This is a sample and template Azure Web Role project containing start up scripts to disable ssl 2.0, ssl3.0 and RC4 cipher suites, configure recommended cipher suite order for your windows azure service or any windows server to be securely service on TLS/SSL channels. This is highly important to protect the data-in-transit for users of Azure, as nowadays the internet is pretty heavily militarized.
Перейти к файлу
microsoft-github-policy-service[bot] 01441345db
Auto merge mandatory file pr
This pr is auto merged as it contains a mandatory file and is opened for more than 10 days.
2024-04-25 05:21:11 +00:00
AzureCloudServiceSample Buildable 2019-04-24 13:53:08 -07:00
.gitattributes
.gitignore
LICENSE
README.md
SECURITY.md Microsoft mandatory file 2024-01-27 20:08:38 +00:00

README.md

azure-ssl-configure

This is a sample and template Azure Web Role project containing start up scripts to disable ssl 2.0, ssl3.0 and RC4 cipher suites, configure recommended cipher suite order for your windows azure service or any windows server to be securely service on TLS/SSL channels. This is highly important to protect the data-in-transit for users of Windows/Windows Azure, as nowadays the internet is pretty heavily militarized.

Licensed under MIT License

####Updated to be compatible with Windows XP -- 1/24/2017

How did it get created?

First,

Simply open with your own existing Azure Web Role project.

Second, add scripts

Add a new folder in your web role/worker role project "Startup", copy SSLConfigure.cmd and SSLConfigure.ps1 files into this folder, and add these files into your project.

Make these files being copied to output by setting their property "CopyToOutputDirectory“ to ”Copy Always".

Third, update service definition file

Add these lines to your ServiceDefinition.csdef file in your Azure project, place it under the corresponding role element of your role project.

<WebRole>
...
  <Startup>
    <Task commandLine="Startup\SSLConfigure.cmd" executionContext="elevated" taskType="simple">
	    <Environment>
          <Variable name="ComputeEmulatorRunning">
            <RoleInstanceValue xpath="/RoleEnvironment/Deployment/@emulated" />
          </Variable>
        </Environment>
    </Task>
  </Startup>
</WebRole>

Fourth, update the publish profile

If you have an existing Azure Web Role deployed, the recommended AzureDeploymentReplacementMethod in your publish profile is "AutomaticUpgrade", instead of "DeleteAndCreate". If you don't have existing deployment, you can use DeleteAndCreate too.

Publish your package and Done!

Then try to deploy it have enjoy!!