Azure Service Bus
An Azure service that provides cloud messaging as a service and hybrid integration.
651 questions
Azure Identity authentication failed with SSL connection failure
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(313.6, 43%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Ali
1
Reputation point
Here is the error I got in the function app
System.Net.Http: The SSL connection could not be established, see inner exception. System.Net.Security: Authentication failed because the remote party has closed the transport stream.
The setup is,
I have a Function App hosted in an App service integrated with a subnet in a VNET.
I have a ServiceBus integrated with the same VNET PLE enabled with a separated subnet for PLE.
The role assignment has been done for a specific queue of the service bus namespace.
The same setup worked with SAS token, therefore NSG rules for AMQP port opening and etc must be fine unless the function app is trying to call another service which I'm not aware of.
I also checked the same function app without VNET integration and it worked, therefore, nothing wrong with the built code!
I would appreciate it if anyone has a clue about that!
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(275.2, 33%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMM%3C/text%3E%3C/svg%3E)
MughundhanRaveendran-MSFT 12,481 Reputation points2021-12-08T07:10:24.53+00:00 @Ali ,
Do you see this error message in the Function execution/invocation logs?
If yes, could you please let me know what the function app is doing or what is the functionality of this app? Is this communicating to any other API via http protocol? -
Ali 1 Reputation point
2021-12-08T14:36:28.75+00:00 It was the error in the function : System.Net.Http: The SSL connection could not be established, see inner exception. System.Net.Security: Authentication failed because the remote party has closed the transport stream.
My issue is the error is not saying which endpoint is been trying to reach. I have not manually called any HTTP endpoint, All I did was try to use azure identity in servicebus trigger via azure java SDK. it might have tried to call some endpoints,I just found in the firewall logs, it was trying to connect to functionscdn.azureedge.net:443 and it was blocked. It might be the root cause!
-
MughundhanRaveendran-MSFT 12,481 Reputation points
2021-12-08T15:46:02.707+00:00 @Ali , Thanks for the inputs. Could you please allow the endpoint (functionscdn.azureedge.net:443) in the firewall rules and see if the issue is resolved?
https://learn.microsoft.com/en-us/azure/firewall/rule-processing#example-1 -
MughundhanRaveendran-MSFT 12,481 Reputation points
2021-12-17T05:43:29.85+00:00 @Ali , Did you get a chance to look into my previous comment? please check and let me know if it was helpful
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(252.8, 6%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKE%3C/text%3E%3C/svg%3E)
kevin eckart 26 Reputation points2023-06-05T17:36:16.26+00:00 Any update here?
Sign in to comment
Sign in to answer