Connecting to on-premise api's using Azure Logic app

Question

How to connect to on-premise api's using Azure logic app...Tried using Logic app custom connector but we are getting trust relationship error.

Below is the complete Error :

{
"status": 500,
"message": "Received error payload from gateway service with ID 534028: Substituted: HttpRequestException:<pi>System.Net.Http.HttpRequestException: An error occurred while sending the request. ---> System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.\r\n at System.Net.TlsStream.EndWrite(IAsyncResult asyncResult)\r\n at System.Net.ConnectStream.WriteHeadersCallback(IAsyncResult ar)\r\n --- End of inner exception stack trace ---\r\n at System.Net.HttpWebRequest.EndGetRequestStream(IAsyncResult asyncResult, TransportContext& context)\r\n at System.Net.Http.HttpClientHandler.GetRequestStreamCallback(IAsyncResult ar)\r\n --- End of inner exception stack trace ---\r\n at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()\r\n at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)\r\n at Microsoft.PowerBI.DataMovement.Pipeline.GatewayCore.GatewayHttpWebProcessor.<>c_DisplayClass0_0.

Answer 1

@Vamshi Kishore KALIKOTA Could you please enable the CAPI logs to check for which certificate build we are getting the error? You may refer to https://social.technet.microsoft.com/wiki/contents/articles/242.windows-pki-troubleshooting-capi2-diagnostics.aspx

If you find that you are getting issue while connecting to a Microsoft service then you need to either manually download all the certificate for which the chain is failing or check if below CRL URLs are accessible or white listed at their firewall:

crl.microsoft.com TCP 80
mscrl.microsoft.com TCP 80
crl3.digicert.com TCP 80

You need to modify the firewall settings such that they allow access to these urls.