Azure Analysis Service REST API的TLS版本及查询方法

Hey there! Let me break this down clearly for you regarding Azure Analysis Services (AAS) REST API and TLS versions:

Current TLS Version Requirement #

Azure Analysis Services REST API only supports TLS 1.2 right now. Microsoft deprecated and disabled TLS 1.0 and 1.1 for all Azure services (including AAS) some time ago to enforce secure communication standards. Any requests using older TLS versions will be immediately rejected.

How to Verify the TLS Version in Use #

Here are practical, actionable ways to confirm which TLS version your requests are using, or validate that the API requires TLS 1.2:

• Use a network packet analyzer (like Wireshark)

  1. Launch Wireshark and set a filter for your AAS instance's domain (e.g., host *.asazure.windows.net)
  2. Send a test request to the AAS REST API (via Postman, curl, or your application code)
  3. Look for TLS handshake packets in the capture. The "Client Hello" message shows the TLS version your client attempts to use, and the "Server Hello" will confirm the version the server agrees on—this will always be TLS 1.2 for AAS.

• Test with curl commands
  Run these terminal commands to validate support for different TLS versions (replace <your-aas-instance> with your actual AAS instance name):

  • For TLS 1.2 (should return valid data):

    curl -v --tlsv1.2 https://<your-aas-instance>.asazure.windows.net/v1.0/metadata/catalog
    

  • For TLS 1.1 or 1.0 (should fail with a connection error):

    curl -v --tlsv1.1 https://<your-aas-instance>.asazure.windows.net/v1.0/metadata/catalog
    

    curl -v --tlsv1.0 https://<your-aas-instance>.asazure.windows.net/v1.0/metadata/catalog
    

• Validate directly in application code
  For example, in C# you can explicitly set the TLS version and test the connection:

  using System.Net;
  using System.Net.Http;
  
  var client = new HttpClient();
  ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12;
  
  try
  {
      var response = await client.GetAsync("https://<your-aas-instance>.asazure.windows.net/v1.0/metadata/catalog");
      response.EnsureSuccessStatusCode();
      Console.WriteLine("TLS 1.2 connection successful!");
  }
  catch (HttpRequestException ex)
  {
      Console.WriteLine($"Connection failed: {ex.Message}");
  }
  

  If you switch SecurityProtocolType.Tls12 to Tls11 or Tls, the request will fail—confirming older TLS versions aren't supported.

内容的提问来源于stack exchange，提问作者Kaja