Using Logic App to call the Service Fabric REST API

Question

I attempt to call the Service Fabric REST API using an HTTP Action connector in the Logic App but it gives an error with SSL connection.

Steps I followed:

1. Created a new Service Fabric Cluster using bicep
2. Created a new Logic App (Consumption plan)
3. In the Logic app - enabled the "System-assigned" managed identity (in the "Settings" > "Identity" pane)
4. in the Service Fabric Cluster - assigned the "Reader" role to the Logic App's managed identity (in the "Access control (IAM)" pane)
5. In the Logic app - Added an HTTP action to call an endpoint that lists all cluster applications (GET https://<cluster-endpoint>.cloudapp.azure.com:19080/Applications?api-version=6.0)
6. Add an HTTP action to call an endpoint that removes the application by name (POST https://<cluster-endpoint>.cloudapp.azure.com:19080/Applications/<app-name>/$/Delete?api-version=6.0&ForceRemove=true)

I used "Managed Identity" authentication in the HTTP call:

• Authentication Type: Managed Identity
• Managed Identity: System-assigned

and I encountered the following error:
_BadRequest HTTP request failed: 'The SSL connection could not be established, see inner exception.'
_
Additionally, I tried to configure TLS/SSL certificate authentication (following this https://learn.microsoft.com/en-us/azure/connectors/connectors-native-http?tabs=standard#tlsssl-certificate-authentication ) using code view in the Logic App, but it didn't help.

Thanks for any hints.

Regards,
Kornelia

Answer 1

@Buchczyk, Kornelia Thanks for reaching out. As per this doc https://learn.microsoft.com/en-us/azure/logic-apps/logic-apps-securing-a-logic-app?tabs=azure-portal#access-for-outbound-calls-to-other-services-and-systems It seems that in the Logic App Consumption plan, HTTP operations do not permit self-signed TLS/SSL certificates. This could be the reason why you are encountering SSL connection errors.

Please ensure that the endpoint you are calling has a valid SSL certificate issued by a trusted Certificate Authority (CA). Self-signed certificates are not supported in the Logic App Consumption plan.

do let me know incase of further queries, I would be happy to assist you.