Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Sign-in Error "The SSL connection could not be established, see inner exception." #7593

Closed
3 tasks done
mmdegraaf opened this issue Dec 15, 2023 · 9 comments
Closed
3 tasks done
Labels
⚙️ identity service Related to the Identity Service process ⚙️ sign-in Related to sign-in ✅ mitigated Has been resolved or has known workaround

Comments

@mmdegraaf
Copy link

Preflight Checklist

Storage Explorer Version

1.32.1

Regression From

1.32.1

Architecture

i86

Storage Explorer Build Number

20231114.10

Platform

Windows

OS Version

Windows 11 23H2

Bug Description

Can't sign-in anymore using Azure Storage Explorer. Been using SE for a long time already and never had this problem before. When i tried the re-authenticate option today it failed with the same error. I remove the account from SE and tried to add it using the option "Sign in with Azure"; this gives the same error. I remove SE completely, rebooted my laptop and reinstalled from scratch. Same error.

Steps to Reproduce

Launch SE and try to sign-in.

Actual Experience

When i start SE from the command prompt and choose Azure as a sing in option i can see the actual error:
Failed to addAccount, authFlowType: systemBrowser, authResult: {"UserCancelled":false,"Errors":[{"Message":"The SSL connection could not be established, see inner exception.","ExceptionType":"System.Net.Http.HttpRequestException","HResult":-2146232800,"ExceptionString":"System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.\r\n ---> System.IO.IOException: Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host..\r\n ---> System.Net.Sockets.SocketException (10054): An existing connection was forcibly closed by the remote host.\r\n --- End of inner exception stack trace ---\r\n at System.Net.Sockets.Socket.AwaitableSocketAsyncEventArgs.ThrowException(SocketError error, CancellationToken cancellationToken)\r\n at System.Net.Sockets.Socket.AwaitableSocketAsyncEventArgs.System.Threading.Tasks.Sources.IValueTaskSource<System.Int32>.GetResult(Int16 token)\r\n at System.Net.Security.SslStream.g__InternalFillHandshakeBufferAsync|189_0[TIOAdapter](TIOAdapter adap, ValueTask1 task, Int32 minSize)\r\n at System.Net.Security.SslStream.ReceiveBlobAsync[TIOAdapter](TIOAdapter adapter)\r\n at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm)\r\n at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)\r\n --- End of inner exception stack trace ---\r\n at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)\r\n at System.Net.Http.HttpConnectionPool.ConnectAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)\r\n at System.Net.Http.HttpConnectionPool.CreateHttp11ConnectionAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)\r\n at System.Net.Http.HttpConnectionPool.AddHttp11ConnectionAsync(HttpRequestMessage request)\r\n at System.Threading.Tasks.TaskCompletionSourceWithCancellation1.WaitWithCancellationAsync(CancellationToken cancellationToken)\r\n at System.Net.Http.HttpConnectionPool.GetHttp11ConnectionAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)\r\n at System.Net.Http.HttpConnectionPool.SendWithVersionDetectionAndRetryAsync(HttpRequestMessage request, Boolean async, Boolean doRequestAuth, CancellationToken cancellationToken)\r\n at System.Net.Http.RedirectHandler.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)\r\n at System.Net.Http.HttpClient.g__Core|83_0(HttpRequestMessage request, HttpCompletionOption completionOption, CancellationTokenSource cts, Boolean disposeCts, CancellationTokenSource pendingRequestsCts, CancellationToken originalCancellationToken)\r\n at Microsoft.Identity.Client.Http.HttpManager.ExecuteAsync(Uri endpoint, IDictionary2 headers, HttpContent body, HttpMethod method, ILoggerAdapter logger, CancellationToken cancellationToken)\r\n at Microsoft.Identity.Client.Http.HttpManagerWithRetry.SendRequestAsync(Uri endpoint, IDictionary2 headers, HttpContent body, HttpMethod method, ILoggerAdapter logger, Boolean doNotThrow, Boolean retry, CancellationToken cancellationToken)\r\n at Microsoft.Identity.Client.Http.HttpManagerWithRetry.SendGetAsync(Uri endpoint, IDictionary2 headers, ILoggerAdapter logger, Boolean retry, CancellationToken cancellationToken)\r\n at Microsoft.Identity.Client.OAuth2.OAuth2Client.ExecuteRequestAsync[T](Uri endPoint, HttpMethod method, RequestContext requestContext, Boolean expectErrorsOn200OK, Boolean addCommonHeaders, Func2 onBeforePostRequestData)\r\n at Microsoft.Identity.Client.OAuth2.OAuth2Client.DiscoverAadInstanceAsync(Uri endpoint, RequestContext requestContext)\r\n at Microsoft.Identity.Client.Instance.Discovery.NetworkMetadataProvider.SendInstanceDiscoveryRequestAsync(Uri authority, RequestContext requestContext)\r\n at Microsoft.Identity.Client.Instance.Discovery.NetworkMetadataProvider.FetchAllDiscoveryMetadataAsync(Uri authority, RequestContext requestContext)\r\n at Microsoft.Identity.Client.Instance.Discovery.NetworkMetadataProvider.GetMetadataAsync(Uri authority, RequestContext requestContext)\r\n at Microsoft.Identity.Client.Instance.Discovery.InstanceDiscoveryManager.FetchNetworkMetadataOrFallbackAsync(RequestContext requestContext, Uri authorityUri)\r\n at Microsoft.Identity.Client.Instance.Discovery.InstanceDiscoveryManager.GetMetadataEntryAsync(AuthorityInfo authorityInfo, RequestContext requestContext, Boolean forceValidation)\r\n at Microsoft.Identity.Client.Instance.AuthorityManager.RunInstanceDiscoveryAndValidationAsync()\r\n at Microsoft.Identity.Client.Internal.Requests.InteractiveRequest.ExecuteAsync(CancellationToken cancellationToken)\r\n at Microsoft.Identity.Client.Internal.Requests.RequestBase.RunAsync(CancellationToken cancellationToken)\r\n at Microsoft.Identity.Client.ApiConfig.Executors.PublicClientExecutor.ExecuteAsync(AcquireTokenCommonParameters commonParameters, AcquireTokenInteractiveParameters interactiveParameters, CancellationToken cancellationToken)\r\n at Microsoft.Developer.IdentityService.AccountProvider.MsalNetworkServicesImpl.PerformSystemWebBrowserFlowAsync(MsalGetTokenInteractiveContext context, String qp, CancellationToken cancellationToken) in D:\a\_work\1\s\src\IdentityService\Microsoft.Developer.IdentityService\AccountProvider\AADAccountProvider\MsalNetworkServicesImpl.cs:line 803\r\n at Microsoft.Developer.IdentityService.AccountProvider.MsalNetworkServicesImpl.ExecuteInteractiveFlowAsync(IGetTokenInteractiveContext getTokenContext, AuthenticationFlowType authenticationFlowType, CancellationToken cancellationToken) in D:\a\_work\1\s\src\IdentityService\Microsoft.Developer.IdentityService\AccountProvider\AADAccountProvider\MsalNetworkServicesImpl.cs:line 468\r\n at Microsoft.Developer.IdentityService.AccountProvider.MsalNetworkServicesImpl.ExecuteInteractiveFlowAsync(IGetTokenInteractiveContext getTokenContext, AuthenticationFlowType authenticationFlowType, CancellationToken cancellationToken) in D:\a\_work\1\s\src\IdentityService\Microsoft.Developer.IdentityService\AccountProvider\AADAccountProvider\MsalNetworkServicesImpl.cs:line 486\r\n at Microsoft.Developer.IdentityService.AccountProvider.AadAccountProviderNetworkServicesBase.AcquireTokenWithPromptInternalAsync(String resource, String tenant, UserIdentifier userId, String queryParameters, AuthenticationFlowType authenticationFlowType, Dictionary2 additionalAuthProperties, CancellationToken cancellationToken) in D:\\a\\_work\\1\\s\\src\\IdentityService\\Microsoft.Developer.IdentityService\\AccountProvider\\AADAccountProvider\\AadAccountProviderNetworkServicesBase.cs:line 851\r\n at Microsoft.Developer.IdentityService.AccountProvider.AadAccountProviderService.CreateAccountInnerAsync(String userName, String queryParameters, AuthenticationFlowType authenticationFlowType, Dictionary2 additionalAuthProperties, Boolean homeTenantOnly, CancellationToken cancellationToken) in D:\a\_work\1\s\src\IdentityService\Microsoft.Developer.IdentityService\AccountProvider\AADAccountProvider\AadAccountProviderService.cs:line 902","Data":{}}]}

Expected Experience

No response

Additional Context

No response

@MRayermannMSFT MRayermannMSFT added ⚙️ sign-in Related to sign-in ⚙️ identity service Related to the Identity Service process labels Dec 15, 2023
@MRayermannMSFT
Copy link
Member

@mmdegraaf are you behind any sort of proxy or vpn that might be inteferring with the connection?

@mmdegraaf
Copy link
Author

There is no proxy and no firewall. It actually was working for almost 2 years without any problems. Is there any test i could perform ?

@JasonYeMSFT
Copy link
Contributor

@mmdegraaf Could you please follow the steps in this section of our troubleshooting guide to raise the authentication log level, reproduce the issue one more time and collect the authentication logs? https://learn.microsoft.com/en-us/troubleshoot/azure/azure-storage/storage-explorer-troubleshooting?tabs=Windows#authentication-logs

@mmdegraaf
Copy link
Author

StorageExplorer.zip
@JasonYeMSFT As requested the logs attached.

@JasonYeMSFT
Copy link
Contributor

Are you still experiencing this issue? I went through the logs but didn't find anything significant other than the HTTP error, which might be related to your network configuration.

@mmdegraaf
Copy link
Author

mmdegraaf commented Jan 9, 2024 via email

@MRayermannMSFT
Copy link
Member

@mmdegraaf we have no updates to share from our side. Unfortunately it looks like getting this solved likely rests with the support folks being able to help you out. We'll leave this issue open a while longer incase you/they have any further questions related to this problem.

@mmdegraaf
Copy link
Author

mmdegraaf commented Jan 22, 2024 via email

@prafulbusa
Copy link

Make to have these below "Functions" values are added for registry 'Type' Reg_MULTI_SZ

RSAE-PSS/SHA256
RSAE-PSS/SHA384
RSAE-PSS/SHA512
RSA/SHA256
RSA/SHA384
RSA/SHA1
ECDSA/SHA256
ECDSA/SHA384
ECDSA/SHA1
DSA/SHA1
RSA/SHA512
ECDSA/SHA512

See picture below
image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
⚙️ identity service Related to the Identity Service process ⚙️ sign-in Related to sign-in ✅ mitigated Has been resolved or has known workaround
Projects
None yet
Development

No branches or pull requests

4 participants