Send data to disable public access Azure SQL Database

Petter Cavallin 0 Reputation points
2024-09-03T05:47:24.46+00:00

Hi

What i want to accomplish:

Send data through azure with a refresh rate of 2 seconds too a power bi report.

Java script sending on prem data via event hubs using stream analytics collected in an azure sql database in an azure sql server, all with private access through a virtual network. The Vnet is in a different resource group. I have two subnets for the vnet, one for eventhubs and one for the sql server.

Problem:

I manage to send data through the eventhub private access by the vnet using the FQDN-name in the script. But, when i want too disable public access in the azure sql server and using private endpoint connected too the vnet it does not work.

I have used both the privatelink-address for the server and the regular server name. Both manual entry and automatic. When using the private link the login is ok, but the error is then SSL-related.

Error message with privatelink-server name:

Querying SQL Database returned an error: A connection was successfully established with the server, but then an error occurred during the login process. (provider: SSL Provider, error: 0 - The target principal name is incorrect.).

Any ideas?

BR

Petter

Azure Event Hubs
Azure Event Hubs
An Azure real-time data ingestion service.
627 questions
Azure Stream Analytics
Azure Stream Analytics
An Azure real-time analytics service designed for mission-critical workloads.
351 questions
0 comments

4 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Bhargava-MSFT 30,816 Reputation points Microsoft Employee
    2024-09-03T19:59:02.21+00:00

    Hello Petter Cavallin,

    Welcome to the Microsoft Q&A forum.

    Based on the error message you provided, it seems that the issue is related to SSL certificate validation. When you use a private endpoint to connect to an Azure SQL Database, the SSL certificate presented by the server may not match the hostname used to connect to the server. This can cause SSL certificate validation to fail.

    If you are using a private link FQDN, you may need to configure your client to trust the server certificate. This can be done by setting the TrustServerCertificate property to True in your connection string of the java script

    Ex: if you want to use *.privatelink.sql.azuresynapse.net to connect to server instead of *.sql.azuresynapse.net, you need to trust server certificate

    You can test this part using SSMS

    User's image

    User's image

    The issue was resolved after checking the trust server certificate

    I hope this helps. Please let me know if you have any further questions.

  2. Petter Cavallin 0 Reputation points
    2024-09-12T11:56:46.42+00:00

    Hi! Thanks for your answer1 I didnt get a notification when you answered

    I'll look into your suggestion but im quite sure we have that box checked

    Will get back to you shortly!

    BR

    Petter

    0 comments
  3. Petter Cavallin 0 Reputation points
    2024-09-12T12:09:50.9833333+00:00

    Or actually its more how do i control the "Trust certificate" when using eventhub with SQL source? do i access this from SSMS and in that case how?

  4. Petter Cavallin 0 Reputation points
    2024-09-13T09:05:47.2933333+00:00

    Okey so you mean that updating TSC in the javascript the connection to the SQL will work?

    Are you aware of the flow?

    Javascript sending data from local server -> azure eventhub -> eventhub input stream analytics -> sql database output stream analytics -> azure sql database -> Power BI

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.