Does it works on Azure China (21Vianet) ?

[eduardoferrari]

I'm trying to deploy some certificates in china, I can do the registration with the KV but when I try to order the certificate I'm getting error 500 when it tries to "Getting DNS Client Token from AAD"

DBUG: Getting DNS Client Token from AAD...
ERROR: Unhandled exception. Azure.Identity.AuthenticationFailedException: DefaultAzureCredential authentication failed due to an unhandled exception:
ERROR: ---> Azure.Identity.AuthenticationFailedException: ManagedIdentityCredential authentication failed: Service request failed.
ERROR: Status: 500 (Internal Server Error)

I'm connecting with a System Managed Identity in a container
az cloud set --name "AzureChinaCloud"
az login --identity
az account set --subscription $TargetSubscriptionId

It is connecting properly to the China environment and setting the context to the correct subscription.

Thank you for the support.

[eduardoferrari]

Ok, I think I found it looking into the source code...

On the DnsFactory.cs at line 54 you have a fixed string "https://management.azure.com/.default" and this one is different for China....

I will make a change to make it dynamic and a PR later to solve it...

But please, would be nice to have some other eyes to validate my idea.

Thank you