如何通过本地机器在Azure Service Fabric中的SSL上进行休息？

Question

ERRORS：

Exception:
Inner Exception 1:
HttpRequestException: An error occurred while sending the request.


Inner Exception 2:
WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.

Inner Exception 3:
AuthenticationException: The remote certificate is invalid according to the validation procedure.

如何打电话？

例外表明，根据验证过程，远程证书是无效的。
检查证书是否正确安装在机器上。

在服务织物上运行的

SP.NET核心服务中增强HTTPS。

Answer 1

PFX

文件，请将证书导入

certificate store

。

PS C:\mycertificates> Import-PfxCertificate -FilePath .\mysslcertificate.pfx -CertStoreLocation Cert:\LocalMachine\My -Password (ConvertTo-SecureString "!Passw0rd321" -AsPlainText -Force)

private X509Certificate2 FindMatchingCertificateBySubject(string subjectCommonName)
{
    using (var store = new X509Store(StoreName.My, StoreLocation.LocalMachine))
    {
        store.Open(OpenFlags.OpenExistingOnly | OpenFlags.ReadOnly);
        var certCollection = store.Certificates;
        var matchingCerts = new X509Certificate2Collection();
    
    foreach (var enumeratedCert in certCollection)
    {
      if (StringComparer.OrdinalIgnoreCase.Equals(subjectCommonName, enumeratedCert.GetNameInfo(X509NameType.SimpleName, forIssuer: false))
        && DateTime.Now < enumeratedCert.NotAfter
        && DateTime.Now >= enumeratedCert.NotBefore)
        {
          matchingCerts.Add(enumeratedCert);
        }
    }

        if (matchingCerts.Count == 0)
    {
        throw new Exception($"Could not find a match for a certificate with subject 'CN={subjectCommonName}'.");
    }
        
        return matchingCerts[0];
    }
}

adding

TLS/SSL证书

在Azure App Service中

为Azure App Service提供了TLS互构验证。 有关更多信息，请参阅

MSdoc和Solink

。