How to configure SSL in Azure Application GateWay with intermediate certificate and pfx file?

1
votes

I have an Azure Application GateWay listening to 443 and redirecting traffic to 3 VM (ubuntu) listening to port 80 with nginx has reverse proxy, which redirect to pm2 node server, this is for Server Side Rendering with Angular Universal

When I create a new Listener in the Application Gateway I upload the pfx file enter image description here

Now when I browse my sites I get a secure connection, but when I try to share a url in social media like facebook, twitter or linkedin I get an error with the certificate, so images and keywords are not displayed

I found this site that allows me to check SSL configurations (https://www.sslshopper.com/ssl-checker.html), the results shows that I´m missing the intermediate certificate

  • If I install the SSL into a VM without the Application Gateway and redirect clients to that VM, then everything works great.

  • I have been changing Listeners, Rules and even try SSL Settings which is in preview, but no luck so far

Any idea what am I missing ?

Thanks in advance

1
azuresslazure-application-gateway
Is that the public certificate ?. – Revan
I bought the certificate in DonDominio and it was issued by Digicert – Luis Lopez
Which SKU are you using for appgw? – Nancy Xiong
Standard V2 with autoscale – Luis Lopez

1 Answers

1
votes

Hope this helps somebody else. There some ssl providers that do not include the intermediate certificate in the .pfx file, so you have to do this yourself in order to make it work in azure AG. Steps are really simple:

  1. Install OpenSSL (Yes, even if you buy the SSL)
  2. Download the files(.key, .crt, .ca.crt) from your provider into a folder
  3. Execute this command: openssl pkcs12 -export -out [certificate-name].pfx -inkey [certificate-name].key -in [certificate-name].crt -certfile [certificate-name].ca.crt , this will include the intermediate certificate into your .pfx file
  4. Upload the .pfx file to your application gateway