Making HTTPS request to external REST service

Question

Making HTTPS request to external REST service

Mike Paventa 1

Is there any special configuration to make an external HTTPS call from Azure? While my app works locally I get error "The SSL connection could not be established" when calling from my published Azure app.

I am using HttpClient and loading the 509 cert successfully.

Thanks

Pramod Valavala 20,661 Reputation points Microsoft Employee Moderator

2020-08-13T04:09:00.61+00:00

There should be an inner exception along the exception that you've shared. Could you share that as well?

Also, could you confirm if you are using Azure APIM here?
Mike Paventa 1 Reputation point

2020-08-13T15:56:06.36+00:00

Hi Pramod,

Not sure what APIM is. I just published my app via Visual Studio.
`
Here is the exception results. (for some reason this is all the text box will allow me to submit here. Also, attempted to upload a txt file but that failed also. Will provide via multiple replies

System.AggregateException: One or more errors occurred. (The SSL connection could not be established, see inner exception.)
---> System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
---> System.ComponentModel.Win32Exception (0x8009030D): The credentials supplied to the package were not recognized
at System.Net.SSPIWrapper.AcquireCredentialsHandle(SSPIInterface secModule, String package, CredentialUse intent, SCHANNEL_CRED scc)
at System.Net.Security.SslStreamPal.AcquireCredentialsHandle(CredentialUse credUsage, SCHANNEL_CRED secureCredential)
Mike Paventa 1 Reputation point

2020-08-13T15:58:18.21+00:00

at System.Net.Security.SslStreamPal.AcquireCredentialsHandle(X509Certificate certificate, SslProtocols protocols, EncryptionPolicy policy, Boolean isServer)
at System.Net.Security.SecureChannel.AcquireClientCredentials(Byte[]& thumbPrint)
at System.Net.Security.SecureChannel.GenerateToken(Byte[] input, Int32 offset, Int32 count, Byte[]& output)
at System.Net.Security.SecureChannel.NextMessage(Byte[] incoming, Int32 offset, Int32 count)
at System.Net.Security.SslStream.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslStream.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslStream.StartReadFrame(Byte[] buffer, Int32 readBytes, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslStream.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
Mike Paventa 1 Reputation point

2020-08-13T16:01:01.03+00:00

at System.Net.Security.SslStream.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslStream.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslStream.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslStream.StartReadFrame(Byte[] buffer, Int32 readBytes, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslStream.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslStream.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslStream.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslStream.ProcessReceivedBlob(Byte[] buffer, Int32 count,
Mike Paventa 1 Reputation point

2020-08-13T16:29:58.283+00:00

Pramod,

I am not using APIM here..

Mike
Pramod Valavala 20,661 Reputation points Microsoft Employee Moderator

2020-08-13T16:37:03.237+00:00

Thanks for confirming! I asked because of the tag but I have changed it considering you are using app service.

1 answer

Your answer

Pramod Valavala 20,661 Reputation points Microsoft Employee Moderator

2020-08-13T04:09:00.61+00:00

There should be an inner exception along the exception that you've shared. Could you share that as well?

Also, could you confirm if you are using Azure APIM here?
Mike Paventa 1 Reputation point

2020-08-13T15:56:06.36+00:00

Hi Pramod,

Not sure what APIM is. I just published my app via Visual Studio.
`
Here is the exception results. (for some reason this is all the text box will allow me to submit here. Also, attempted to upload a txt file but that failed also. Will provide via multiple replies

System.AggregateException: One or more errors occurred. (The SSL connection could not be established, see inner exception.)
---> System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
---> System.ComponentModel.Win32Exception (0x8009030D): The credentials supplied to the package were not recognized
at System.Net.SSPIWrapper.AcquireCredentialsHandle(SSPIInterface secModule, String package, CredentialUse intent, SCHANNEL_CRED scc)
at System.Net.Security.SslStreamPal.AcquireCredentialsHandle(CredentialUse credUsage, SCHANNEL_CRED secureCredential)
Mike Paventa 1 Reputation point

2020-08-13T15:58:18.21+00:00

at System.Net.Security.SslStreamPal.AcquireCredentialsHandle(X509Certificate certificate, SslProtocols protocols, EncryptionPolicy policy, Boolean isServer)
at System.Net.Security.SecureChannel.AcquireClientCredentials(Byte[]& thumbPrint)
at System.Net.Security.SecureChannel.GenerateToken(Byte[] input, Int32 offset, Int32 count, Byte[]& output)
at System.Net.Security.SecureChannel.NextMessage(Byte[] incoming, Int32 offset, Int32 count)
at System.Net.Security.SslStream.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslStream.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslStream.StartReadFrame(Byte[] buffer, Int32 readBytes, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslStream.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
Mike Paventa 1 Reputation point

2020-08-13T16:01:01.03+00:00

at System.Net.Security.SslStream.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslStream.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslStream.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslStream.StartReadFrame(Byte[] buffer, Int32 readBytes, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslStream.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslStream.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslStream.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslStream.ProcessReceivedBlob(Byte[] buffer, Int32 count,
Mike Paventa 1 Reputation point

2020-08-13T16:29:58.283+00:00

Pramod,

I am not using APIM here..

Mike
Pramod Valavala 20,661 Reputation points Microsoft Employee Moderator

2020-08-13T16:37:03.237+00:00

Thanks for confirming! I asked because of the tag but I have changed it considering you are using app service.

Answer 1

Pramod Valavala 20,661 Microsoft Employee Moderator

Based on the inner exception, The credentials supplied to the package were not recognized, I believe you would have to set the app setting WEBSITE_LOAD_USER_PROFILE to 1 as mentioned in the docs for loading certificates from a file.

Mike Paventa 1 Reputation point

2020-08-13T18:04:47.753+00:00

It Worked! Thank you so much

Mike
Pramod Valavala 20,661 Reputation points Microsoft Employee Moderator

2020-08-17T06:27:02.083+00:00

Glad that we were able to help. Please do mark this an answer to help others in a comparable situation to identify this as a solution.
Josh Pharis 1 Reputation point

2022-03-02T19:05:00.99+00:00

Realize this is an old issue, but I am having the same issue with a .NET 6 API running on a windows App Service in Azure. Everything works fine locally, but when I try to run it while deployed in Azure, I get the same errors: The SSL connection could not be established, see inner exception. and No credentials are available in the security package. However, I already have the suggested solution in place, adding the WEBSITE_LOAD_USER_PROFILE` to the app settings configuration.

Is there anything else the could be causing this issue?
Tang, Jay 1 Reputation point

2022-03-09T23:28:53.06+00:00

What about .NET console application? I got the same error when I read certificate from a file as shown in the code below. Any idea how to fix?

X509Certificate2 x509Cer2 = X509Certificate2.CreateFromPemFile("cerfile","keyfile");
HttpClientHandler handler = new HttpClientHandler();
handler.ClientCertificates.Add(x509Cer2);
var client = new HttpClient(handler);
var request = new HttpRequestMessage()
{
RequestUri = new Uri(https://myAPI.URL),
Method = HttpMethod.Get,
};

var result = client.SendAsync(request).Result;

The SendAsync() will result an exception of :
"No credentials are available in the security package"
Josh Pharis 1 Reputation point

2022-03-10T15:50:01.517+00:00

My issue turned out to be a bug on Windows with .NET and certificates. I'm running locally on a Mac but deploying to a Windows machine. This is why it was working locally but not when deployed. The workaround here fixed the issue in our deployed environments.

Share via

Making HTTPS request to external REST service

1 answer

Your answer