Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How to use Let's Encrypt with Azure's API Management

I have began developing by microservices architecture utilizing Azure's API management service as the reverse proxy. To provide custom URLs for the API management, you must specify a URL + include a certificate.

enter image description here

I understand that there is a manual way to receive certificates through let's encrypt, but is it possible to automate this for the Azure API Management?

like image 459
Dominic Cabral Avatar asked Jan 20 '17 17:01

Dominic Cabral


People also ask

Is Let's encrypt really free?

Is it really free? We do not charge a fee for our certificates. Let's Encrypt is a nonprofit, our mission is to create a more secure and privacy-respecting Web by promoting the widespread adoption of HTTPS. Our services are free and easy to use so that every website can deploy HTTPS.

What encryption does LetsEncrypt use?

Let's Encrypt is a non-profit certificate authority run by Internet Security Research Group (ISRG) that provides X. 509 certificates for Transport Layer Security (TLS) encryption at no charge.


2 Answers

It isn't possible, please vote for the feature request for the API management team.

https://feedback.azure.com/forums/248703-api-management/suggestions/17815891-support-for-let-s-encrypt

Some way to make it work manual:

  • request certificate
  • create API to prove to Letsencrypt you are the owner (domain verification)

Some way to create the certificate manual: sudo certbot certonly --manual

like image 113
Erik Oppedijk Avatar answered Sep 30 '22 21:09

Erik Oppedijk


Key Vault Acmebot appears to do what you're asking. Here is an excerpt from GitHub:

This application automates the issuance and renewal of ACME SSL/TLS certificates. The certificates are stored inside Azure Key Vault. Many Azure services such as Azure App Service, Application Gateway, CDN, etc. are able to import certificates directly from Key Vault.

like image 35
NoizyCr1cket Avatar answered Sep 30 '22 19:09

NoizyCr1cket