部署在 IIS 上时 Azure AD 登录失败

Question

Azure ad authentication working fine with Visual studio IIS Express. But when publish and deploy in IIS server throwing error.

The application built on .NET core 3.1

System.InvalidOperationException: IDX20803: Unable to obtain configuration from: 'https://login.microsoftonline.com/common/discovery/instance?authorization_endpoint=https://login.microsoftonline.com/common/oauth2/v2.0/authorize&api-version=1.1'.

 ---> System.IO.IOException: IDX20804: Unable to retrieve document from: 'https://login.microsoftonline.com/common/discovery/instance?authorization_endpoint=https://login.microsoftonline.com/common/oauth2/v2.0/authorize&api-version=1.1'.

 ---> System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.

 ---> System.IO.IOException: Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host..

 ---> System.Net.Sockets.SocketException (10054): An existing connection was forcibly closed by the remote host.

Answer 1

Firstly, make sure your IIS server has TLS 1.2 support enabled.

Also, enable TLS 1.2 support in your .net core application by adding below in startup, in the beginning of Main method of Program.cs.

System.Net.ServicePointManager.SecurityProtocol = System.Net.SecurityProtocolType.Tls12 | System.Net.ServicePointManager.SecurityProtocol;

Read more about TLS update in Azure here