How to download the azure app service certificate with full chain & bundle

Question

How to download the azure app service certificate with full chain & bundle

Tejas Gaikwad 0

Hi Everyone

I have purchased a certificate from azure app service certificate, We have the correct way to upload the certificate from Key vaults and it's accessible in the application gateway but the certificate works only in chrome, firefox and safari does not work, Please help us for this.

ajkuma 28,036 Reputation points Microsoft Employee Moderator

2023-04-02T17:57:18.18+00:00

@Tejas Gaikwad ,

Just checking in to see if you had got a chance to see the previous response.
If the answer helped (pointed you in the right direction) > please click Accept Answer
Or please share the requested/more info to help you better.

1 answer

Your answer

ajkuma 28,036 Reputation points Microsoft Employee Moderator

2023-04-02T17:57:18.18+00:00

@Tejas Gaikwad ,

Just checking in to see if you had got a chance to see the previous response.
If the answer helped (pointed you in the right direction) > please click Accept Answer
Or please share the requested/more info to help you better.

Answer 1

ajkuma 28,036 Microsoft Employee Moderator

@Tejas Gaikwad ,

Based on your issue description I understand App Service Ceriticate doesn’t work on only Safari browser. It can possiblly be an issue related to the certificate chain, as you mentioned. Does this issue occur on majority of Safari users or only a few, specific to Safari version? What is the exact error message you receive?

I believe you have exported the App Service Certificate file as outlined in this Azure doc ( Portal or CLI method) - Export App Service certificate

When you purchase a certificate from Azure App Service Certificate, you receive a certificate chain that includes the root certificate, intermediate certificate, and your domain certificate. It is important to ensure that the entire certificate chain is installed correctly.

To validate/double-check if the certificate chain is installed correctly, you may use an online SSL checker tool like SSL Labs. This tool will analyze your SSL configuration and provide a detailed report that includes information about the certificate chain.

If the SSL checker tool reports that the certificate chain is incomplete or incorrect, you may need re-export/download the certificate file again. Export App Service certificate ( I understand the issue is isolated to Safari browser only)

If the certificate chain is installed correctly and you are still experiencing issues with on Safari, it could be related to the SSL protocol or cipher suite. You may try adjusting the SSL protocol and cipher suite settings in your Application Gateway to see if this resolves the issue.

Tejas Gaikwad 0 Reputation points

2023-04-03T04:21:56.6666667+00:00

Hi @ajkuma

I have done this setting, still same error facing. could.please help us
ajkuma 28,036 Reputation points Microsoft Employee Moderator

2023-04-03T19:20:39.5+00:00

Apologies you're still facing this issue. Thanks for the follow-up and update.

As I understand you have tried adjusting the SSL protocol and cipher suite settings in your Application Gateway.
Just to confirm, does this issue occur on majority of Safari users or only a few, specific to Safari version? could you please share the outcome of the SSL checker tool?

Kindly let us know, I'll follow-up with you further.
Tejas Gaikwad 0 Reputation points

2023-04-04T05:13:36.83+00:00

@ Ajkuma, The issue occurs in Safari and Firefox, any version
ajkuma 28,036 Reputation points Microsoft Employee Moderator

2023-04-04T12:00:10.15+00:00

Tej_Raj Gaikwad, Thanks for the follow-up and update.

For a deeper investigation into this we would need your subscription ID and App Service Certificate resource details, which are PII, so we’ll have to follow-up offline.

For a specialized assistance, I wish to engage with you offline, please send an email with subject line “Attn:Ajay” to AzCommunity[at]Microsoft[dot]com and the following details, I will follow-up with you.

Reference this Q&A thread

Azure Subscription ID

App Service Certificate/WebApp name Thanks for your patience and cooperation!
Tejas Gaikwad 0 Reputation points

2023-04-04T14:40:32.5766667+00:00

yes, I have sent the mail from tgaikwad19
ajkuma 28,036 Reputation points Microsoft Employee Moderator

2023-04-05T13:06:41.6966667+00:00

Thanks for your email. We have been following-up on it.
ajkuma 28,036 Reputation points Microsoft Employee Moderator

2023-04-28T05:47:34.3466667+00:00

To benefit the community posting the offline discussion summary:

After changing the permission settings in the App Service Certificate issue was sorted out.

Share via

How to download the azure app service certificate with full chain & bundle

1 answer

Your answer