Response does not contain "minimumTlsVersion" parameter from Azure Front Door Classic.

[vit-corp]

• azure-mgmt-frontdoor:
• 1.2.0:
• Any:
• Any:

Describe the bug
Response does not contain "minimumTlsVersion" parameter from Azure Front Door Classic like stated here - https://learn.microsoft.com/en-us/rest/api/frontdoor/frontdoor/front-doors/list?tabs=HTTP#minimumtlsversion

Expected behavior
Response contains "minimumTlsVersion" parameter.

[kristapratico]

@vit-corp thanks for your issue, we'll investigate and get back to you as soon as possible.

[msyyc]

@ChenxiJiang333 Please help on this issue.
Note: Since we are on vacation for Chinese New Year, please expect delayed response.

[ChenxiJiang333]

Hi @vit-corp, minimumTlsVersion is a property of CustomHttpsConfiguration, you need to also add a custom domain to your Front Door or its value would be null.

[github-actions]

Hi @vit-corp. Thank you for opening this issue and giving us the opportunity to assist. To help our team better understand your issue and the details of your scenario please provide a response to the question asked above or the information requested above. This will help us more accurately address your issue.

[vit-corp]

Hi @ChenxiJiang333 ,
Yes, I did it.
It works for the new standard/premium Front Door, but it does not work for classic Front Door.
Please check it on your side.
Thank you!

[ChenxiJiang333]

@vit-corp, my subscription does not allow me to register a domain, could you follow https://github.com/Azure/azure-sdk-for-python/blob/main/doc/dev/debug_guide.md to a provide detailed log for us to do a deep investigation?

[github-actions]

Hi @vit-corp. Thank you for opening this issue and giving us the opportunity to assist. To help our team better understand your issue and the details of your scenario please provide a response to the question asked above or the information requested above. This will help us more accurately address your issue.

[vit-corp]

@ChenxiJiang333 , I created classic front door and i do not see minimumtlsversion in response (endpoints).
I see that it is mentioned in documentation - https://learn.microsoft.com/en-us/rest/api/frontdoor/frontdoor/front-doors/list?tabs=HTTP&source=docs#minimumtlsversion.

{
"value": [
{
"id": "/subscriptions/1111111111111111111111/resourcegroups/111111111111111111/providers/Microsoft.Network/frontdoors/11111111111111111",
"type": "Microsoft.Network/frontdoors",
"name": "111111111",
"location": "Global",
"tags": {
"ComplianceStatus": "Green",
"CustodianRule": "111111111111"
},
"properties": {
"routingRules": [
{
"id": "/subscriptions/1111111111111111111/resourcegroups/411111111111111/providers/Microsoft.Network/Frontdoors/1111111111111/RoutingRules/11111111111",
"name": "11111111111",
"type": "Microsoft.Network/Frontdoors/RoutingRules",
"properties": {
"routeConfiguration": {
"customForwardingPath": null,
"forwardingProtocol": "MatchRequest",
"cacheConfiguration": null,
"backendPool": {
"id": "/subscriptions/11111111111111/resourceGroups/1111111111111/providers/Microsoft.Network/frontDoors/1111111111/backendPools/1111111111"
},
"@odata.type": "#Microsoft.Azure.FrontDoor.Models.FrontdoorForwardingConfiguration"
},
"resourceState": "Enabled",
"frontendEndpoints": [
{
"id": "/subscriptions/11111111111111/resourceGroups/111111111111111/providers/Microsoft.Network/frontDoors/11111111111/frontendEndpoints/1111111111111"
}
],
"acceptedProtocols": [
"Http",
"Https"
],
"patternsToMatch": [
"/*"
],
"enabledState": "Enabled"
}
}
],
"resourceState": "Enabled",
"loadBalancingSettings": [
{
"id": "/subscriptions/11111111111111111111/resourcegroups/11111111111111111111/providers/Microsoft.Network/Frontdoors/11111111111111111111/LoadBalancingSettings/11111111111111111111",
"name": "11111111111111111111",
"type": "Microsoft.Network/Frontdoors/LoadBalancingSettings",
"properties": {
"resourceState": "Enabled",
"sampleSize": 4,
"successfulSamplesRequired": 2,
"additionalLatencyMilliseconds": 0
}
}
],
"healthProbeSettings": [
{
"id": "/subscriptions/11111111111111111111/resourcegroups/11111111111111111111/providers/Microsoft.Network/Frontdoors/11111111111111111111/HealthProbeSettings/11111111111111111111",
"name": "438healthprobered",
"type": "Microsoft.Network/Frontdoors/HealthProbeSettings",
"properties": {
"resourceState": "Enabled",
"path": "/",
"protocol": "Http",
"intervalInSeconds": 120,
"enabledState": "Enabled",
"healthProbeMethod": "Get"
}
}
],
"backendPools": [
{
"id": "/subscriptions/11111111111111111111/resourcegroups/11111111111111111111/providers/Microsoft.Network/Frontdoors/11111111111111111111/BackendPools/11111111111111111111",
"name": "438backendpoolred",
"type": "Microsoft.Network/Frontdoors/BackendPools",
"properties": {
"backends": [
{
"address": "www.bing.com",
"httpPort": 80,
"httpsPort": 443,
"priority": 1,
"weight": 50,
"backendHostHeader": "www.bing.com",
"enabledState": "Enabled"
}
],
"resourceState": "Enabled",
"loadBalancingSettings": {
"id": "/subscriptions/11111111111111111111/resourceGroups/11111111111111111111/providers/Microsoft.Network/frontDoors/411111111111111111111/loadBalancingSettings/11111111111111111111"
},
"healthProbeSettings": {
"id": "/subscriptions/11111111111111111111/resourceGroups/11111111111111111111/providers/Microsoft.Network/frontDoors/11111111111111111111/healthProbeSettings/438healthprobered"
}
}
}
],
"frontendEndpoints": [
{
"id": "/subscriptions/11111111111111111111/resourcegroups/11111111111111111111/providers/Microsoft.Network/Frontdoors/11111111111111111111/FrontendEndpoints/11111111111111111111",
"name": "438fdendpoint",
"type": "Microsoft.Network/Frontdoors/FrontendEndpoints",
"properties": {
"resourceState": "Enabled",
"hostName": "438frontdoorred.azurefd.net",
"sessionAffinityEnabledState": "Enabled",
"sessionAffinityTtlSeconds": 0,
"webApplicationFirewallPolicyLink": null,
"customHttpsProvisioningState": null,
"customHttpsProvisioningSubstate": null,
"customHttpsConfiguration": null
}
}
],
"backendPoolsSettings": {
"enforceCertificateNameCheck": "Disabled",
"sendRecvTimeoutSeconds": 0
},
"enabledState": "Enabled",
"cName": "438frontdoorred.azurefd.net",
"friendlyName": "",
"provisioningState": "Succeeded"
}
}
]
}

[ChenxiJiang333]

Hi @vit-corp, by this log, I didn't see you really add a custom domain to your frontdoor though...
You could follow this direction to do it through portal with your https settings.

Or, follow this sample to create a front door with one more frontend that has its host point to the default frontend host, then follow this sample to set its https configurations through SDK.

[vit-corp]

Hi @ChenxiJiang333 , I added custom domain but I still do not see minimumtlsversion in response (endpoints).

{
"value": [
{
"id": "/subscriptions/9fafec62-0f51-41df-be3c-72e6a9b46431/resourcegroups/438-rg-green1/providers/Microsoft.Network/frontdoors/438frontdoorred",
"type": "Microsoft.Network/frontdoors",
"name": "438frontdoorred",
"location": "Global",
"tags": {
"ComplianceStatus": "Green",
"CustodianRule": "ecc-azure-438-dep_frontdoor_classic_latest_tls"
},
"properties": {
"routingRules": [
{
"id": "/subscriptions/9fafec62-0f51-41df-be3c-72e6a9b46431/resourcegroups/438-rg-green1/providers/Microsoft.Network/Frontdoors/438frontdoorred/RoutingRules/438fdroutingrle",
"name": "438fdroutingrle",
"type": "Microsoft.Network/Frontdoors/RoutingRules",
"properties": {
"routeConfiguration": {
"customForwardingPath": null,
"forwardingProtocol": "MatchRequest",
"cacheConfiguration": null,
"backendPool": {
"id": "/subscriptions/9fafec62-0f51-41df-be3c-72e6a9b46431/resourceGroups/438-rg-green1/providers/Microsoft.Network/frontDoors/438frontdoorred/backendPools/438backendpoolred"
},
"@odata.type": "#Microsoft.Azure.FrontDoor.Models.FrontdoorForwardingConfiguration"
},
"resourceState": "Enabled",
"frontendEndpoints": [
{
"id": "/subscriptions/9fafec62-0f51-41df-be3c-72e6a9b46431/resourceGroups/438-rg-green1/providers/Microsoft.Network/frontDoors/438frontdoorred/frontendEndpoints/438fdendpoint"
}
],
"acceptedProtocols": [
"Http",
"Https"
],
"patternsToMatch": [
"/*"
],
"enabledState": "Enabled"
}
}
],
"resourceState": "Enabled",
"loadBalancingSettings": [
{
"id": "/subscriptions/9fafec62-0f51-41df-be3c-72e6a9b46431/resourcegroups/438-rg-green1/providers/Microsoft.Network/Frontdoors/438frontdoorred/LoadBalancingSettings/438bplbred",
"name": "438bplbred",
"type": "Microsoft.Network/Frontdoors/LoadBalancingSettings",
"properties": {
"resourceState": "Enabled",
"sampleSize": 4,
"successfulSamplesRequired": 2,
"additionalLatencyMilliseconds": 0
}
}
],
"healthProbeSettings": [
{
"id": "/subscriptions/9fafec62-0f51-41df-be3c-72e6a9b46431/resourcegroups/438-rg-green1/providers/Microsoft.Network/Frontdoors/438frontdoorred/HealthProbeSettings/438healthprobered",
"name": "438healthprobered",
"type": "Microsoft.Network/Frontdoors/HealthProbeSettings",
"properties": {
"resourceState": "Enabled",
"path": "/",
"protocol": "Http",
"intervalInSeconds": 120,
"enabledState": "Enabled",
"healthProbeMethod": "Get"
}
}
],
"backendPools": [
{
"id": "/subscriptions/9fafec62-0f51-41df-be3c-72e6a9b46431/resourcegroups/438-rg-green1/providers/Microsoft.Network/Frontdoors/438frontdoorred/BackendPools/438backendpoolred",
"name": "438backendpoolred",
"type": "Microsoft.Network/Frontdoors/BackendPools",
"properties": {
"backends": [
{
"address": "www.bing.com",
"httpPort": 80,
"httpsPort": 443,
"priority": 1,
"weight": 50,
"backendHostHeader": "www.bing.com",
"enabledState": "Enabled"
}
],
"resourceState": "Enabled",
"loadBalancingSettings": {
"id": "/subscriptions/9fafec62-0f51-41df-be3c-72e6a9b46431/resourceGroups/438-rg-green1/providers/Microsoft.Network/frontDoors/438frontdoorred/loadBalancingSettings/438bplbred"
},
"healthProbeSettings": {
"id": "/subscriptions/9fafec62-0f51-41df-be3c-72e6a9b46431/resourceGroups/438-rg-green1/providers/Microsoft.Network/frontDoors/438frontdoorred/healthProbeSettings/438healthprobered"
}
}
}
],
"frontendEndpoints": [
{
"id": "/subscriptions/9fafec62-0f51-41df-be3c-72e6a9b46431/resourcegroups/438-rg-green1/providers/Microsoft.Network/Frontdoors/438frontdoorred/FrontendEndpoints/438fdendpoint",
"name": "438fdendpoint",
"type": "Microsoft.Network/Frontdoors/FrontendEndpoints",
"properties": {
"resourceState": "Enabled",
"hostName": "438frontdoorred.azurefd.net",
"sessionAffinityEnabledState": "Disabled",
"sessionAffinityTtlSeconds": 0,
"webApplicationFirewallPolicyLink": null,
"customHttpsProvisioningState": null,
"customHttpsProvisioningSubstate": null,
"customHttpsConfiguration": null
}
},
{
"id": "/subscriptions/9fafec62-0f51-41df-be3c-72e6a9b46431/resourcegroups/438-rg-green1/providers/Microsoft.Network/Frontdoors/438frontdoorred/FrontendEndpoints/endpoint1",
"name": "endpoint1",
"type": "Microsoft.Network/Frontdoors/FrontendEndpoints",
"properties": {
"resourceState": "Enabled",
"hostName": "endpoint1.ulrapepega.store",
"sessionAffinityEnabledState": "Disabled",
"sessionAffinityTtlSeconds": 0,
"webApplicationFirewallPolicyLink": null,
"customHttpsProvisioningState": null,
"customHttpsProvisioningSubstate": null,
"customHttpsConfiguration": null
}
}
],
"backendPoolsSettings": {
"enforceCertificateNameCheck": "Disabled",
"sendRecvTimeoutSeconds": 0
},
"enabledState": "Enabled",
"cName": "438frontdoorred.azurefd.net",
"friendlyName": "",
"provisioningState": "Succeeded"
}
}
]
}

[ChenxiJiang333]

@vit-corp have you enabled the https traffic for it I wonder? Could you help run the codes below and record the log as well?

client.frontend_endpoints.begin_enable_https(
        resource_group_name="rg1",
        front_door_name="frontDoor1",
        frontend_endpoint_name="frontendEndpoint1",
        custom_https_configuration={
            "certificateSource": "FrontDoor",
            "minimumTlsVersion": "1.0",
            "protocolType": "ServerNameIndication",
        },
    ).result()