\n <\/p>\n

There are lots of let’s encrypt computerized instruments for azure however I additionally wished to see if I might use certbot in wsl to generate a wildcard certificates for the azure Friday web site after which add the ensuing certificates to azure app service. <\/p>\n

Azure app service finally wants a particular format known as dot PFX that features the complete certificates path and all intermediates.<\/p>\n

Per the docs, App Service non-public certificates should meet the next necessities<\/a>: <\/p>\n

Exported as a password-protected PFX file, encrypted utilizing triple DES. <\/li>\n

Accommodates non-public key not less than 2048 bits lengthy <\/li>\n

Accommodates all intermediate certificates and the basis certificates within the certificates chain.<\/li>\n<\/ul>\n
In case you have a PFX that does not meet all these necessities you may have Home windows reencrypt the file.<\/p>\n
I take advantage of WSL and certbot to create the cert, then I import\/export in Home windows and add the ensuing PFX.<\/p>\n
Inside WSL, set up certbot:<\/p>\n
sudo apt replacesudo apt set up python3 python3-venv libaugeas0sudo python3 -m venv \/decide\/certbot\/sudo \/decide\/certbot\/bin\/pip set up --upgrade pipsudo \/decide\/certbot\/bin\/pip set up certbot<\/pre>\n
Then I generate the cert. You may get a pleasant textual content UI from certbot and replace your DNS as a verification problem. Change this to verify it is two<\/strong> traces, and your domains and subdomains are right and your paths are right.<\/p>\n
sudo certbot certonly --manual --preferred-challenges=dns --email YOUR@EMAIL.COM --server https:\/\/acme-v02.api.letsencrypt.org\/listing --agree-tos --manual-public-ip-logging-ok -d \"azurefriday.com\" -d \"*.azurefriday.com\"sudo openssl pkcs12 -export -out AzureFriday2023.pfx -inkey \/and so forth\/letsencrypt\/reside\/azurefriday.com\/privkey.pem -in \/and so forth\/letsencrypt\/reside\/azurefriday.com\/fullchain.pem<\/pre>\n
I then copy the ensuing file to my desktop (examine your desktop path) so it is now within the Home windows world.<\/p>\n
sudo cp AzureFriday2023.pfx \/mnt\/c\/Customers\/Scott\/OneDrive\/Desktop\n<\/pre>\n
Now from Home windows, import the PFX, be aware the thumbprint and export that cert.<\/p>\n
Import-PfxCertificate -FilePath \"AzureFriday2023.pfx\" -CertStoreLocation Cert:LocalMachineMy -Password (ConvertTo-SecureString -String 'PASSWORDHERE' -AsPlainText -Pressure) -Exportable
Export-PfxCertificate -Cert Microsoft.PowerShell.SecurityCertificate::LocalMachineMy597THISISTHETHUMBNAILCF1157B8CEBB7CA1 -FilePath 'AzureFriday2023-fixed.pfx' -Password (ConvertTo-SecureString -String 'PASSWORDHERE' -AsPlainText -Pressure) <\/p><\/pre>\n
Then add the cert to the Certificates part of your App Service, beneath Deliver Your Personal Cert. <\/p>\n
$\"Custom$ <\/figure>\n
Then beneath Customized Domains, click on Replace Binding and choose the brand new cert (with the most recent expiration date).<\/p>\n
$\"image\"$ <\/p>\n
Subsequent step is to make this much more computerized or choose a extra automated answer however for now, I will fear about this in September and it solved my costly Wildcard Area subject.<\/p>\n

\n
\n
\n <\/p>\n
\n
\n
About Scott<\/h4>\n
\n
Scott Hanselman is a former professor, former Chief Architect in finance, now speaker, advisor, father, diabetic, and Microsoft worker. He’s a failed stand-up comedian, a cornrower, and a e book writer.<\/p>\n
$\"facebook\"\/$ <\/a>
\n $\"bluesky\"\/$ <\/a>
\n $\"subscribe\"\/$ <\/a>
\n About<\/a> \u00a0 Publication<\/a>\n <\/div><\/div>\n
\n
\n Internet hosting By<\/strong>
\n $\"Hosted$ <\/a>\n <\/div><\/div><\/div>\n

\n
\n
\n
\n
\n
\n
\n \n <\/p><\/div>\n\n","protected":false},"excerpt":{"rendered":"
There are lots of let’s encrypt computerized instruments for azure however I additionally wished to see if I might use certbot in wsl to generate a wildcard certificates for the azure Friday web site after which add the ensuing certificates to azure app service. Azure app service finally wants a particular format known […]<\/p>\n","protected":false},"author":2,"featured_media":1256,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[56],"tags":[205,1126,1129,1125,1124,265,1127,931,1128,1123],"class_list":["post-1254","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-software","tag-app","tag-azure","tag-certificates","tag-create","tag-encrypt","tag-lets","tag-service","tag-ssl","tag-wildcard","tag-wsl"],"_links":{"self":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/1254","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1254"}],"version-history":[{"count":1,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/1254\/revisions"}],"predecessor-version":[{"id":1255,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/1254\/revisions\/1255"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/media\/1256"}],"wp:attachment":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1254"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1254"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1254"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}