Azure SSL Cert Questions

[greerde]

I cannot seem to find the correct setup for my SSL cert on MS Azure Websites that will make Subscriptions function correctly.  I can authenticate just fine (oauth) and http (non-ssl) subscriptions work fine.  

However, when I enable https, I get the following:

When I try the free, built-in cert for https://mywebsite.azurewebsites.net (SSL Cert for *.azurewebsites.net), I get SSLPeerUnverifiedException.

When I try a GoDaddy SHA-2 SSL cert, I get SSLException.  I read in this forum there are known issues with GoDaddy's SHA-2 certs, so I switched to Starfield SHA-2.  I also get an SSLException. 

I see that GoDaddy also offers SHA-1, but I have not tried that yet.  

In Azure websites, there are SNI and IP based SSL bindings.  I tried both, neither work.  I have read that SNI is not supported, so that is not a surprise.  

Any ideas? 

[JeremiahFitbit]

What's your app's URL?

[greerde]

Fxwell.com or fxwell.azurewebsites.net

[greerde]

Just to document the current setup (I've switched things around many times in the past couple days):

- Azure Website

- GoDaddy SSL Cert, using Starfield SHA-2 algorithm

- IP Based SSL binding for fxwell.com and www.fxwell.com (not using SNI SSL right now)

- "A name" record setup using dedicated IP 

- https://fxwell.azurewebsites.net uses the Azure wildcard cert

- Current Error (from fibit subscriber report): SSLPeerUnverifiedException

I am able to authenticate and pull data manually.  Problem is only with webhooks. 

[greerde]

Any advice from Fitbit?  I have tested the site and ssl cert with about 10 different SSL checkers....all passed.