificate in Azure? In a traditional server environment, I would install in the certificate store. But in Azure, do I install it on the application gateway? or the Vault? How does Azure app service know where the certificate is installed and present it?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
可以将私人证书和公共证书上传到Azure Web应用程序： https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate?tabs = papex%2cportal
在Azure Web应用中运行的代码可以访问不同的证书方式，这取决于您的应用程序使用的语言和运行时： https:///learlen.microsoft.com/ en-us/azure/app-service/configure-ssl-certificate-in-in-in-in-in-a>
关于您的其他问题：
“我是否在应用程序网关上安装它”？
据我了解，您的应用程序将向其他地方托管的Web服务拨打电话。 Azure Web应用传出流量不会通过应用程序网关 - 因此，不，在您的情况下，在Azure Web应用中存储证书并从代码中访问它是一个很好的解决方案。
“还是金库”？ Azure Web应用程序还可以将证书存储在Azure密钥库中。您的代码还可以直接连接到Azure密钥库，从而绕过Azure Web应用程序密钥存储。
最后，“ Azure App Service如何知道已安装证书并提供该证书？”请参阅我提供的前两个链接。
Private and Public certificates can be uploaded to Azure Web App: https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate?tabs=apex%2Cportal
Code running in Azure Web App can access those certificates in different ways, it depends on what language and runtime your application is using: https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate-in-code
In regards to your other questions:
"do I install it on the application gateway"?
From what I understand, your application is going to make outgoing calls to a webservice hosted elsewhere. Azure Web App outgoing traffic does not go through Application Gateway - so no, in your case storing certificate in Azure Web App and accessing it from the code is a good solution.
"or the Vault"? Azure Web App can also store certificates in Azure Key Vault. Your code could also connect to Azure Key Vault directly, bypassing Azure Web App key store altogether.
Finally, "How does Azure app service know where the certificate is installed and present it?" Please see the first two links I provided.