MicrosoftI really like this article and am using CAPI logs to diagnose some issues I'm having in an ASP.NET Core application that is consuming a third-party API. I'm supplying the API a Bearer Token and it's sending a TLS certificate. All this was working well until recently where I'm getting an SSL error about a partial SSL chain. For whatever reason it's no longer verifying the TLS cert coming from the third-party library. Since this had been working for months I'm thinking either some security patch or group policy change is causing the problem. But I will say these logs are a treasure trove of good things to isolate the problem. I was thinking I'd have to buy a third-party app. Do you have any ideas I could investigate?
MicrosoftThanks so much for your comment, I'm glad the article have been helpful in your troubleshooting process! The SSL error might be due to a missing intermediate certificate or a recent group policy change. Validate the certificate chain and capture a network trace for both client and server which might help you investigating it further, you can use tool like Wireshark.
How to Capture Simultaneous Wireshark Traces from Client and Server for Network Troubleshooting
Also, verify if the third-party API changed its cert setup.
