0

I am running a Flask API application, and I have an SSL Certificate. When I run flask server on localhost the certificate is applied from Flask successfully.

But when I use Ngrok to deploy the localhost on a custom domain, the certificate is changed to *.ngrok.com, how can I change that to my certificate?.

EDIT #1: I already have a certificate for the new hostname and I have already applied it on Flask, but ngrok is changing it.

saad saad
  • 39
  • 1
  • 8
  • You can't. ngrok.com presents its certificate. It must be a valid certificate for *.ngrok.com, anything else wouldn't make sense. – deceze Jun 18 '20 at 12:26
  • You can not change a certificate, it would invalidate the signature. You will have to get a new certificate for the new hostname. – Klaus D. Jun 18 '20 at 12:26
  • I already have a certificate for the new hostname and I have already applied it on Flask, but ngrok is changing it. – saad saad Jun 18 '20 at 12:31

2 Answers2

2

From the description on the ngrok docs, all TLS connections are terminated by ngrok. So, if you want to terminate your own TLS connections then you have to setup a custom domain as explained here, so that the domain matches the certificate. You can see more details on TLS tunnels part of the docs.

Ken4scholars
  • 6,076
  • 2
  • 21
  • 38
0

You expose your service through the URL *.ngrok.com. A browser or other client will make a request to *.ngrok.com. The certificate presented there must be valid for *.ngrok.com. If *.ngrok.com presents a certificate for example.com, any valid HTTPS client would reject it because the names do not match, which by definition makes it an invalid certificate and is a flag for a potential security problem, exactly what HTTPS is designed to mitigate.

If you want to present your certificate for example.com to the client, you need to actually host your site at example.com

deceze
  • 510,633
  • 85
  • 743
  • 889