APP SERVICES DOMAIN CERTIFICATE PROBLEM

CORMANT 0 Reputation points
2024-09-04T04:32:50.4833333+00:00

Updated SSL Cross Certificate R6-R3 was bound on our domain in App services, however, our clients that is using Android 9 below is encountering SSL related problem like unsecured or private error.

Our workaround for this is to import Certificate R6 to each mobile devices for it to go through our application. Our SSL support wants to ask Azure for:

Proper/alternative way to install CA Certificates for Azure App Service and that the Intermediate CA1, Intermediate CA2 & Root CA included in the pfx file were binding to our domains (specify some samples like console-qa.authenticate.ph & qa.authenticate.ph) are not being detected by online SSL Checker tools, which are required for end-users with older Android OS 7 & below to securely access our domains.

Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
7,902 questions
{count} votes

1 answer

Sort by: Most helpful
  1. ajkuma 26,636 Reputation points Microsoft Employee
    2024-09-10T19:56:39.38+00:00

    CORMANT, Firstly, apologies for the delayed response.

    Based on my understanding of your issue description, you are encountering SSL related problems with your clients using Android 9 below. I understand that you have already imported Certificate R6 to each mobile device as a workaround. However, you are looking for a proper/alternative way to install CA Certificates for Azure App Service. Is that correct?

    Regarding your concern about the Intermediate CA1, Intermediate CA2 & Root CA included in the pfx file not being detected by online SSL Checker tools, it is possible that the SSL Checker tools are not able to recognize the certificate chain. This can happen if the SSL Checker tools do not have access to the complete certificate chain.

    If your certificate authority gives you multiple certificates in the certificate chain, you have to merge the certificates following the same order ( if you haven't done this already so). For more information, please checkout this doc section : Merge intermediate certificates

    Kindly let us know, happy to follow-up with you further.


    If the answer helped (pointed, you in the right direction) > please click Accept Answer to benefit the community find answers quickly to similar question_._

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.