Adding IP based SSL support

shibayan · Aug 8, 2018 · a66a0f9 · a66a0f9
1 parent 8276184
commit a66a0f9
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 4 deletions.
diff --git a/AzureLetsEncrypt/AddCertificate.cs b/AzureLetsEncrypt/AddCertificate.cs
@@ -44,7 +44,7 @@ public static async Task RunOrchestrator([OrchestrationTrigger] DurableOrchestra
 
             // ACME Challenge のために Kudu API でファイルを作成
             await context.CallActivityAsync(nameof(SharedFunctions.Authorization), (site, authzUrl));
-            
+
             if (!await context.CallActivityAsync<bool>(nameof(SharedFunctions.WaitChallenge), orderDetails))
             {
                 log.LogError($"Cannot generate certificate: {hostNameSslState.Name}");
@@ -56,7 +56,7 @@ public static async Task RunOrchestrator([OrchestrationTrigger] DurableOrchestra
             await context.CallActivityAsync(nameof(SharedFunctions.UpdateCertificate), (site, $"{hostNameSslState.Name}-{thumbprint}", pfxBlob));
 
             hostNameSslState.Thumbprint = thumbprint;
-            hostNameSslState.SslState = SslState.SniEnabled;
+            hostNameSslState.SslState = request.UseIpBasedSsl ?? false ? SslState.IpBasedEnabled : SslState.SniEnabled;
             hostNameSslState.ToUpdate = true;
 
             await context.CallActivityAsync(nameof(SharedFunctions.UpdateSiteBinding), site);
@@ -99,5 +99,6 @@ public class AddCertificateRequest
         public string ResourceGroupName { get; set; }
         public string SiteName { get; set; }
         public string Domain { get; set; }
+        public bool? UseIpBasedSsl { get; set; }
     }
 }
diff --git a/README.md b/README.md
@@ -2,7 +2,7 @@
 
 [![Build status](https://ci.appveyor.com/api/projects/status/bhbdscxn7f33ne1p?svg=true)](https://ci.appveyor.com/project/shibayan/azure-appservice-letsencrypt)
 
-This functions provide automation of Let's Encrypt for Azure App Service. This project started to solve some problems.
+This function provide automation of Let's Encrypt for Azure App Service. This project started to solve some problems.
 
 - Support multiple app services
 - Simple deployment and configuration
@@ -61,7 +61,7 @@ Run `AddCertificate_HttpStart` function with parameters.
 ```sh
 curl https://***.azurewebsites.net/api/AddCertificate_HttpStart?code=*** -X POST \
     -H 'Content-Type:application/json' \
-    -d "{"ResourceGroupName":"***","SiteName":"***","Domain":"***"}" 
+    -d "{"ResourceGroupName":"***","SiteName":"***","Domain":"***","UseIpBasedSsl":(true/false)}"
 ```
 
 ### Renew certificates