search

umbraco / Umbraco.Cloud.Issues

Public issue tracker for Umbraco Cloud
24 stars 2 forks source link

Unable to install self-signed certificate in Umbraco Cloud. #735

Open sandeepkmrnishad opened 4 months ago

sandeepkmrnishad commented 4 months ago

Issue description

We are validating our SAML response through custom certificate (.CRT-self signed) . We want to install our custom certificate to the Umbraco cloud environment similar as “Trusted root certification Authorities” in windows. As per discussion with Umbraco team, Umbraco cloud is not providing such feature/functionality to validate certificate through "Trusted root".

We can establish trusted root relationship with our self sign certificate on our local machine/Azure VM by installing it in Trusted Root Authorities. The same we wanted to do in Umbraco Cloud.

Our multiple clients requested this feature to implement in Umbraco Cloud Project and we are unable to help them.

meyntony commented 4 months ago

@sandeepkmrnishad as discussed currently we don't support installing custom certificates in your Azure Web App like described in this document

But instead you could load your custom certificate from the file system, this would mean that in case you want to validate the signature of the custom certificate, you will not be able to as the Root certificate used to the sign your custom certificate does not exist with Umbraco Cloud.

pijemcolu commented 4 months ago

We don't use App Service Environments, but App Services "only". This complicates the part of the feature request with uploading a custom root certificate.

Uploading custom certificates and loading those on demand through c#, that'd be potentially possible even now and is a matter of implementation in Umbraco Cloud. Docs: https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate-in-code

Root CA cert updates are a large feature request, requesting changes to the underlying hosting model.