Search code examples
sslasp.net-corehttpsssl-certificateidentityserver4

Two Certificates when using Identyserver4 with asp.net core webserver?

I am going hosting an webserver and an api with the same application over asp.net core. I am using Identyserver4 to secure the API connections. Do i need a seperate Certificate for the https asp.net core website and the identityserver4?

Solution

  • You need at least two separate certificates. The difference is that your SSL cert must be bound to the host name and trusted for everyone accessing your server, while the signing certificate does not have any special requirements.
    See this article for further reference and this question as a proof link.
    It's not clear from your explanation where you host your main ASP.NET Core web site. If that's another host than where your IdSrv lives, than you need the third(!) cert to enable SSL there too.