Hello,
I have a question regarding custom certificates for Azure App Service.
My organization is currently trying to move a service to Azure Functions, but the endpoint needs to supply a custom SSL certificate signed by our internal CA (Which in turn uses a few intermediate CAs as well).
I properly uploaded the pfx containing my chain, and also verified it on an IaaS deployment, where the certificate is properly applied.
On an App Service however, I run into https://stackoverflow.com/questions/66983185/app-service-not-returning-full-certificate-chain-with-custom-tls-binding as well, the intermediate certs of our custom cert are not delivered, and the client is effectively unable to perform a valid SSL handshake.
As indicated by the SO post I went ahead and setup an Application Gateway. This solves the SSL certificate situation, but with this option I am unable to forward the client certificate to my app service. I found some resources which indicate that I need an App Gateway v2 to customize headers and forward the client cert through a header instead, but to be honest, paying >100$ for app gateway ingress just to have this working is a no-go for test environments.
What options do I have? Basically both approaches only solve 50% of the equation it seems.
I would like to get rid of the additional gateway layer completely and just do the whole setup on an App Service, but it seems like self-signed certs signed through a custom internal CA just don't work.
