Azure Certificate Chain Trust Issues

Nick Capito 0 Reputation points
2024-08-07T15:39:44.9166667+00:00

We recently started getting errors in one of our Azure functions & Azure App Services for dotnet code that was using HttpClient to access a URL.

The error was

The SSL connection could not be established, see inner exception. The remote certificate is invalid according to the validation procedure: RemoteCertificateNameMismatch, RemoteCertificateChainErrors 


We did some investigation and did validate the SSL for the url we were hitting was valid. We validated this in chrome, openssl, and a couple other tools. All validate this cert was trust worthy. When i run the same code locally it works. It only breaks on Azure. I think the issue is Azure does not trust
User's image

I went into Kudu and pulled the root cas and those were both missing. Can someone confirm that my theory is correct? I also can't find any public record of Azure removing USERTrust or Sectigo.

These were the root certificates o Azure
User's image

Azure Functions
Azure Functions
An Azure service that provides an event-driven serverless compute platform.
5,943 questions
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.