Azure Static Web Apps
An Azure service that provides streamlined full-stack web app development.
759 questions
same here, on automatically generated domain
Static Web App is returning a "This site can’t provide a secure connection" error
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(147.20000000000002, 10%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESW%3C/text%3E%3C/svg%3E)
Steve Wallace
11
Reputation points
I am working on very simple Azure Static WebApp.
I completed this example once https://learn.microsoft.com/en-us/azure/static-web-apps/getting-started?tabs=vanilla-javascript and it all worked fine. Now when trying to build a new example it seems something is wrong with the generated certificate.
I get a 'This site can’t provide a secure connection' error. This happens as well the original site I build - which stopped working.
Is there something wrong with my subscription account? What could be causing this problem?
Regards
Steve Wallace
{count} votes
-
brtrach-MSFT 15,176 Reputation points Microsoft Employee2022-02-04T04:27:23.37+00:00 @Steve Wallace Thank you for reaching out to us about the error you are encountering.
This sounds like an SSL error with the site but we need to ask some additional scoping questions to ensure we understand the error.
Can you please tell us where you are receiving this error? Is it when you navigate to the site in a browser? If so, are you using a custom domain (contoso.com) to access the site or the internal DNS name (contoso.azurestaticwebapps.net)?
If it is a custom domain name, can you please verify if there is an SSL certificate set to secure the custom domain?
We look forward to your reply.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(188.79999999999998, 45%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKP%3C/text%3E%3C/svg%3E)
Kenji Prahyudi 5 Reputation points2023-04-24T07:45:50.06+00:00 @brtrach-MSFT I face the same issue, I've successfully added a custom domain for my web app, but when I access the web from that custom domain, the website sometimes provided a wrong certificate, it's for "*.azurewebsite.net" instead of my custom domain.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(208, 31%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EK%3C/text%3E%3C/svg%3E)
Kristoffer 11 Reputation points2023-04-24T08:57:41.5+00:00 It seems like a common misunderstanding that MS is able to create certificates for custom domains. If you wish to use another domain name than *.azurewebsite.net or *.azurestaticwebapps.net you need to get your PKI team to issue a certificate within your own domain *.yourcompany.com and import the certificate in to the app-service.
Also notice that this will also require DNS setup to work from the team working with DNS in your company -
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(198.4, 48%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELS%3C/text%3E%3C/svg%3E)
Lucas Speranza 0 Reputation points2023-09-02T13:47:17.98+00:00 This matter is fundamental for the usability of Azure Static Web Apps, and it is unresolved. The certificate should be provided for free and be fully managed, but it is not working for custom CNAME records. It only works for the @ A record with ALIAS to the Azure Static Web App resource. When accessing the www CNAME, you get the following error:
The message you provided in Portuguese can be translated to English as:
"This server couldn't prove that it's www.youraddress.com; its security certificate is from *.azureaddress-3-2-1-ase.p.azurewebsites.net. This could be caused by an incorrect configuration or by an attacker intercepting the connection."
The comment from brtrach-MSFT does not resolve the issue. Also, it is not true that MS is unable to create certificates for custom domains. It is.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(9.6, 13%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERH%3C/text%3E%3C/svg%3E)
Robert Henry 10 Reputation points2023-10-26T05:14:47.7933333+00:00 same problem here, on a automatically generated domain
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(57.599999999999994, 48%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPW%3C/text%3E%3C/svg%3E)
Paul Walls 0 Reputation points2023-10-31T20:23:17.5833333+00:00 I am having the same problem. For the people saying "it is a common misunderstanding that MS is able to create certificates for custom domains"... Here is a screenshot from the Azure resource.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(182.40000000000003, 64%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBS%3C/text%3E%3C/svg%3E)
Boyd, Stephen 0 Reputation points2024-01-03T22:07:11.11+00:00 We are also seeing this issue, with an automatically generated azurestaticapps.net URL. It is not a custom domain. It seems to happen more often within a few minutes of deployment.
Sign in to comment
4 answers
Sort by: Most helpful
-
Robert Henry 10 Reputation points
2023-10-26T05:15:34.3833333+00:00 -
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 85%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EO%3C/text%3E%3C/svg%3E)
Osobytes 1 Reputation point2023-10-30T05:43:39.9933333+00:00 I'm facing the same issue on an azure autogenerated domain. This is not only when using custom domains. (For context, it initially worked, but then I did try to add a new custom domain but pressed cancel and closed the blade, and then the default generated domain started having this error when trying to access from using any chrome based browser)
Sign in to comment -
-
Steve Wallace 11 Reputation points
2022-02-04T09:28:41.317+00:00 Hi,
The static web app has an automatically generated domain - which I believe should have a certificate automatically provided..
But somehow the certificate is not working...
Thanks for your help : )
Steve
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 14.000000000000002%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMT%3C/text%3E%3C/svg%3E)
Micah Tan 1 Reputation point2022-02-11T23:04:35.34+00:00 I was running into a similar issue earlier this week (SSL_ERROR_RX_RECORD_TOO_LONG) on an auto-generated domain, but it seemed to have magically cleared itself up with no other intervention on my part.
-
Deleted
This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Comments have been turned off. Learn more