Spring boot container With truststore in Azure App Service

Question

I have a legacy spring boot Application that uses a common library that injects a RestTemplate which is default configured to make some HTTPS calls, Meaning it is always looking for a trust-store in the classpath. Spring boot by default needs a key store when we enable trust-store

Issue

I successfully containerized and deployed this app in the App service however App service is failing with the below error

Bad Request This combination of host and port requires TLS.

Most of the comments out there suggest App service containers need to run on HTTP with port 80 and not HTTPS.

Questions

Is there a way to deploy this container running HTTPS to be deployed on the App service and get a call at an endpoint?
How are people deploying spring boot apps in Azure app service if there is a requirement for trust-store as in trusting the third party servers?

Any help is appreciated

Answer 1

AravindRajasekharanPillai-8474, Thanks for the good question.

You may integrate outbound SSL certificates for Spring Boot with Azure Key Vault. Kindly take a look at this doc for a detailed steps on the approach.

Steps to Call external service via TLS/SSL using Azure Spring Cloud provided feature

Sample - Spring Boot - Secure Communications Using End-to-end TLS/SSL

This guide explains how to secure communications for Spring Boot apps using end-to-end TLS/SSL and SSL certificates managed in Azure Key Vault.
Azure Spring Cloud is used for illustration. You can apply the same approach to secure communications when you deploy Spring Boot apps to Azure Kubernetes Service, App Service or Virtual Machines.

Additionally,
App Service terminates TLS/SSL at the front ends.
That means that TLS/SSL requests never get to your app. You don't need to, and shouldn't implement any support for TLS/SSL into your app.
The front ends are located inside Azure data centers. If you use TLS/SSL with your app, your traffic across the Internet will always be safely encrypted.

Answer 2

Hi @Aravind Rajasekharan Pillai ,

You need to disable TLS in Spring Boot app. App Service Front ends terminate SSL connection for all HTTPS requests and then forward the request to your application instance as described here https://learn.microsoft.com/en-us/archive/msdn-magazine/2017/february/azure-inside-the-azure-app-service-architecture#scale-unit-network-configuration

For outbound HTTPS call , you can add the private certificate required by the 3rd party app to App Service as per this link https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate .