Skip to content
This repository has been archived by the owner on Feb 28, 2024. It is now read-only.

TLS errors logged at Web App startup #22

Closed
jfitch11 opened this issue Jan 18, 2022 · 1 comment
Closed

TLS errors logged at Web App startup #22

jfitch11 opened this issue Jan 18, 2022 · 1 comment

Comments

@jfitch11
Copy link

Sorry if this is the incorrect place but I recently required TLS 1.2 on my storage accounts and this has lead to some TLS errors being logged to my Kudu instance. This is occurring for multiple apps running on a Windows App Service plan using .NET 4.8 and to multiple storage accounts. My apps are all able to r/w to these storage accounts without issue. Each app is set to log application logs, web server logs, detailed error messages and failed request traces to blob storage. There are logs going to these storage accounts, I'm just unsure if I'm missing any. The following is what gets logged at app startup:

2022-01-18T12:06:09
Microsoft.WindowsAzure.Storage.StorageException: The remote server returned an error: (400) Bad Request. ---> System.Net.WebException: The remote server returned an error: (400) Bad Request.
at System.Net.HttpWebRequest.GetResponse()
at Microsoft.WindowsAzure.Storage.Core.Executor.Executor.ExecuteSync[T](RESTCommand1 cmd, IRetryPolicy policy, OperationContext operationContext) --- End of inner exception stack trace --- at Microsoft.WindowsAzure.Storage.Core.Executor.Executor.ExecuteSync[T](RESTCommand1 cmd, IRetryPolicy policy, OperationContext operationContext)
at Microsoft.WindowsAzure.Storage.Blob.CloudBlockBlob.DownloadBlockList(BlockListingFilter blockListingFilter, AccessCondition accessCondition, BlobRequestOptions options, OperationContext operationContext)
at Microsoft.WindowsAzure.WebSites.Diagnostics.AzureBlobTraceListener.AppendStreamToBlob(Stream stream)
at Microsoft.WindowsAzure.WebSites.Diagnostics.AzureBlobTraceListener.ConsumeBuffer()
Request Information
RequestID:19a439a8-801e-006d-0363-0c50cf000000
RequestDate:Tue, 18 Jan 2022 12:06:08 GMT
StatusMessage:The TLS version of the connection is not permitted on this storage account.
ErrorCode:TlsVersionNotPermitted

2022-01-18T12:06:09
Microsoft.WindowsAzure.Storage.StorageException: The remote server returned an error: (400) Bad Request. ---> System.Net.WebException: The remote server returned an error: (400) Bad Request.
at System.Net.HttpWebRequest.GetResponse()
at Microsoft.WindowsAzure.Storage.Core.Executor.Executor.ExecuteSync[T](RESTCommand1 cmd, IRetryPolicy policy, OperationContext operationContext) --- End of inner exception stack trace --- at Microsoft.WindowsAzure.Storage.Core.Executor.Executor.ExecuteSync[T](RESTCommand1 cmd, IRetryPolicy policy, OperationContext operationContext)
at Microsoft.WindowsAzure.Storage.Blob.CloudBlobContainer.ListBlobsSegmented(String prefix, Boolean useFlatBlobListing, BlobListingDetails blobListingDetails, Nullable`1 maxResults, BlobContinuationToken currentToken, BlobRequestOptions options, OperationContext operationContext)
at Microsoft.WindowsAzure.WebSites.Diagnostics.AzureBlobTraceListener.CleanupOldBlobLogs(Object state)
Request Information
RequestID:1dfd4168-601e-0081-3b63-0c445e000000
RequestDate:Tue, 18 Jan 2022 12:06:08 GMT
StatusMessage:The TLS version of the connection is not permitted on this storage account.
ErrorCode:TlsVersionNotPermitted

2022-01-18T12:06:09
Microsoft.WindowsAzure.Storage.StorageException: The remote server returned an error: (400) Bad Request. ---> System.Net.WebException: The remote server returned an error: (400) Bad Request.
at System.Net.HttpWebRequest.GetResponse()
at Microsoft.WindowsAzure.Storage.Core.Executor.Executor.ExecuteSync[T](RESTCommand1 cmd, IRetryPolicy policy, OperationContext operationContext) --- End of inner exception stack trace --- at Microsoft.WindowsAzure.Storage.Core.Executor.Executor.ExecuteSync[T](RESTCommand1 cmd, IRetryPolicy policy, OperationContext operationContext)
at Microsoft.WindowsAzure.Storage.Blob.CloudBlockBlob.DownloadBlockList(BlockListingFilter blockListingFilter, AccessCondition accessCondition, BlobRequestOptions options, OperationContext operationContext)
at Microsoft.WindowsAzure.WebSites.Diagnostics.AzureBlobTraceListener.AppendStreamToBlob(Stream stream)
at Microsoft.WindowsAzure.WebSites.Diagnostics.AzureBlobTraceListener.ConsumeBuffer()
Request Information
RequestID:051c05da-d01e-0060-5863-0c981b000000
RequestDate:Tue, 18 Jan 2022 12:06:09 GMT
StatusMessage:The TLS version of the connection is not permitted on this storage account.
ErrorCode:TlsVersionNotPermitted

Standard Azure support has proven unhelpful so I'm wondering if there is some configuration I'm missing.

@puneetg1983
Copy link
Contributor

Nothing in the stack above tells me that this issue is related to DaaS. Please let me know if you think otherwise.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants