Custom HTTPS Dev Environment using .NET Core, Kestrel & certificates

[@binarythistle]

⏲️ *Jump-to Time Codes!* ⏲️ ---------------------------------------------- *INTRODUCTION* - 2:21 Course Overview - 5:46 Demo - 6:27 Tooling *HTTPS OVERVIEW * - 6:49 What is HTTPS, SSL & TLS? - 7:46 Certificate & Authorities Overview - 9:44 What does a certificate contain? - 10:30 Public & Private Key Overview - 11:48 HTTPS How it Works (Interaction Diagram) *LOCALHOST SET UP * - 14:37 Scaffold Up our API - 19:25 Generating a Local Dev Certificate - 22:37 The need for a custom domain *CUSTOM DOMAIN PART 1 * - 23:56 Update HOSTS File - 27:02 Host name resolution order - 28:15 Create our Self-Signed Certificate - 35:00 Import Certificate into Trusted Root *CUSTOM DOMAIN PART 2 * - 36:58 - User Secrets Overview - 38:30 - Configure User Secrets - 42:14 - Update appsettings.Development.json - 44:07 - Create HostConfig static Class - 46:00 - Update Program Class - Read in Config - 49:55 - Load Certificate into Kestrel - 55:13 - Listen on Specific IP Address *FINAL THOUGHTS & ACKNOWLEDGEMENTS * - 57:57 - Wrap Up - 58:39 - Credits

[@adamq272]

You are the only one who explain all the details clearly, I appreciate that. Thanks a lot.

[@antonyrichard369]

Amazing video. Unbelievable such a kind effort to help others also to learn what you learned. Your sequence of teaching is so good. Thank you very much for this video

[@insanekelso]

Greetings from the Scottish Borders. Why has it taken so long for KZbin algo to suggest your videos to my feed?? These are without doubt the best tutorials on KZbin and I watched loads. Love the way you don’t copy/paste code or waffle while typing. Keep them coming

[@binarythistle]

Hi Ian, thanks mate - I wish I had more control over the KZbin algorithm! Glad you've found the channel though and are enjoying the content. Cheers, Les

[@janivimal]

Fantastic session with lots of learning , at the same time very interesting to watch. Thank you for putting so much effort in creating and sharing this with developer community. I would love to see more videos taking step further to see how can we deploy this into cloud , ex running as a container. Thanks again !!

[@christopherdunderdale7238]

Suddenly getting the urge for a dram while listening to you Les 😅 Great content thank you!

[@RobertCoulston_au]

Brilliant - now I understand certificates with some degree of confidence

[@msharief6273]

Thank you! It was treat to watch this video! Loved it ! Enjoyed it !

[@jakubmichalenko7990]

Thank you very much, I am just finishing my first production Api and I have been stuck on this for past 2 days :DD

[@frankoppermann1877]

Very nice explained. Great job.

[@TheDemoded]

There is a Auto completion in Powershell. If you start typing "convertto-s" and press TAB you'll get "ConvertTo-SecureString". It works with parameters and directories\files as well.

[@binarythistle]

Hi Andy - where were you a few days ago! You'd have saved me a bit of typing! Great tip & thanks! Les

[@ardonbailey2654]

Thank you for making this. Super helpful. I always appreciate all your videos.

[@ricardopfeuti9831]

Hi Les. I would like to thank you so much for providing this tutorial. It helped me a lot.

[@motomiprysork4923]

Thank you for another great video! I followed along with my API and works great within my dev machine. One question though in my dev environment, I need to call this API from another dev machine (2nd machine) in the same network. I'm trying to reach the API using IP address since I don't have the host file set up on the 2nd machine. I'm getting certificate issue. These 2 machines can ping each other.

[@luizacacio2012]

Jackson, do you have any videos showing api with digital authentication? I need to prepare my api to receive notification from a webhook, which uses mtls for communication.

[@marlonchosky]

Thanks so much dude! You're video is helping me a lot. Question, if I don't want to create a domain name but only use the ip address of my machine, will I only need to generate the certificate but using the ip address instead of the domain name?

[@carlitobrigante293]

8:36... "hopefully" we trust ourselves. very deep..

[@buddyrowe7460]

Hey Les, very well done! Thank you. I've been scouring the Internet trying to find how to use my TLS cert in Kestrel.

[@parsalotfy]

your tutorials are great man , great, thank you a million

[@YenHoMinh-m7u]

Amazing video. I hope u make another tutorial video for docker

[@anasameen6391]

finally it's nice to see you again 🎉🎉

[@binarythistle]

Nice to be back Anas!

[@rsodeyi]

Thank you so much for this. Even the parts you said you wouldn't go deep into were plenty. I was able to secure my local dns and understand better how the whole thing hangs together. My issue is that I am working with Nativescript and just for added measure, SignalR as well. I've been struggling with trying to get an Android Emulator to communicate with my server while it ignores my hosts file and has it's own version of all my DNSs ...good times. I don't see it on your channels as yet but I'm really really hoping it's an area you are planning to explore. However, getting this ssl part has really helped to get to the next step of Jumanji Infinity

[@jasonbartlett1357]

Great tutorial. I'm doing this in .NET 6 and using minimal api approach. I have a question about using options.ListenAnyIP vs. the Dns host approach: If use ListenAnyIP, when I run the app, it opens to the url I have in the config, (and the url matches the cert url), But, if I use the resolved DNS ip, when I run the app, it doesn't open the url, and if I go to the url, it can't validate the certificates. So what options can I use to have it go to the url, rather than try to use the ip address?

[@2005bgva]

Fantastic video, thanks a lot. One question, are you going to do a video for a production enviroment?

[@ankushmadankar1756]

Very nice video! Saved my day.. Just a question will this work with CA signed certificate on production?

[@arun3836]

Hi Les , Great video . I really enjoyed it.

[@binarythistle]

Glad you enjoyed it Arun, Cheers, Les

[@everyonesview]

I have enjoyed this one than any other, Les! Many thanks ❤

[@binarythistle]

Awesome! Wasn't sure about this topic to be honest, it's a little outside of what I usually do, but thought people might find it useful! Glad you enjoyed it!

[@rogerfernandes7269]

You're amazing sir, getting to learn loads of useful stuff from you. Thank you. Keep up the good work.

[@vladeb1104]

Best wishes from Scotland (Balloch).

[@Adronius]

Would be great to see that updated for .NET 6

[@nathanwaterman4380]

`dotnet dev-certs https --trust` doesn't work for me. It creates the certificate but doesn't Trust it. It only appears under Personal Certificates :/

[@nathanwaterman4380]

Brilliant! As part of following this tutorial I discovered that my anti-virus, WebRoot, was blocking the creation of trusted certificates. It was also stopping me from the updating the host file.

[@mister_stadler]

Fantastic! Thanks a lot!

[@petrkassadinovich2705]

Thanks for tutorial! Btw, you can read configuration file just from .ConfigureKestrel( ), so you don't need to use custom class HostConfig for passing values. .ConfigureWebHostDefaults(webBuilder => { webBuilder.ConfigureKestrel((context, kestrel) => { var file = context.Configuration["CertificateFileLocation"]; var password = context.Configuration["CertPassword"]; }); })

[@shaktisingh-lu3dm]

Thanks a lot for such great help :)

[@stampgermany]

You've helped a lot! Thanks!

[@KritX01]

Hey Les, thanks for the amazing content that you put out! It really helps us! I would like to ask you if you could do a video on microservices and microservices internal communication. How would one do it and if can we use kubernetes to scale the microservices. Thanks!

[@binarythistle]

HI there, next videos I'm doing will beL API Gateway, Service Mesh and Asynchronous messaging, all of which really talk about Microservices!

[@KritX01]

@@binarythistle oh yes please thank you! :D

[@sky78710]

How can use docker for custom https like you do in this video? Please help

[@ayxanalifov2791]

Thanks so much... Very high quality content !!!

[@MarcioAntonioSlivak]

Thank you very much, you saved my weekend.

[@darshanyadav4784]

Hello, I've a doubt. How do change the url length in kestrel so that I can pass strings of larger length?

[@mateuszkaleta1495]

is this a big difference when we configure our SSL only in application code / or only in server configuration?

[@maxbitran]

Thanks man! Really helpful.

[@glennsingh354]

Thanks a lot for this wonderful content.

[@aikidoshi007]

Hi Les, nice video, this has always been a mystery to me. One issue I have noticed is that although Edge works as shown, Chrome still says the certificate is Invalid. Not sure why, any ideas? It does come good after setting up the certificate etc. Bad luck about Melbourne being back in lockdown, I'm in Forest Hill and was excited about starting to get out again :-(

[@binarythistle]

Hi Steve. This drove me crazy for a bit until I restarted the browser! I should have mentioned that in the video. Drop us a line if that doesn't resolve it - seems to be working in Chrome for me, (after the restart). Another thing I should have mentioned is that Firefox uses its own cert store so uses will need to import the cert following these instructions: knowledge.digicert.com/solution/SO5437 Yeah lock-down again is a pain, but I guess it's for the greater good! Hopefully the numbers start to drop. Thanks for feeding back, and stay safe, Les

[@radeksendecki9922]

I had the same issue. Thanks for Your question and aswer :)

[@petargavrilov976]

Hi Les. I wonder why don't we remove the http entry from application url and just use https only ?

[@aliascross]

Thanks, It's works well with Edge browser, but in my case, it does not work with Firefox or Safari (which ask to add an exception). Custom Certificate is it the good way to use API https connection a LAN Production project ?

[@alxizr]

@Les Jackson #Les Jackson Hi, I was wondering if there is a way to utilize Typescript with dotnet core 3.1 and web api? I would really love to see the use of Typescript in the backend on dotnet core.

[@diegobaroffio4462]

Hi Les, Thank you for your very well structured video, it's great. One question: Any reason why not reading the certificate from the Certificate Store instead of reading from file? This way you don't have even to worry with passwords. Regards.

[@anbupa]

Hola desde chile.. Si no quisiera levantarlo con Kestrel sino por iis express como sería?

[@lifeisgameplayit]

I like your content , thanks m8 !

[@shahid13384]

Thank you for great explanation

[@saurabhchauhan232]

Thank you very much for this video sir,I really enjoy watching video on this channel.God bless you.

[@saurabhchauhan232]

can you make video on real world problem and solution with design patterns

[@binarythistle]

You are most welcome Saurabh!

[@bblair2010]

Hey Les, I would I get this to work when deployed in Azure?

[@LakhanSINGH-rk9et]

Hi Les , This was a great video . Totally loved it Would you be making video on EshopOnContainers microservices ?

[@binarythistle]

Hi Lakhan, yes I'm working on something at the moment, I've taken EshopOnContiners and am re-working it slightly to make it easier to teach with. Hopefully not too long before I complete it.

[@LakhanSINGH-rk9et]

@@binarythistle Thanks Les , Waiting for that video to come out. Would be supporting that video on patreon

[@manishrao18]

Just in case, for intellisense use Windows Powershell ISE and use TAB key for auto-complete

[@paulsanchez5030]

Did you find a good Open SSL article?

[@AGMXZ1]

Thanks Les. I'm struggling with getting my react app and jquery to talk to my local webapi so I'm hoping this does the trick.

[@AGMXZ1]

Still failing for me. I'm trying this on my corporate desktop computer. When I run the GET against the weatherforecast from Postman with HTTPS verification enabled it also fails. When I disable verification I get data back, even using the DNS name which is cool, but the SSL verification fails. When I look at the warning in the Postman console I get: Warning: Unable to verify the first certificate When I look further down in the warning in the TLS section I see something perhaps more specific. authorizationError: "UNABLE_TO_VERIFY_LEAF_SIGNATURE"

[@EminoMeneko]

On my work machine it... works. On Linux too. On my personal machine it... gets personal and throws 'System.Security.Cryptography.CryptographicException' occurred in System.Security.Cryptography.dll: 'Access denied.' Any idea what makes it break ?

[@gajarubanjeyakumar7226]

Thankyou!

[@crazyhiker379]

Thanks boss for your contents.

[@binarythistle]

My pleasure Prasanth!

[@vpep5439]

Thank you very much for sharing videos

[@binarythistle]

No worries Pei!

[@joseperezbalan7788]

could you make a video for certs in ubuntu or linux base os ?, i have spend three days and still have not got it to work.. dev certs for linux is a pain in the ass .

[@CarlosAndres-lv1zq]

Thank you so much

[@patrickcandlin7420]

❤ PowerShell here

[@nick11927]

Thank you!

[@binarythistle]

You're welcome!

[@Teutathis]

DHCP is Dynamic Host _Configuration_ Protocol. Great video though

[@3AgL3DeeJay]

PLEASE HELP MEE!!! Amazing video but if I add that "var host = Dns.GetHostEntry("");" line in program.cs my code jumps to that line instead of entering into ".ConfigureServices((context, services) =>"... any idea why??? I'm trying to get the string with the domain from config so I'm using it like this: prnt.sc/vwnlaq thanks!

[@3AgL3DeeJay]

Solved it! Now I get a "The requested address is not valid in its context" error....

[@3AgL3DeeJay]

Nevermind, I solved it! :D I was using the domain IP in the localhost. Thanks for the video man!

[@kalpeshblue2]

Super Like

[@binarythistle]

Thanks!

[@geojaya]

Any one knows how to CA Signed Certificate to a custom domain using Kestrel

[@DanielFantaneanu]

nice

[@khaledslaimia3135]

what i fin dissapointing is a channel like that where we find a real treasure have little subscribers meanwhile gaming channels have millions.

[@zenobiusztasak8604]

Does it work on .net 5 ? I get an error NET::ERR_CERT_COMMON_NAME_INVALID