Fix openid certificates on Azure App Services

Fixes #3222
OrchardCMS · Feb 28, 2019 · aa9424e · aa9424e
1 parent 88a22c3
commit aa9424e
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/src/OrchardCore.Modules/OrchardCore.OpenId/Services/OpenIdServerService.cs b/src/OrchardCore.Modules/OrchardCore.OpenId/Services/OpenIdServerService.cs
@@ -497,11 +497,14 @@ private async Task<ImmutableArray<(string path, X509Certificate2 certificate)>>
                                 X509KeyStorageFlags.EphemeralKeySet :
                                 X509KeyStorageFlags.MachineKeySet;
 #else
-                                X509KeyStorageFlags.MachineKeySet;
+                                X509KeyStorageFlags.MachineKeySet |
+                                X509KeyStorageFlags.PersistKeySet |
+                                X509KeyStorageFlags.Exportable;
 #endif
 
                     // Only add the certificate if it's still valid.
                     var certificate = new X509Certificate2(file.FullName, password, flags);
+
                     if (certificate.NotBefore <= DateTime.Now && certificate.NotAfter > DateTime.Now)
                     {
                         certificates.Add((file.FullName, certificate));