Azure Identity authentication failed with SSL connection failure

Ali 1

Here is the error I got in the function app
System.Net.Http: The SSL connection could not be established, see inner exception. System.Net.Security: Authentication failed because the remote party has closed the transport stream.

The setup is,
I have a Function App hosted in an App service integrated with a subnet in a VNET.
I have a ServiceBus integrated with the same VNET PLE enabled with a separated subnet for PLE.
The role assignment has been done for a specific queue of the service bus namespace.
The same setup worked with SAS token, therefore NSG rules for AMQP port opening and etc must be fine unless the function app is trying to call another service which I'm not aware of.
I also checked the same function app without VNET integration and it worked, therefore, nothing wrong with the built code!
I would appreciate it if anyone has a clue about that!

MughundhanRaveendran-MSFT 12,456 Reputation points

2021-12-08T07:10:24.53+00:00

@Ali ,

Do you see this error message in the Function execution/invocation logs?
If yes, could you please let me know what the function app is doing or what is the functionality of this app? Is this communicating to any other API via http protocol?
Ali 1 Reputation point

2021-12-08T14:36:28.75+00:00

It was the error in the function : System.Net.Http: The SSL connection could not be established, see inner exception. System.Net.Security: Authentication failed because the remote party has closed the transport stream.
My issue is the error is not saying which endpoint is been trying to reach. I have not manually called any HTTP endpoint, All I did was try to use azure identity in servicebus trigger via azure java SDK. it might have tried to call some endpoints,

I just found in the firewall logs, it was trying to connect to functionscdn.azureedge.net:443 and it was blocked. It might be the root cause!
MughundhanRaveendran-MSFT 12,456 Reputation points

2021-12-08T15:46:02.707+00:00

@Ali , Thanks for the inputs. Could you please allow the endpoint (functionscdn.azureedge.net:443) in the firewall rules and see if the issue is resolved?
https://learn.microsoft.com/en-us/azure/firewall/rule-processing#example-1
MughundhanRaveendran-MSFT 12,456 Reputation points

2021-12-17T05:43:29.85+00:00

@Ali , Did you get a chance to look into my previous comment? please check and let me know if it was helpful
kevin eckart 26 Reputation points

2023-06-05T17:36:16.26+00:00

Any update here?

Share via

Azure Identity authentication failed with SSL connection failure