Azure-sdk-for-python: ContainerClient.delete_blobs() fails with TLS version not matched

[foobarna]

• Package Name: azure-storage-blob
• Package Version: 12.4.0
• Operating System: Does not matter
• Python Version: 3.6.11

Describe the bug
When invoking container.delete_blobs('path/to/blob') the code throws PartialBatchErrorException with "The TLS version of the connection is not permitted on this storage account.".

The methods container.download_blob('path/to/blob') and container.delete_blob('path/to/blob') are successful.

To Reproduce
Steps to reproduce the behavior:

credential = ClientSecretCredential(.....)
blob_client = BlobServiceClient(account_url=account_url, credential=credential)
container = blob_client.get_container_client('some_container_name')

container.delete_blobs('path/to/blob1', 'path/to/blob2')

Expected behavior
To delete the blobs.

Screenshots
If applicable, add screenshots to help explain your problem.

Additional context
The storage account is set to minimum TLS version 1.0.

[msftbot[bot]]

Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @xgithubtriage.

[foobarna]

Hi @xiafu-msft ! Any news regarding this?

[pemari-msft]

This is a known issue between the preview TLS version feature and Batch api. By changing the value of the TLS restriction to 1.0, you should be able to work around the restriction. We are fixing this as soon as possible on the service.

[epicfaace]

@pemari-msft I'm facing this issue even when changing the value of the TLS restriction to 1.0 or removing the SSL requirement altogether. The only way I can work around this issue for now is by using .delete_blob instead of delete_blobs().

[xiafu-msft]

Hi @epicfaace

We discussed and tried a couple of things offline yesterday and it looks like currently the workaround is using http...
Is it possible for you go to azure portal, and disable Enforce Secure Transfer under Configuration?

[foobarna]

Hi @pemari-msft ,
I don't think you have read the full description of the issue, I've stated that we already tried setting minimum version of TLS to 1.0 on the storage's settings.

[foobarna]

Hey @xiafu-msft ,
Using HTTP is out of the question. We would be glad if this issue can be fixed, otherwise just remove it from SDK.

[xiafu-msft]

Hi @foobarna

It will be fixed later, so we will not remove this from SDK. Sorry to block you.
@amishra-dev could know more details about this.

[epicfaace]

Is it possible for you go to azure portal, and disable Enforce Secure Transfer under Configuration?

@xiafu-msft , I tried that as well, but got the same error.

[xiafu-msft]

Hi @epicfaace
You need to set the account url to http://youraccountname.blob.core.windows.net, that's a workaround currently...

[xiafu-msft]

Update: there is a service rollout that is happening that should fix the issue.

[foobarna]

I can confirm that the .detele_blobs() method now works with no modification on the code/library version nor Azure Blob Storage account.

[tasherif-msft]

Hi @foobarna we will now close this issue. Let us know if anything else comes up.
Thank you.