SSL connection cannot be established using HTTP action - works in one Logic App standard instance but intermittently in another

Question

I have one Logic App Standard instance in a dev resource group and another instance in a prod one. They are both out of the same location (West US).

For the last 4 days the dev instance has been experiencing errors when connection to a 3rd party API endpoint. The intermittent error received is:

**
BadRequest**

Http request failed as there is an error: 'The SSL connection could not be established, see inner exception.'.

The prod instance which is configured exactly the same when it comes to querying the 3rd party API experiences no such issues.

Does anyone know how to troubleshoot these lower level SSL errors?

Thanks,

Mike

Answer 1

Hi @Mike Lee

It seems that you are experiencing an SSL connection issue when connecting to a 3rd party API endpoint in your Logic App Standard instance ¹. The error message you received is:

BadRequest Http request failed as there is an error: ‘The SSL connection could not be established, see inner exception.’

This error message indicates that the SSL connection could not be established ¹. The issue seems to be intermittent and is only occurring in your dev instance, while your prod instance is working fine ¹.

There are several ways to troubleshoot SSL errors. One way is to use OpenSSL to check if the endpoint requires a client certificate ¹. You can also try exporting the site’s public certificates using PowerShell ¹. Another way is to add or update the app setting WEBSITE_LOAD_ROOT_CERTIFICATES in your logic app resource’s app settings ².

I recommend checking out this Microsoft Community Hub article for more information on HTTPS endpoint troubleshooting in Logic App Standard ¹. It provides a detailed flow chart that goes through all the possible scenarios when the logic app is giving TLS error and provides solutions for each scenario.

I hope this helps you resolve your issue!

Answer 2

@Mike Lee Thanks for reaching out. As you have already performed the testing and you only observed the issue with one of the region and not with other regions.

It seems that the error you are receiving is related to SSL/TLS handshake failure. This error occurs when the client and server cannot establish a secure connection due to a mismatch in the SSL/TLS version or cipher suite.

But you have already validated you don't see issue with other regions and only to a particular logic app deployed to that region. This would need to be investigated from the logic app end if there is any issue from our end or we are getting the error from your endpoint. I suggest you engage us over one on one support request to review it further. In case if you don't have the support plan then please let me know so I can enable one time support request on your subscription.