Azure Web App: TLS support for OLEDB-driver

Claes Eriksson 20

I have trouble running a website on Azure, using the Microsoft 'Web App'. The website is unable to connect to the SQL Server database running in the same resource group (received error: "The connection's current state is closed").
According to the website developer/publisher, they recommend running TLS 1.0 because, according to them; "This is required as the default OLEDB drivers that are available on Azure App Services do not currently support TLS 1.2". The problem is that I cannot select TLS 1.0, because Microsoft will not allow TLS below 1.2, from November 2024.

Is it true that the Microsoft 'Web App' on Azure doesn't support TLS 1.2 for OLEDB driver?

Erland Sommarskog 114.6K Reputation points MVP

2024-12-21T10:29:35.64+00:00

According to the website developer/publisher, they recommend running TLS 1.0 because, according to them; "This is required as the default OLEDB drivers that are available on Azure App Services do not currently support TLS 1.2".

What a piece of hogwash! TLS 1.0 has been frowned upon for about ten years now.

What OLE DB provider are they using? They should be using MSOLEDBSQL or MSOLEDBSQL19.
Vijayalaxmi Kattimani 740 Reputation points Microsoft Vendor

2024-12-23T02:32:51.6666667+00:00

Hi Claes Eriksson,

Just checking in to see if the below answer provided by @Sina Salam helped.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Claes Eriksson 20 Reputation points

2024-12-24T00:43:11.7866667+00:00

@Erland Sommarskog According to the connection string in the Web.config-file, it seems like they use msoledbsql. I have asked the server developer for clarification.
Claes Eriksson 20 Reputation points

2024-12-24T00:57:35.9733333+00:00

Hi @Vijayalaxmi Kattimani

Thank you for asking. Sorry for the slow reply, I had time off during the weekend.
The response from @Sina Salam helped me forward. However I have not yet managed to solve the problem. I have added a follow up question as a comment to Sina's answer.

Happy holidays!
Erland Sommarskog 114.6K Reputation points MVP

2024-12-24T09:32:12.7933333+00:00

@Erland Sommarskog According to the connection string in the Web.config-file, it seems like they use msoledbsql. I have asked the server developer for clarification.

That may not be the right place to look at. Myself, I know nothing about Azure Web Apps, but in another thread where I was trying to help, someone pointed out this:

Did you check your Azure App service connection string in (Environmental Variables --> Connection strings)? This will override the connection string from your application app settings, see if you have the correct connection string in the environment variable of the Azure app service.

Also, when thinking more of it, are they really using OLE DB at all? I would expect that in Azure Web Apps, you would use SqlClient to connect to Azure SQL Database.

In any case, when you developers are claiming that TLS 1.2 is not supported, it's not really aimed to give confidence in that they know what they are doing.

Accepted answer

Sina Salam 14,551 Reputation points

2024-12-21T03:05:46.8366667+00:00
Hello Claes Eriksson,

Welcome to the Microsoft Q&A and thank you for posting your questions here.

I understand that you have a serious concern about Azure Web App: TLS support for OLEDB-driver.

Starting from November 2024, Azure will enforce a minimum TLS version of 1.2 for all services, meaning TLS 1.0 and 1.1 will no longer be supported for secure connections - https://learn.microsoft.com/en-us/azure/app-service/overview-tls

So, dismiss the outdated TLS 1.0 requirement.

Update the OLEDB driver and ensure application and SQL Server configurations support TLS 1.2. The latest versions of the OLEDB driver (starting from version 18.2.1) are designed to work with Azure SQL Database and other Azure services, supporting modern encryption standards including TLS 1.2 - https://learn.microsoft.com/en-us/sql/connect/oledb/features/using-azure-active-directory?view=sql-server-ver16

Use detailed logging and testing to isolate any remaining connectivity issues.

Alternatively, if the issue persists:

Create a test Azure Web App using a minimal application to test connectivity to the SQL Server.

Configure a hybrid connection or private endpoint if network-related issues are suspected.

I hope this is helpful! Do not hesitate to let me know if you have any other questions.

Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful.
Please sign in to rate this answer.
Claes Eriksson 20 Reputation points

2024-12-24T00:36:16.3233333+00:00

Hello Sina,

Thank you for your reply, I realy appreciate it!
Sorry for my slow reply; I had time off during the weekend.

I have a follow up question regarding step 2 in your recommended steps. Is it possible to update the OLEDB driver on the standard 'Azure Web App' service that I'm using for hosting the website? Or do I need to use another app/service in Azure? Eg. a virtual machine? I have looked at 'Development Tools'->'Extensions'->'Add' for the 'Azure Web App', but a didn't find any DB drivers options there.

I will have some time of during the holidays this week, so my future replies may be delayed, so i apologise in advance for the slow future response.

Thanks in advance and Happy holidays!

Sina Salam 14,551 Reputation points

2024-12-24T09:42:38.03+00:00

Hello Claes Eriksson,

Thank you for your feedback. I'm glad to know that the answer helped.

For environments where OLEDB must be updated, a VM or a containerized solution provides the required flexibility. In the standard Azure Web App (App Service) environment, you cannot directly install or update OLEDB drivers or other custom system-level components.

If you are looking for simplicity and are open to modifying your application code, updating the data access method might be the easiest path forward for long-term compatibility.

Sucess.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Azure Web App: TLS support for OLEDB-driver

0 additional answers

Your answer