SSL ISSUE while connecting to vision url

Irfan 1

Hi Team,

We are running a program in our Linux instance in which we are connecting to https://southeastasia.api.cognitive.microsoft.com and it is throwing SSL Certification failed error.
Kindly suggest me how to import the SSL certificate and what are all changes need to make in order connect to this url through our program.

PFB for the program and error details:

Piece of code which is throwing error:

import requests
azure_vision_url = "https://southeastasia.api.cognitive.microsoft.com/vision/v2.0/"
headers = {"Content-Type": "application/octet-stream"}
params = {"mode": "Printed"}
response = requests.post(azure_vision_url, headers=headers, params=params, verify=True)
print(response.json())

Note : verify is the parameter to enable SSL verification. We are able to run the code by turning off SSL verification but as per our platform policies it is not advisable to run without SSL.

kindly suggest me on how to resolve this issue

Rohit Mungi 801 Reputation points

2020-05-29T16:31:43.433+00:00

Hello Irfan,

What version of Linux are you using and what are the SSL/TLS versions are installed on this system from which the calls are made?

Do you see this issue if you run the calls directly through REST API console?

-Rohit
Irfan 1 Reputation point

2020-06-01T05:30:14.82+00:00

Thank you Rohit for your reply. our linux version :3.10.0-862.6.3.el7.x86_64.
SSL Version : SSLv3
TLS Version : TLSv1.2
this machine is hosted on private cloud. we have another instance which is hosted in public cloud and in public cloud it is working fine. but in private cloud it is throwing error. kindly suggest
romungi-MSFT 42,761 Reputation points Microsoft Employee

2020-06-02T13:39:03.457+00:00

With respect to certificates I don't think you need to install any as it works for the same image from your public cloud. Is there are any restrictions on your private cloud network settings that is blocking this? This endpoint enforces TLS 1.2 as per the cognitive services endpoint security protocol.

Do you see same behavior with vision 3.0 endpoints?
Irfan 1 Reputation point

2020-06-05T06:10:39.6+00:00

Thank you for your response.
I face the same issue with vision 3.0. i have checked with infra team they said as such there is no restrictions while accessing this url. i tired download ssl certificate of this url from browser but no luch. could you please guide what other detail i need to check in order make this url accessible with out SSL issue
romungi-MSFT 42,761 Reputation points Microsoft Employee

2020-06-05T06:32:13.877+00:00

With respect to certificates there is no need to install certificates manually while trying to access the API.

Due to the nature of your setup and the call being made from a private network. Does your private network allow access through port 443 or does it force to use port 80 while making an outgoing call? Also, are there any load balancer's in between to distribute this traffic?

To debug this issue with the current setup it would be easier to work with one of our support engineer who can securely work with you if you can share the configuration to advise futher? If you have a support plan you can raise a support issue from Azure portal or we could help you in this case with a one time free support ticket for this issue.

Share via

SSL ISSUE while connecting to vision url