无法在 Windows docker 容器中配置 ASP.NET HTTPS 端点

在 Windows docker 容器中运行 ASP.NET Core 时出现此错误...

Unhandled Exception: System.InvalidOperationException: Unable to configure HTTPS endpoint. No server certificate was specified, and the default developer certificate could not be found.

我能够让它发挥作用......

RUN dotnet dev-certs https

但我想安装一个实际的证书......现在是一个自签名证书，但后来是一个真正的证书。

因此，根据题为“使用 Powershell 在 Windows 容器中导入并绑定 SSL 证书”的博客文章，我创建了以下 PS 脚本以在容器构建中运行...

Import-PfxCertificate -FilePath C:\Certificates\xxx.pfx -Password (ConvertTo-SecureString -String "xxxx" -AsPlainText -Force) `
-CertStoreLocation "Cert:\LocalMachine\My"

$cert = (Get-ChildItem -Path cert:\LocalMachine\My -DNSName "xxx.mydomain.com")[0]

$thumb =  ($cert | Select-Object Thumbprint)."Thumbprint"
$guid = [guid]::NewGuid().ToString("B")

netsh http add sslcert ipport=0.0.0.0:5001 certhash=$thumb certstorename=MY appid="$guid"

这构建得很好并且似乎安装了证书。但是当我尝试运行容器时出现异常。我尝试使用 443 而不是 5001，同样的错误

这是我的 docker 文件供参考...

 escape=`
 FROM xxx/base
 EXPOSE 5000
 EXPOSE 5001
 COPY testing/ /testing
 COPY service/ /Service
 COPY certificates/ /certificates
 COPY scripts/ /scripts

 # install certificates

 RUN scripts/Install-Container-Certificate.ps1

 # configure ASP.NET Core

 ENV ASPNETCORE_URLS http://+:80;https://+:443
 EXPOSE 80
 EXPOSE 443
 # RUN dotnet dev-certs https
 # start ASP.NET Core

 ENTRYPOINT ["dotnet","/Service/xxxService.dll"]

我究竟做错了什么？

如果您想使用自签名证书在开发中运行，您可以遵循here https://github.com/dotnet/dotnet-docker/blob/master/samples/run-aspnetcore-https-development.md文章。对于生产场景here https://github.com/dotnet/dotnet-docker/blob/master/samples/host-aspnetcore-https.md.

简而言之，建议的方法与您正在使用的方法不同，因为可以引用包含您的证书和 dotnet 机密的文件夹来安装两个卷。

您可以将主机“%USER%\.aspnet\https”文件夹映射到来宾“/root/.aspnet/https/”，并将主机“%APPDATA%\microsoft\UserSecrets\”文件夹映射到来宾“/root/” .microsoft/usersecrets”。

生产和开发之间的主要区别在于，在生产中您不会使用机密，您需要传递包含证书和密码的文件夹才能使用环境变量访问它：

• ASPNETCORE_Kestrel__证书__默认__路径
• ASPNETCORE_Kestrel__证书__默认__密码

Kestrel 将在您的 Linux 客户机上的“/root/.aspnet/https/”文件夹中查找与您的项目同名的证书。

如果我使用您的 appsettings.Development.json 启用跟踪：

      "Logging": {
        "LogLevel": {
          "Default": "Trace ",
          "System": "Trace ",
          "Microsoft": "Trace"
        }
      }

  

如果我在没有在来宾容器中安装证书的情况下开始运行示例应用程序，我会看到以下错误：

    root@7afc71f877ce:/app# dotnet helloworld.dll
    dbug: Microsoft.Extensions.Hosting.Internal.Host[1]
          Hosting starting
    dbug: Microsoft.AspNetCore.Server.Kestrel.Core.KestrelServer[2]
          Failed to locate the development https certificate at '/root/.aspnet/https/helloworld.pfx'.
    dbug: Microsoft.AspNetCore.Server.Kestrel.Core.KestrelServer[1]
          Unable to locate an appropriate development https certificate.
    crit: Microsoft.AspNetCore.Server.Kestrel[0]
          Unable to start Kestrel.
    System.InvalidOperationException: Unable to configure HTTPS endpoint. No server certificate was specified, and the default developer certificate could not be found or is out of date.
    To generate a developer certificate run 'dotnet dev-certs https'. To trust the certificate (Windows and macOS only) run 'dotnet dev-certs https --trust'.

  

希望能帮助到你。