OpenSslCryptographicException: error:1425F102:SSL routines:ssl_choose_client_version:unsupported protocol

Instarto Technologies 1 Reputation point
2022-09-13T15:44:56.693+00:00

An issue while Azure Linux based app service try to get data from GoDaddy based database.

240654-image.png

OpenSslCryptographicException: error:1425F102:SSL routines:ssl_choose_client_version:unsupported protocol
Unknown location

SslException: SSL Handshake failed with OpenSSL error - SSL_ERROR_SSL.
Interop+OpenSsl.DoSslHandshake(SafeSslHandle context, ReadOnlySpan<byte> input, out byte[] sendBuf, out int sendCount)

AuthenticationException: Authentication failed, see inner exception.
System.Net.Security.SslStream.ForceAuthenticationAsync<TIOAdapter>(TIOAdapter adapter, bool receiveFirst, byte[] reAuthenticationData, bool isApm)

SqlException: A connection was successfully established with the server, but then an error occurred during the pre-login handshake. (provider: TCP Provider, error: 35 - An internal exception was caught)
Microsoft.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, bool breakConnection, Action<Action> wrapCloseInAction)

Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
6,928 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. brtrach-MSFT 15,256 Reputation points Microsoft Employee
    2022-09-19T03:10:03.757+00:00

    @Instarto Technologies Thank you for reaching out about the error you are receiving while attempting to connect to GoDaddy resources.

    This mismatch certificate issue is related to the domain name you are using to connect to the on-premises server, if this domain name is not listed in the certificate that you use with your server, Azure will throw the certificate mismatch error that you are seeing.

    We can see an example of this same issue in a slightly different setting using this description on the Microsoft support page:

    Error: SSL Certificate Mismatch

    In this case if your server doesn’t have a proper certificate, it is self-signed or if the domain name is not listed in it, then this kind of issue can happen when making the connection.

    App Service Web Apps, Functions, and Logic Apps (Standard) *.azurewebsites.net TLS certificate changes and what you need to know - Azure App Service

    We suggest you check your uploaded certificate to ensure its properly configured as mentioned above.

    0 comments No comments