.net core Kestrel server SSL issue

问题

I am having a few problems implementing a basic SSL server using Kestrel on .Net Core.

My aim is to eventually create my own Alexa skill end point, which I already have a basic version running on flask on a raspberry pi. But I'm a .net person and really want to leverage what I know and can understand better in .net core on Windows IOT on a Raspberry Pi 3.

I followed some very vague tutorials on how to implement an SSL server using Kestrel which I can get up and running except for one issue. The only SSL certificates that appear to work are windows generated PFX certificates created using powershell.

This isn't a problem until I try to upload my certificate to Alexa Developer Console in my Skill endpoint, it does not accept PFX.

So I switched to openssl and created a certificate which my code appears to accept and run and also I am able to upload the .cer file into Alexa Skills fine.

The problem is when anything attempts to connect to the server I get the following exception:

Hosting environment: Production
Content root path: C:\Users\stewj\OneDrive\Documents\Visual Studio 2017 Projects\ConsoleApp1\ConsoleApp1\bin\Debug\netcoreapp2.0
Now listening on: http://0.0.0.0:8000
Now listening on: https://0.0.0.0:8001
Application started. Press Ctrl+C to shut down.

fail: Microsoft.AspNetCore.Server.Kestrel[0]
  Uncaught exception from the OnConnectionAsync method of an IConnectionAdapter.
System.ComponentModel.Win32Exception (0x80004005): The credentials supplied to the package were not recognized

or

"The server mode SSL must use a certificate with the associated private key."

Ideal situation would be to be able to create a PFX certificate that appears to work correctly (I can browse to the server and get no exceptions just warnings about non trusted CA as its self signed). and generate an equivalent .CER file from the PFX file that Alexa Skills accepts.

Unfortunately I am new to SSL and certificates and only have a basic understanding so I'm not exactly sure what the true underlying issue is.

Here is the server code just in case I am missing anything:

public class Program
{
    public static void Main(string[] args)
    {
        CreateWebHostBuilder(args).Build().Run();
    }

    public static IWebHostBuilder CreateWebHostBuilder(string[] args) =>

        WebHost.CreateDefaultBuilder(args)
            .UseStartup<Startup>()
            .UseKestrel(options =>
            {
                var cert = new X509Certificate2("cert-key-20180708-190801.p12", "likeiwouldpastethathere");
                options.Listen(IPAddress.Any, 8000);
                options.Listen(IPAddress.Any, 8001, listenOptions =>
                {
                    listenOptions.UseHttps(cert);
                });
            });
}

BTW I have also tried loading the certificate directly from .UseHttps with the same issue. Using the x509Certificate2 was a thought maybe it was the correct way, but still no joy.

App runs fine only get the exception when I access the server from either Alexa or a browser. No exceptions if I use a PFX windows generated certificate just can't access from Alexa!

来源：https://stackoverflow.com/questions/51235362/net-core-kestrel-server-ssl-issue