search

MicrosoftDocs / azure-docs

Open source documentation of Microsoft Azure
https://docs.microsoft.com/azure
Creative Commons Attribution 4.0 International
10.29k stars 21.48k forks source link

Java on WAWS SSL binding of outbound connection #34919

Closed theav8or closed 5 years ago

theav8or commented 5 years ago

[Enter feedback here] Cases involving outbound connection SSL binding for Java (Springboot) are fairly common, guide can use a section on keystore configuration that does not require admin privileges:

  1. On my local environment import the public certificate in a new keystore.
  2. Load the new keystore on webapp Azure (D:/home/site/wwwroot/cer/myKeystore.jks)
  3. Add these java entries to web.config and restart service: Djavax.net.ssl.trustStore=D:/home/site/wwwroot/cer/ myKeystore.jks Djavax.net.ssl.trustStorePassword=*****

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

KrishnaG-MSFT commented 5 years ago

@theav8or Thanks for your comment. We are actively investigating and will get back to you shortly.

AjayKumar-MSFT commented 5 years ago

@theav8or, Thanks for sharing your valuable feedback! Your feedback has been shared with the content owner for further review.

Flanker32 commented 5 years ago

@theav8or Thanks for your feedback, so you want to update the web.config file to use the keystore file? If so, you could do this with the maven-plugin, just specify what you want to upload and the destination(relative to wwwroot) and maven plugin will upload these files for you, here is an example.

<plugin>
        <groupId>com.microsoft.azure</groupId>
        <artifactId>azure-webapp-maven-plugin</artifactId>
        <version>1.7.0</version>
        <configuration>
          ...
          <deployment>
            <resources>
              <resource>
                <directory>${PATH_TO_WEB_CONFIG}</directory>
                <includes>
                  <include>web.config</include>
                </includes>
              </resource>
              <resource>
                <directory>${PATH_TO_CERTIFICATE}</directory>
                <targetPath>/cer</targetPath> <!-- It will deploy to /wwwroot/cer/-->
                <includes>
                  <include>*.jks</include>
                </includes>
              </resource>
            </resources>
          </deployment>
        </configuration>
      </plugin>
AjayKumar-MSFT commented 5 years ago

@theav8or, Just checking if the suggestions posted above helps or you need further assistance on this issue.

AjayKumar-MSFT commented 5 years ago

@theav8or, Since we have not heard back from you we will now proceed to close this thread. If there are further questions regarding this matter, please tag us in your reply and we will gladly continue the discussion.