Fix for checking challenge files that are served using staging ssl certificates, if redirect to https has been enabled for the acme-challenge directory.

Author: sjkp

LetsEncrypt.SiteExtension.Core/CertificateManager.cs

@@ -534,16 +534,22 @@ public static AuthorizationState Authorize(Target target)
                     var retry = 10;
                     while (true)
                     {
-                        using (var client = new HttpClient())
+                        using (var handler = new WebRequestHandler())
                         {
-                            Thread.Sleep(1000);
-                            var x = client.GetAsync(answerUri).Result;
-                            Trace.TraceInformation("Checking status {0}", x.StatusCode);
-                            if (x.StatusCode == HttpStatusCode.OK)
-                                break;
-                            if (retry-- == 0)
-                                break;
-                            Trace.TraceInformation("Retrying {0}", retry);
+                            //Allow self-signed certs otherwise staging wont work
+                            handler.ServerCertificateValidationCallback = (sender, cert, chain, sslPolicyErrors) => true;
+
+                            using (var client = new HttpClient(handler))
+                            {
+                                Thread.Sleep(1000);
+                                var x = client.GetAsync(answerUri).Result;
+                                Trace.TraceInformation("Checking status {0}", x.StatusCode);
+                                if (x.StatusCode == HttpStatusCode.OK)
+                                    break;
+                                if (retry-- == 0)
+                                    break;
+                                Trace.TraceInformation("Retrying {0}", retry);
+                            }
                         }
                     }
                     Console.WriteLine(" Submitting answer");

LetsEncrypt.nuspec

@@ -3,7 +3,7 @@
   <metadata>
     <id>letsencrypt</id>
     <title>Azure Let's Encrypt (x86)</title>
-    <version>0.4.10</version>
+    <version>0.4.11</version>
     <authors>SJKP</authors>
     <licenseUrl>http://opensource.org/licenses/Apache-2.0</licenseUrl>
     <projectUrl>https://github.com/sjkp/letsencrypt-siteextension</projectUrl>

LetsEncrypt64.nuspec

@@ -3,7 +3,7 @@
   <metadata>
     <id>letsencrypt64</id>
     <title>Azure Let's Encrypt (x64)</title>
-    <version>0.4.10</version>
+    <version>0.4.11</version>
     <authors>SJKP</authors>
     <licenseUrl>http://opensource.org/licenses/Apache-2.0</licenseUrl>
     <projectUrl>https://github.com/sjkp/letsencrypt-siteextension</projectUrl>

letsencrypt.siteextension.job.nuspec

@@ -3,7 +3,7 @@
   <metadata>
     <id>letsencrypt.siteextension.job</id>
     <title>Azure SiteExtension Let's Encrypt WebJob</title>
-    <version>0.4.10-beta</version>
+    <version>0.4.11-beta</version>
     <authors>SJKP</authors>
     <licenseUrl>http://opensource.org/licenses/Apache-2.0</licenseUrl>
     <projectUrl>https://github.com/sjkp/letsencrypt-siteextension</projectUrl>

letsencrypt.siteextension.job64.nuspec

@@ -3,7 +3,7 @@
   <metadata>
     <id>letsencrypt.siteextension.job64</id>
     <title>Azure SiteExtension Let's Encrypt WebJob (64bit)</title>
-    <version>0.4.10-beta</version>
+    <version>0.4.11-beta</version>
     <authors>SJKP</authors>
     <licenseUrl>http://opensource.org/licenses/Apache-2.0</licenseUrl>
     <projectUrl>https://github.com/sjkp/letsencrypt-siteextension</projectUrl>