Error when assigning SSL binding in Windows Azure - asp.net-mvc

I'm trying to configure SSL for my ASP.NET MVC web app in Azure. I succesfully uploaded the certificate in the portal, but when I try to assing my website to the certificate, I get an error that there is no endpoint listening.

I fixed it by repairing my SSL certificate.

Related

Should I put cert at both App Gw and Web App level

I have uploaded cert on azure application gateway but does not have done SSL binding at web app. Do I need to do SSL binding at web app level even I have uploaded cert on App GW?
If you are deploying Azure Web App behind Application gateway, in end to end scenarios you don't need to add auth cert. You can just enable App Service check box.
The reason being if the cert in Web App changes without notice, it will bring down the site. So, you don't need to add the cert to Application Gateway HTTP settings.

Trusted Certificate fails after upgrade from 4.6.1 to 4.7.2

After upgrading a service written in F# from 4.6.1 to 4.7.2 i startet getting a classic SSL/TLS error "The request was aborted: Could not create SSL/TLS secure channel".
TLS 1.2 is enabled on all servers.
I verified with Fiddler that the old version and the new version of the application both uses TLS 1.2 as they should and have done for a long time.
The requests appears to be identical.
The service runs as a Network Service, however i get the same error if i run it as admin.
The certificate is selfsigned and placed in Trusted Root Certification Auth.
The certificate is only used to internal https between our services.
If I add the certificate to Personal certificates in certmgr the error disappears and the service works!
From my view it is as if after upgrading to 4.7.2 the Trusted Ca certificates are "ignored".
Adding the certificate to Personal when its placed in Trusted Certificates is not a solution.
I havent been able to identify the change which somehow must have been introduced in 4.7.2.
What am i missing?

Secure Connection Failed when run asp.net mvc application with ssl

I set using in my asp.net mvc application SSL Enabled = true (so now is https://localhost:63892/ and http://localhost:12555/, but when I run application via Debug, it said "Secure Connection Failed". What I'm doing wrong?
Make sure the self-signed certificate that Visual Studio generated is trusted. The certificate is called IIS Express Development Certificate
http://blogs.msdn.com/b/robert_mcmurray/archive/2013/11/15/how-to-trust-the-iis-express-self-signed-certificate.aspx
Adding this in case if helps anyone: Using VisualStudio 2015, Windows 10, and IIS10 Express, even though I added the certificate I still wasnt able to access localhost over HTTPS. I resolved by uninstalling IIS10 Express and install IIS8 Express. I was then able to access localhost over HTTPS.

Can I use self-signed SSL certificate server to deploy Enterprise app over air?

After iOS 7.1 ,if we want to deploy our Enterprise app over air, the URL for the manifest.plist file has to be HTTPS.
For example:
itms-services://?action=download-manifest&url=https://example.com/manifest.plist
In my server I use a self-signed SSL certificate. When I tap the URL on an iPhone, it says Could not connect to <ip-address> and logs the typical
NSUnderlyingError=0x15d37040 "The certificate for this server is invalid. You might be connecting to a server that is pretending to be `<ip-address>`, which could put your confidential information at risk.
So, I want to know whether I can use the self-signed SSL certificate or not?
If I can, how do I resolve the problem the problem I've encountered?
First have the user install the self-signed SSL certificate on their device. Or use a free verified SSL service.
You will need to have the user install this file https://superuser.com/questions/97201/how-to-save-a-remote-server-ssl-certificate-locally-as-a-file
I believe this service provides browser-validated SSL certificates. https://www.startssl.com/?app=1

APNS setup for the server

I'm trying to setup our APNS server. I was looking at the instructions on this page:
http://www.raywenderlich.com/3443/apple-push-notification-services-tutorial-part-12
I'm understanding everything. Problem is that I have a website already SSL enables (SSL terminates at the load balancer) on AWS, following these instructions a while back:
"Public key certificate and private key doesn't match" when using Godaddy issued certificate
The website for APNS is telling me to get a CSR file, etc. But if I already have this SSL certification done, does it mean I have to start from scratch and re-key my key? :( I wasn't able to find information regarding this...
The APNS CSR has nothing to do with any certificates you already have.
You have to create certificates in the developer area of apples websites. You don't install those certificates to the web server... they are only used from the php script on your server to connect to the apple server as a client. Your script has to load them while they run.. but they are not installed in the web server or load balancer.

Resources