Standard Azure LogicApps and SSLDecrypt

Question

Hello I have an Azure LogicApp Standard with vNet Integration and RouteAll enabled. The traffic passes through firewalls that are enabled with SSLDecrypt that injects RootCA certificate into the traffic. Running openssl s_client -showcerts -connect outlook.office.com:443 through Kudu gives Verification error: self signed certificate in certificate chain . Any idea how I can add the RootCA certificate to the certificate store of the LogicApp or AppServicePlan so that the LogicApp can talk to Azure Connectors? Error message on the workflow runs are BadRequest. Http request failed as there is an error: 'The SSL connection could not be established, see inner exception.'. Thanks Abdul

Answer 1

Hello,

As far as i am aware, there is no direct way to add custom certificates to the certificate store of a Logic App or App Service Plan for vNet Integration with SSL decryption enabled.

However, you can use an Azure Function with a custom handler as a proxy for your Logic App to communicate with the Azure connectors.