The listener for function was unable to start due to SSL connection issue

[AJ1058310]

Hi,
I got thoes error with my durable function(python) in dev environment, but it works well when I run locally in my machine.

• both Orchestrator function and Activity function got SSL connection issue:

[Error] The listener for function 'func_name' was unable to start.Microsoft.Azure.WebJobs.Host.Listeners.FunctionListenerException : 
The listener for function 'func_name' was unable to start. 
---> DurableTask.AzureStorage.Storage.DurableTaskStorageException : The SSL connection could not be established, see inner exception. 
---> Microsoft.WindowsAzure.Storage.StorageException : The SSL connection could not be established, see inner exception. 
---> System.Net.Http.HttpRequestException : The SSL connection could not be established, see inner exception. 
---> System.IO.IOException : Authentication failed because the remote party has closed the transport stream.
at System.Net.Security.SslStream.StartReadFrame(Byte[] buffer,Int32 readBytes,AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslStream.PartialFrameCallback(AsyncProtocolRequest asyncRequest)
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Net.Security.SslStream.ThrowIfExceptional()
at System.Net.Security.SslStream.InternalEndProcessAuthentication(LazyAsyncResult lazyResult)
at System.Net.Security.SslStream.EndProcessAuthentication(IAsyncResult result)
at System.Net.Security.SslStream.EndAuthenticateAsClient(IAsyncResult asyncResult)
at System.Net.Security.SslStream.<>c.<AuthenticateAsClientAsync>b__65_1(IAsyncResult iar)
at System.Threading.Tasks.TaskFactory`1.FromAsyncCoreLogic(IAsyncResult iar,Func`2 endFunction,Action`1 endAction,Task`1 promise,Boolean requiresSynchronization)
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at async System.Net.Http.ConnectHelper.EstablishSslConnectionAsyncCore(Stream stream,SslClientAuthenticationOptions sslOptions,CancellationToken cancellationToken)
End of inner exception

• Client function(with httpTrigger) also got similar error:

[Error] Executed 'Functions.azfn_http_start' (Failed, Id=1b50b6b7-d2ad-498b-8a3b-971b5e8c486e, Duration=27389ms)Result: FailureException: Exception: {'Message': 'Something went wrong while processing your request', 'ExceptionMessage': 'The SSL connection could not be established, see inner exception.', 'ExceptionType': 'DurableTask.AzureStorage.Storage.DurableTaskStorageException', 'StackTrace': '   
at DurableTask.AzureStorage.Storage.AzureStorageClient.MakeStorageRequest[T](Func`3 storageRequest, String accountName, String operationName, String clientRequestId, Boolean force) in /_/src/DurableTask.AzureStorage/Storage/AzureStorageClient.cs:line 140\n   
at DurableTask.AzureStorage.Storage.Table.CreateIfNotExistsAsync() in /_/src/DurableTask.AzureStorage/Storage/Table.cs:line 50\n  
at DurableTask.AzureStorage.AzureStorageOrchestrationService.GetTaskHubCreatorTask() in /_/src/DurableTask.AzureStorage/AzureStorageOrchestrationService.cs:line 328\n   
at DurableTask.AzureStorage.AzureStorageOrchestrationService.EnsureTaskHubAsync() in /_/src/DurableTask.AzureStorage/AzureStorageOrchestrationService.cs:line 293\n   
at Microsoft.Azure.WebJobs.Extensions.DurableTask.DurableTaskExtension.StartTaskHubWorkerIfNotStartedAsync() in D:\\a\\_work\\1\\s\\src\\WebJobs.Extensions.DurableTask\\DurableTaskExtension.cs:line 1406\n   
at Microsoft.Azure.WebJobs.Host.Listeners.FunctionListener.StartAsync(CancellationToken cancellationToken, Boolean allowRetry) in C:\\projects\\azure-webjobs-sdk-rqm4t\\src\\Microsoft.Azure.WebJobs.Host\\Listeners\\FunctionListener.cs:line 68\n   
at DurableTask.AzureStorage.AzureStorageOrchestrationService.CreateTaskOrchestrationAsync(TaskMessage creationMessage, OrchestrationStatus[] dedupeStatuses) in /_/src/DurableTask.AzureStorage/AzureStorageOrchestrationService.cs:line 1548\n   
at DurableTask.Core.TaskHubClient.InternalCreateOrchestrationInstanceWithRaisedEventAsync(String orchestrationName, String orchestrationVersion, String orchestrationInstanceId, Object orchestrationInput, IDictionary`2 orchestrationTags, OrchestrationStatus[] dedupeStatuses, String eventName, Object eventData, Nullable`1 startAt) in /_/src/DurableTask.Core/TaskHubClient.cs:line 616\n   
at Microsoft.Azure.WebJobs.Extensions.DurableTask.DurableClient.Microsoft.Azure.WebJobs.Extensions.DurableTask.IDurableOrchestrationClient.StartNewAsync[T](String orchestratorFunctionName, String instanceId, T input) in D:\\a\\_work\\1\\s\\src\\WebJobs.Extensions.DurableTask\\ContextImplementations\\DurableClient.cs:line 210\n   
at Microsoft.Azure.WebJobs.Extensions.DurableTask.HttpApiHandler.HandleStartOrchestratorRequestAsync(HttpRequestMessage request, String functionName, String instanceId) in D:\\a\\_work\\1\\s\\src\\WebJobs.Extensions.DurableTask\\HttpApiHandler.cs:line 808\n   
at Microsoft.Azure.WebJobs.Extensions.DurableTask.HttpApiHandler.HandleRequestAsync(HttpRequestMessage request) 
in D:\\a\\_work\\1\\s\\src\\WebJobs.Extensions.DurableTask\\HttpApiHandler.cs:line 300'}Stack:   File "/azure-functions-host/workers/python/3.9/LINUX/X64/azure_functions_worker/dispatcher.py", line 402, 
in _handle__invocation_requestcall_result = await self._run_async_func(File "/azure-functions-host/workers/python/3.9/LINUX/X64/azure_functions_worker/dispatcher.py", line 654, 
in _run_async_funcreturn await ExtensionManager.get_async_invocation_wrapper(File "/azure-functions-host/workers/python/3.9/LINUX/X64/azure_functions_worker/extension.py", line 147, 
in get_async_invocation_wrapperresult = await function(**args)File "/home/site/wwwroot/azfn_http_start/__init__.py", line 14, 
in maininstance_id = await client.start_new(function_name_, client_input=payload)File "/home/site/wwwroot/.python_packages/lib/site-packages/azure/durable_functions/models/DurableOrchestrationClient.py", line 89, 
in start_newraise Exception(ex_message)

I checked the TLS/SSL settings in portal: HTTPS Only->On, Minimum TLS Version->1.2
It looks like related to AzureStorage, so I've check the env var AzureWebJobsStorage in AppSettings -> the value is correct.
In "Outbound networking features" we have a NSG, maybe we need to do some configs?

Thanks for your help!

[AJ1058310]

Finally, we found the solution, it was caused by missing rules in NSG.
After adding Microsoft.Storage in SERVICE ENDPOINTS of subnet, it works!
(edit via portal -> Route table -> Overview -> click in the correspondent Subnet name -> add Microsoft.Storage in SERVICE ENDPOINTS)