azurewebsites.net 内置证书

Question

我在 Azure 中创建了使用 *.azurewebsites.net 内置证书的 Web 应用程序。 SSL 在这里工作得很好。

我最近创建了另一个网络应用程序，它使用的证书是 MYSITE.azurewebsites.net。该证书具有与另一个证书完全不同的链——其根在我的机器上不受信任。

谁能解释为什么一个网站会使用通配符而另一个网站不会？另外，为什么证书链会不同？

(通配符证书具有 DigiCert 根，而站点特定域 (MYSITE.azurewebsites.net) 具有 Cisco 伞式根 CA)

Answer 1

我写信给 Azure 支持并联系了他们的 Azure Web 应用产品组。他们给了我以下消息

This Cisco Umbrella certificate is not coming from Azure. You doesn’t have any SSL binding nor uploaded any certificate into your subscription.

Most likely your client machine is in a network protected by Cisco Umbrella product. Kindly contact to Cisco Umbrella product support team.

Another option to resolve this issue is to bind a custom domain and add a SSL certificate (Free or App Service or any other certificate) so that you do not use .azurewebsites.net URL.

I am providing you relevant articles which will give you all the details about adding custom domain and binding SSL to your App Service.

You can go through them once and then feel free to reach out to me if you have any questions or concerns

https://learn.microsoft.com/en-us/azure/app-service/manage-custom-dns-buy-domain -> Buy a custom domain name for your Azure App Service.

https://learn.microsoft.com/en-us/azure/app-service/app-service-web-tutorial-custom-domain -> Add custom domain to your Azure App Service.

https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate-> Bind SSL certificate