azure-docs
azure-docs copied to clipboard
MicrosoftDocs
Unable to access ACR
I am trying to access ACR using az command util to login. Receiving CONNECTIVITY_SSL_ERROR . Not sure what leads to it as I have set up the ACR per this tutorial command.
C:\Users\<>>az acr check-health -n <registry-name> --yes
Docker daemon status: available
Docker version: 'Docker version 20.10.16, build f756502, platform linux/amd64'
Docker pull of 'mcr.microsoft.com/mcr/hello-world:latest' : OK
Azure CLI version: 2.38.0
DNS lookup to sbaksdemoregistry.azurecr.io at IP <IP> : OK
2022-07-12 12:53:26.998535 An error occurred: CONNECTIVITY_SSL_ERROR
Unable to establish a secure connection to the registry 'sbaksdemoregistry.azurecr.io'. Are you using a proxy server?
Please refer to https://aka.ms/acr/errors#connectivity_ssl_error for more information.
Any help on the same can help.
Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.
- ID: 62b41061-33b2-c724-3506-bb81e137ab2d
- Version Independent ID: 60040202-f426-13e6-cf9d-d65c5de46a1d
- Content: Tutorial: Deploy Spring Boot Application on AKS cluster with MySQL Flexible Server within a VNet
- Content Source: articles/mysql/flexible-server/tutorial-deploy-springboot-on-aks-vnet.md
- Service: mysql
- Sub-service: flexible-server
- GitHub Login: @shreyaaithal
- Microsoft Alias: shaithal
Additional information:
I am able to access the registry URL from browser and doesn't complaint for any SSL connection error.
@eyankzz Thanks for your findings,We will investigate and update as appropriate
@eyankzz - Are you using a proxy server? Follow the steps mentioned in this doc and the linked Azure CLI doc - https://docs.microsoft.com/azure/container-registry/container-registry-health-error-reference#connectivity_ssl_error
Thanks for the update. My mistake that I did not mention around proxy explicitly. I thought you will catch it as I was able to access the URL via browser.
No, there is no proxy configured. The link shared is the same as you see from tool's output and but obviously followed and was not helpful (it just explains the error, no remediation or action on how to solve this).
Explicitly stating what I have tried conveying above: link did not help and I was not using the tool from behind any proxy.
@eyankzz did you figure this problem out? We are having exactly the same problem.
We have been given a root certificate which our company injects in all requests - weird, but when I do all checks still no proxy server is detected.
@GimmeDaKitty : It has been sometime since I worked on this, let me check my history to identify if I was able to get through it or took a detour around this. Kindly give me some time to get back.
@eyankzz @GimmeDaKitty - Did you find any solution? Am also having exactly the same problem.
@eyankzz @GimmeDaKitty - Did you find any solution? Am also having exactly the same problem.
In our case the switch of the corporate network in our office was injecting a corporate certificate for all outbound traffic. When I run the "am I running behind a proxy" test on my machine the results were negative which was very confusing.
We have had to request our IT team to "whitelist" a number of URLS. The switch ignores now those URLS (meaning: it applied SSL bypass) and does not inject the cert anymore. I have not tried specifically with az acr but it has fixed our certificate problems with other endpoints.
@eyankzz @GimmeDaKitty - Did you find any solution? Am also having exactly the same problem.
In our case the switch of the corporate network in our office was injecting a corporate certificate for all outbound traffic. When I run the "am I running behind a proxy" test on my machine the results were negative which was very confusing.
We have had to request our IT team to "whitelist" a number of URLS. The switch ignores now those URLS (meaning: it applied SSL bypass) and does not inject the cert anymore. I have not tried specifically with az acr but it has fixed our certificate problems with other endpoints.
Thanks for the update !!!
@eyankzz - Are you using a proxy server? Follow the steps mentioned in this doc and the linked Azure CLI doc - https://docs.microsoft.com/azure/container-registry/container-registry-health-error-reference#connectivity_ssl_error
It appears that the documentation has been moved to https://learn.microsoft.com/en-us/cli/azure/use-azure-cli-successfully-troubleshooting#error-sslerror-bad-handshakecertificate-verify-failed-proxy-blocks-connection
