I need to move an azure cloud service (not an azure website) from a single domain ssl to a wildcard ssl using Windows Azure SDK 2.1 with Visual Studio 2010 ASP.NET 4.0 application.
Right now the application is using a CNAME record in dotster to map to the single ssl address to map from domain.com to myapp.cloudapp.net. It looks like A record is needed to map a wildcard ssl. I was able to create a reserved ip of the current vip ip used by the cloud service. But when i went to add the <ReservedIP> element to the service configuration file
<NetworkConfiguration>
<AddressAssignments>
<ReservedIPs>
<ReservedIP name="MyReservedIP"/>
</ReservedIPs>
</AddressAssignments>
</NetworkConfiguration>
The visual studio 2010 ide says “The element ‘ServiceDefinition’ in namespace ‘http://schemas.microsoft.com/ServiceHosting/2008/10/ServiceDefinition' has invalid child element ‘Network Configuration’ in namespace ‘http://schemas.microsoft.com/ServiceHosting/2008/10/'. List of possible elements expected: ‘WebRole, WorkerRole. NetworkTrafficRules’ in namespace ‘http://schemas.microsoft.com/ServiceHosting/2008/10/'
How can I setup a wildcard ssl to the azure cloud service?
P.S. We need to stay with Azure Cloud Service and cannot use Azure Websites
Here's the entire ServiceDefinition.csdef file
<?xml version="1.0" encoding="utf-8"?>
<ServiceDefinition name="WindowsAzureProject1" xmlns="http://schemas.microsoft.com/ServiceHosting/2008/10/ServiceDefinition" schemaVersion="2013-03.2.0">
<WebRole name=“MyWebsite vmsize="ExtraSmall">
<Sites>
<Site name="Web">
<Bindings>
<Binding name="Endpoint1" endpointName="Endpoint1" />
<Binding name="Endpoint2" endpointName="Endpoint2" />
</Bindings>
</Site>
</Sites>
<ConfigurationSettings>
<Setting name="AccountName" />
<Setting name="AccountSharedKey" />
</ConfigurationSettings>
<Endpoints>
<InputEndpoint name="Endpoint1" protocol="http" port="80" />
<InputEndpoint name="Endpoint2" protocol="https" port="443" certificate=“MY-SSL" />
</Endpoints>
<Imports>
<Import moduleName="Diagnostics" />
<Import moduleName="RemoteAccess" />
<Import moduleName="RemoteForwarder" />
</Imports>
<Certificates>
<Certificate name=“MY-SSL" storeLocation="LocalMachine" storeName="My" />
<Certificate name=“ROOT”-SSL storeLocation="LocalMachine" storeName="CA" />
</Certificates>
<Startup>
<Task commandLine="startup\disableTimeout.cmd" executionContext="elevated" />
<!--<Task commandLine="startup\NDP40-KB2624480-x64.exe /q" executionContext="elevated" />-->
</Startup>
</WebRole>
<NetworkConfiguration>
<AddressAssignments>
<ReservedIPs>
<ReservedIP name="MyReservedIP"/>
</ReservedIPs>
</AddressAssignments>
</NetworkConfiguration>
</ServiceDefinition>
