Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Note

Top-level wildcard bindings (http://*:80/ and http://+:80) should not be used. Top-level wildcard bindings create app security vulnerabilities. This applies to both strong and weak wildcards. Use explicit host names or IP addresses rather than wildcards.

...

Code Block
netsh http delete urlacl url=<url-prefix-to-delete>

Register X.509

...

certificate

Use the netsh.exe tool to register certificates a certificate for Tax Balance Server.

Code Block
languagepowershell
netsh http add sslcert 
  ipport=<tax-balance-url-prefix>
  certhash=<tax-balance-certificate-thumbprint> 
  appid="{23842322-71a0-4aed-9852-eb1e5cea2c17}"
  • Replacing <tax-balance-url-prefix> with the URL prefix from appsettings.json

  • Replacing <tax-balance-certificate-thumbprint> with the X.509 certificate thumbprint from a certificate stored in the Windows certificate for the local machine.

Note

Use ipport parameter when binding X.509 to IP adress and port combination, e.g, 0.0.0.0:443. Use hostnameport when binding X.509 certificate to host name and port combination, e.g., localhost:443.