Изменить

Поделиться через

Analyzing server certificate validation errors for outgoing web service requests telemetry

  • Статья

APPLIES TO: Business Central 2025 release wave 1 (v26) and later.

Server certificate validation error telemetry gathers data about errors in validating server certificates on the endpoint when doing outgoing web service requests using the AL HTTPClient module. Use the data to contact the owner of the endpoint and ask them to fix their certificate.

General dimensions

The following table explains the general dimensions included in a server certificate validation error trace. The table lists the dimensions that are specific to Business Central.

Dimension Description or value
message HTTP server certificate validation failed when calling endpoint: {endpoint}

Custom dimensions

The following table explains the custom dimensions included in a server certificate validation error trace.

Dimension Description or value
aadTenantId

Note

Azure Active Directory is now Microsoft Entra ID. Learn more

Specifies the Microsoft Entra tenant ID used for Microsoft Entra authentication. For on-premises, if you aren't using Microsoft Entra authentication, this value is common.
alObjectId Specifies the ID of the AL object that made the request.
alObjectName Specifies the name of the AL object that made the request.
alObjectType Specifies the type of the AL object that made the request.
certificateChain Specifies an ordered list of certificates, including an SSL/TLS certificate and certificate authority (CA) certificates, which allows the receiver to verify the trustworthiness of the sender and all CAs.
certificateIssuerName Specifies the value of the issuer field in the certificate properties.
certificateSubject Specifies the value of the subject field in the certificate properties. This field typically includes the Common Name (CN) attribute.
companyName The current company name.
endpoint Specifies the endpoint for the request. The endpoint is cleaned to include only the base URI.
environmentName Specifies the name of the tenant environment. Learn more in Managing Environments.
environmentType Specifies the environment type for the tenant, such as Production or Sandbox. Learn more in Environment Types.
eventId RT0052
extensionId Specifies the appID of the extension that made the request.
extensionName Specifies the name of the extension that made the request.
extensionPublisher Specifies the publisher of the extension that made the request.
extensionVersion Specifies the version of the extension that made the request.
failureReason Specifies why the certificate didn't validate.
httpMethod Specifies the HTTP method used in the outgoing request. Values include: POST, GET, PUT, PATCH, or DELETE.

Sample KQL code

This KQL code can help you get started analyzing server certificate validation errors

// added in version 26.0
traces
| where timestamp > ago(60d) // change if your retention policy is different than the default
| where customDimensions has 'RT0052'
| where customDimensions.eventId == 'RT0052'
| project timestamp
// in which environment did it happen
, aadTenantId = customDimensions.aadTenantId
, environmentName = customDimensions.environmentName
, environmentType = customDimensions.environmentType
, companyName = customDimensions.companyName
// in which extension/app
, extensionId = customDimensions.extensionId
, extensionName = customDimensions.extensionName
, extensionVersion = customDimensions.extensionVersion
, extensionPublisher = customDimensions.extensionPublisher
// in which object
, alObjectId = customDimensions.alObjectId
, alObjectName = customDimensions.alObjectName
, alObjectType = customDimensions.alObjectType
// certificate information
, certificateChain = customDimensions.certificateChain
, certificateIssuerName = customDimensions.certificateIssuerName
, certificateSubject = customDimensions.certificateSubject
// http request details
, endpoint = customDimensions.endpoint
, httpMethod = customDimensions.httpMethod
// why did it fail?
, failureReason = customDimensions.failureReason

HttpClient data type
Telemetry overview
Enable sending telemetry to Application Insights