🔥 Hold the date. April 9th is the Live Coders Conference!. The Live Coders, an outgoing and enthusiastic group of friendly channels that write code, teach about technology, and promote the technical community.
💡 Learn more : Add an SSL certificate in Azure App Service.
📺 Watch the video : How to use Azure App Service managed certificates.
As you know, it is important to secure your applications. One of the security measures that you need to take is to protect traffic to and from your web application. You can do that by encrypting traffic with SSL certificates, so that traffic will always go through the HTTPS protocol.
Azure App Service makes it very easy to protect your application that has a custom domain, with SSL certificates. You can bring your own certificate, buy an App Service Certificate and now you can use a free App Service Managed Certificate. Each of these can be used for different requirements as you can see in the table below:
|Requirement||App Service Certificate||App Service Managed Certificate|
|Protect www domain (i.e. https://www.microsoft.com)||X||X|
|Protect naked domain (i.e. https://microsoft.com)||X|
|Protect wildcard domain (i.e. https://azure.microsoft.com)||X|
|Certificate is exportable||X|
|Costs||$69,99 (standard) - $299,99 (wildcard) / year||Free|
In this post, we'll protect an App Service Web App with a free App Service Managed Certificate.
If you want to follow along, you'll need the following:
Standard Azure domains (yourwebsite.azurewebsites.net) are already SSL protected by default, but custom domains aren't. So let's use an App Service Managed Certificate to protect a Web App with a custom domain. I start out with a website that runs in an Azure Web App under a custom domain and doesn't have any SSL bindings configured. When I navigate to this website, my browser warns me that my connection isn't private. Let's fix that.
(Website without SSL)
(TSL/SSL settings menu in a Web App in the Azure portal)
(Private Key Certificate settings in the Azure portal)
(Create App Service Managed Certificate in the Azure portal)
(Add TLS/SSL binding in the Azure portal)
That's it! Now, when you navigate to the website, the warning will no longer be visible. Instead, you'll see a green lock next to the URL. And when you click on it, you can see that the connection is secure and that the certificate is valid.
(Website with SSL)
Azure App Service Managed Certificates provide a great way to implement basic security for your application. It is free and once you've generated a certificate, it will renew itself, so you don't have to think about it. Read more about it here and check it out!