This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(32, 28.999999999999996%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJV%3C/text%3E%3C/svg%3E)
Hi,
I have an app service that is using connecting to an on premise application. My app is perfectly able to connect to the on premise application but on our test and accept environments those applications have ssl certificates on them that the app service does not accept. Normally I would put those certificates in a trusted store to get past these errors. How can I do this for for my app service?
Note, I don't have access to the source code of the application that is running in the app service, so I can't change the code to set System.Net.ServicePointManager.ServerCertificateValidationCallback to allow the certificate.
Jaap
Thanks for your patience! can you please give us more details on the type of errors you're seeing so we can investigate this issue further? in the meantime please check ou this related SO thread
-Grace
We are getting the error:
System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.
at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
...
The server ssl certificate is issued by Electrabel Issuing CA 4 (ISINFRA ROOT CA), we aren't using client ssl certificates.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(102.4, 69%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECS%3C/text%3E%3C/svg%3E)
You can use following page to add a public certificate to web app to be used to validate the connection to an external server:
https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate-in-code
Hope this helps.