You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/cosmos-db/local-emulator-export-ssl-certificates.md
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
---
2
2
title: Export the Azure Cosmos DB Emulator certificates
3
-
description: When developing in languages and runtimes that do not use the Windows Certificate Store you will need to export and manage the SSL certificates. This post gives step by step instructions.
3
+
description: When developing in languages and runtimes that do not use the Windows Certificate Store you will need to export and manage the TLS/SSL certificates. This post gives step by step instructions.
4
4
ms.service: cosmos-db
5
5
ms.topic: conceptual
6
6
ms.date: 05/23/2019
@@ -13,13 +13,13 @@ ms.author: dech
13
13
14
14
[**Download the Emulator**](https://aka.ms/cosmosdb-emulator)
15
15
16
-
The Azure Cosmos DB Emulator provides a local environment that emulates the Azure Cosmos DB service for development purposes including its use of SSL connections. This post demonstrates how to export the SSL certificates for use in languages and runtimes that do not integrate with the Windows Certificate Store such as Java which uses its own [certificate store](https://docs.oracle.com/cd/E19830-01/819-4712/ablqw/index.html) and Python which uses [socket wrappers](https://docs.python.org/2/library/ssl.html) and Node.js which uses [tlsSocket](https://nodejs.org/api/tls.html#tls_tls_connect_options_callback). You can read more about the emulator in [Use the Azure Cosmos DB Emulator for development and testing](./local-emulator.md).
16
+
The Azure Cosmos DB Emulator provides a local environment that emulates the Azure Cosmos DB service for development purposes including its use of TLS connections. This post demonstrates how to export the TLS/SSL certificates for use in languages and runtimes that do not integrate with the Windows Certificate Store such as Java which uses its own [certificate store](https://docs.oracle.com/cd/E19830-01/819-4712/ablqw/index.html) and Python which uses [socket wrappers](https://docs.python.org/2/library/ssl.html) and Node.js which uses [tlsSocket](https://nodejs.org/api/tls.html#tls_tls_connect_options_callback). You can read more about the emulator in [Use the Azure Cosmos DB Emulator for development and testing](./local-emulator.md).
17
17
18
18
This tutorial covers the following tasks:
19
19
20
20
> [!div class="checklist"]
21
21
> * Rotating certificates
22
-
> * Exporting SSL certificate
22
+
> * Exporting TLS/SSL certificate
23
23
> * Learning how to use the certificate in Java, Python, and Node.js
24
24
25
25
## Certification rotation
@@ -30,7 +30,7 @@ Both certificates can be regenerated by clicking **Reset Data** as shown below f
30
30
31
31

32
32
33
-
## How to export the Azure Cosmos DB SSL certificate
33
+
## How to export the Azure Cosmos DB TLS/SSL certificate
34
34
35
35
1. Start the Windows Certificate manager by running certlm.msc and navigate to the Personal->Certificates folder and open the certificate with the friendly name **DocumentDbEmulatorCertificate**.
36
36
@@ -70,23 +70,23 @@ When running Java applications or MongoDB applications that use the Java client
70
70
71
71
Follow the instructions in the [Adding a Certificate to the Java CA Certificates Store](https://docs.microsoft.com/azure/java-add-certificate-ca-store) to import the X.509 certificate into the default Java certificate store. Keep in mind you will be working in the %JAVA_HOME% directory when running keytool.
72
72
73
-
Once the "CosmosDBEmulatorCertificate" SSL certificate is installed your application should be able to connect and use the local Azure Cosmos DB Emulator. If you continue to have trouble you may want to follow the [Debugging SSL/TLS Connections](https://docs.oracle.com/javase/7/docs/technotes/guides/security/jsse/ReadDebug.html) article. It is very likely the certificate is not installed into the %JAVA_HOME%/jre/lib/security/cacerts store. For example if you have multiple installed versions of Java your application may be using a different cacerts store than the one you updated.
73
+
Once the "CosmosDBEmulatorCertificate" TLS/SSL certificate is installed your application should be able to connect and use the local Azure Cosmos DB Emulator. If you continue to have trouble you may want to follow the [Debugging SSL/TLS Connections](https://docs.oracle.com/javase/7/docs/technotes/guides/security/jsse/ReadDebug.html) article. It is very likely the certificate is not installed into the %JAVA_HOME%/jre/lib/security/cacerts store. For example if you have multiple installed versions of Java your application may be using a different cacerts store than the one you updated.
74
74
75
75
## How to use the certificate in Python
76
76
77
-
By default the [Python SDK(version 2.0.0 or higher)](sql-api-sdk-python.md) for the SQL API will not try and use the SSL certificate when connecting to the local emulator. If however you want to use SSL validation you can follow the examples in the [Python socket wrappers](https://docs.python.org/2/library/ssl.html) documentation.
77
+
By default the [Python SDK(version 2.0.0 or higher)](sql-api-sdk-python.md) for the SQL API will not try and use the TLS/SSL certificate when connecting to the local emulator. If however you want to use TLS validation you can follow the examples in the [Python socket wrappers](https://docs.python.org/2/library/ssl.html) documentation.
78
78
79
79
## How to use the certificate in Node.js
80
80
81
-
By default the [Node.js SDK(version 1.10.1 or higher)](sql-api-sdk-node.md) for the SQL API will not try and use the SSL certificate when connecting to the local emulator. If however you want to use SSL validation you can follow the examples in the [Node.js documentation](https://nodejs.org/api/tls.html#tls_tls_connect_options_callback).
81
+
By default the [Node.js SDK(version 1.10.1 or higher)](sql-api-sdk-node.md) for the SQL API will not try and use the TLS/SSL certificate when connecting to the local emulator. If however you want to use TLS validation you can follow the examples in the [Node.js documentation](https://nodejs.org/api/tls.html#tls_tls_connect_options_callback).
82
82
83
83
## Next steps
84
84
85
85
In this tutorial, you've done the following:
86
86
87
87
> [!div class="checklist"]
88
88
> * Rotated certificates
89
-
> * Exported the SSL certificate
89
+
> * Exported the TLS/SSL certificate
90
90
> * Learned how to use the certificate in Java, Python and Node.js
91
91
92
92
You can now proceed to the concepts section for more information about Azure Cosmos DB.
Copy file name to clipboardExpand all lines: articles/cosmos-db/storage-explorer.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -210,14 +210,14 @@ There are a few reasons you may be seeing this error, the two most common ones a
210
210
211
211
+ You're behind a *transparent proxy*, which means someone (such as your IT department) is intercepting HTTPS traffic, decrypting it, and then encrypting it using a self-signed certificate.
212
212
213
-
+ You're running software, such as anti-virus software, which is injecting a self-signed SSL certificates into the HTTPS messages you receive.
213
+
+ You're running software, such as anti-virus software, which is injecting a self-signed TLS/SSL certificates into the HTTPS messages you receive.
214
214
215
215
When Storage Explorer encounters one of these "self-signed certificates", it can no longer know if the HTTPS message it's receiving has been tampered with. If you have a copy of the self-signed certificate though, then you can tell Storage Explorer to trust it. If you're unsure of who is injecting the certificate, then you can try to find it yourself by doing the following steps:
216
216
217
-
1. Install Open SSL
217
+
1. Install OpenSSL
218
218
-[Windows](https://slproweb.com/products/Win32OpenSSL.html) (any of the light versions is ok)
219
219
- Mac and Linux: Should be included with your operating system
220
-
2. Run Open SSL
220
+
2. Run OpenSSL
221
221
- Windows: Go to the install directory, then **/bin/**, then double-click on **openssl.exe**.
222
222
- Mac and Linux: execute **openssl** from a terminal
Copy file name to clipboardExpand all lines: articles/cosmos-db/tutorial-setup-ci-cd.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -172,4 +172,4 @@ If you are setting up the CI/CD pipeline by using a YAML task, you can define th
172
172
173
173
To learn more about using the emulator for local development and testing, see [Use the Azure Cosmos DB Emulator for local development and testing](https://docs.microsoft.com/azure/cosmos-db/local-emulator).
174
174
175
-
To export emulator SSL certificates, see [Export the Azure Cosmos DB Emulator certificates for use with Java, Python, and Node.js](https://docs.microsoft.com/azure/cosmos-db/local-emulator-export-ssl-certificates)
175
+
To export emulator TLS/SSL certificates, see [Export the Azure Cosmos DB Emulator certificates for use with Java, Python, and Node.js](https://docs.microsoft.com/azure/cosmos-db/local-emulator-export-ssl-certificates)
0 commit comments