3

For Application gateway all documentation says to upload pfx certificate but when I go to http settings for backend pool it only allows ".cer" certificate and it wont allow ".pfx" file to be uploaded, error displayed says wrong format ? m i doing something wrong or somehow Azure has changed functionality but documentation is still not uploaded . Strangely through this command I am able to upload PFX

az network application-gateway ssl-cert create

Screenshot attached

enter image description here

Update : I am trying to do this for an existing Application Gateway Update 2 : Strangely when I am creating a gateway Azure shows me option for PFX but I dont know why it become cer if I am trying to do this for an existing one.

Is this one of Microsoft's easter eggs??

Shui shengbao
  • 18,746
  • 3
  • 27
  • 45
BlindSniper
  • 1,731
  • 3
  • 16
  • 30

1 Answers1

2

It seems you select wrong entrance on Portal.

If you configure Add HTTP setting, you really need a .cer certificate.

enter image description here

More information please refer to this link.

The command az network application-gateway ssl-cert create is used for configure SSL. You could find it on Portal Settings--Listener.

enter image description here

Shui shengbao
  • 18,746
  • 3
  • 27
  • 45
  • Can you explain one more thing does this pfx certificate has any relation with cer certificate we upload in http settings – BlindSniper Jan 17 '18 at 07:00
  • @BlindSniper Based on my understanding, pfx certificate contains private key(cer file) and public key. – Shui shengbao Jan 17 '18 at 07:03
  • For `HTTP Settings`, it works for probe to check your web app service status, it only needs a private key no need public key. So, you only need upload a .cer file. – Shui shengbao Jan 17 '18 at 07:06
  • so just to confirm if I have a cert1.cer for a vm i need to upload it for http settings and also I need to convert that too pfx using its private key and upload that pfx file too. – BlindSniper Jan 17 '18 at 07:13
  • Yes, you are right. You need http setting for probe for checking web status. – Shui shengbao Jan 17 '18 at 07:15
  • If you have a pfx file and know the passphrase(.crt), you could export the private key(.cert). – Shui shengbao Jan 17 '18 at 07:18
  • I have a linux vm with which I am provided a cer file. so I uploaded tht cer file in http settings but when creating pfx it asked for private key which i didnt have.so I am in a fix – BlindSniper Jan 17 '18 at 07:22
  • Let us [continue this discussion in chat](http://chat.stackoverflow.com/rooms/163304/discussion-between-shengbao-shui-msft-and-blindsniper). – Shui shengbao Jan 17 '18 at 07:24