SSL in Asp.Net Core doesn't work

Question

I created a simple web application from visual studio Web Application(Net.Core) template with individual user account authorization.

Then, I enabled SSL in Project->MyProject Properties..., copied URL with https to App Url.

Finally, I added:

services.AddMvc(options =>
{
    options.Filters.Add(new RequireHttpsAttribute());
});

to Startup.

And it doesn't work! When I'm starting the application, it just simply turns off after a second, and nothing happens, no error, nothing!

What's wrong with SSL in Asp.Net Core, and how can I enable it correctly?

If I understand correctly, you should use SSL offloading at the reverse proxy server (IIS or nginx), and at Kestrel it should process only HTTP. No documentation right now, docs.asp.net/en/latest/security/enforcing-ssl.html — Lex Li
– Lex Li, Commented Oct 12, 2016 at 10:31
Are you using IIS Express to host it in VS? Then you might try to use Jexus Manager to add an HTTPS binding to the web site, jexusmanager.com — Lex Li
– Lex Li, Commented Oct 12, 2016 at 10:35
@LexLi yes, I'm using IIS Express. It already has console, maybe I should use its console? — Yurii N.
– Yurii N., Commented Oct 12, 2016 at 10:39
Lex Li - IIS Express already does the SSL offloading. And there's no need to use any 3rd party tools, just configure it in the debug settings. — blowdart
– blowdart, Commented Oct 12, 2016 at 17:23

Tseng · Accepted Answer · 2016-10-12 11:28:38Z

21

For development testing you need to enable SSL first.

Right click the project > Properties > Debug

Choose "IIS Express" in profile
Check "Enable SSL"

If your debugging stops after starting (no process ID found), then you have to install the IIS Express self-signed certificate into the certificate store.

You can follow this guide here. It's bit older but still applies to Visual Studio 2015. It's due to a bug in Update 3 where IIS Certificate isn't installed in the trusted certificate storage correctly.

Alternatively,

hit Win+R, type run "mmc.exe"
File > Add Snap-in > Choose "Certificates" > Add > Computer Account > Next > Finish
Hit OK
Go to "Personal/Certificates". Look for "localhost" Zertificate
Drag & Drop the certificate to "Trusted Root Certification Authorities"
Close the MMC. Restart Visual Studio 2015

Now you should be able to debug it.

answered Oct 12, 2016 at 11:28

Tseng

64.5k18 gold badges200 silver badges215 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Ebbelink Over a year ago

Thank you, why is this not enabled by default?

Tseng Over a year ago

@Madailei: It should be by now. The answer was related to ASP.NET Core 1.0 which did run on Visual Studio 2015. The newer Templates and on VS 2017.8 should create new projects with SSL already. Also a problem back then was, that there was no tooling for developer certificates. The new .NET Core SDKs install an developer certificate, so it works w/o manual intervention on the certificates to make them trusted in the browser

Tseng Over a year ago

Also these days we don't use [RequireHttps] attributes and use the middleware instead, see learn.microsoft.com/en-us/aspnet/core/security/…

Collectives™ on Stack Overflow

SSL in Asp.Net Core doesn't work

1 Answer 1

3 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related