Issues connecting deployed .NET Core 6 API to Azure Database for MySQL via SSL

bisondev 26

Hi,

I have a .NET Core 6 API that I've deployed to and hosted on an Azure App Service for Windows. I've also set up an Azure Database for MySQL service as well, and I am attempting to connect these services via SSL. I've set up application insights for my API so I can see errors that happen within the API. When I try to hit an endpoint that accesses the database, I see the following error from Application Insights:

Here is a more detailed description of the error:

Any help is appreciated! I've been searching for a long time and have looked at all sorts of documentation and can't find anything helpful here. Thank you!!

1 answer

Zhi Lv - MSFT 32,146 Reputation points Microsoft Vendor

2022-01-17T02:41:13.973+00:00

Hi @bisondev ,

From the error message, we can see that the application cannot find the certificate file. When configure SSL connectivity in your application, have you ever configured SSL certificate, and whether the certificate is validated or not and the file path is correct? You can check it.

Here are some relates articles, you can refer to them:

Configure SSL connectivity in your application to securely connect to Azure Database for MySQL

Understanding the changes in the Root CA change for Azure Database for MySQL Single Server

Best regards,
Dillion
Please sign in to rate this answer.

1 person found this answer helpful.
bisondev 26 Reputation points

2022-01-19T01:39:17.427+00:00

Thanks for your response Dillon,

I have reviewed the documents that you sent. I can confirm that I can connect via SSL through the MySQL workbench client.

The part I'm confused about is more to do with the deployed code that runs on the app service. As in where do I store the SSL certificate on the app service, and how do I reference it's location from the connection string?

Any information you have here would be greatly appreciated.

Thank you!

SnehaAgrawal-MSFT 21,346 Reputation points

2022-01-25T10:45:19.1+00:00

For Azure app services connecting to Azure Database for MySQL, If you're explicitly including the path to SSL cert file in your code, then you would need to download the new cert and produce a combined certificate and use the certificate file.

A good example of this scenario is when you use custom containers in App Service as shared in the App Service documentation.

Check this link: https://learn.microsoft.com/en-us/azure/app-service/tutorial-multi-container-app#configure-database-variables-in-wordpress

bisondev 26 Reputation points

2022-01-28T02:04:21.58+00:00

Thank you for your response.

Can you please elaborate on where I should put the SSL cert file? I'm examining the connection string for my database and in order to connect via SSL I need to include the path to the certificate. In the example you provided, it shows the certificate name being added to an Azure App Service App setting. I don't think this has any meaning for my app if I don't include the certificate in my repository that I'm deploying to the App Service.. Can you please let me know if that sounds right?

To be clear, I'm not deploying a Docker container for my application, simply a .net 6 API.

Thank you!
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Issues connecting deployed .NET Core 6 API to Azure Database for MySQL via SSL

1 answer

Your answer