Error: "The request was aborted: Could not create SSL/TLS secure channel"

[FedericoArg]

Fitbit team, starting yesterday we started receiving a lot of errors when trying to retrieve the Access Token and Secret.

The error we are seeing is "The request was aborted: Could not create SSL/TLS secure channel".

Can anyone in Fitbit confirm or explain why this is happening?

[aarondcoleman]

Everyone, please upvote this bug report to Microsoft:

https://connect.microsoft.com/VisualStudio/feedback/details/1906395

The issue seems to be in low level System.Net framework.

Also, I have similarly filled a bug against CoreFx which might be a more expedient way realistically to get a fix since the next version of ASP.NET will be based on this and out next month:

https://github.com/dotnet/corefx/issues/3889

[JeremiahFitbit]

Thanks the excellent work by @aarondcoleman and people he rallied, Microsoft has confirmed that this is an issue in Windows itself.

CloudFlare has come up with a workaround that they may release next week.

[JeremiahFitbit · Accepted solution]

Today, Microsoft released an update to fix this issue ( https://support.microsoft.com/en-us/kb/3109853) and issued a security advisory ( https://technet.microsoft.com/library/security/3109853.aspx ).

Thank you to everyone for their help in investigating this issue!

[AndrewFitbit]

Hey everyone,

If this applies to you, make sure you're patched. The workaround will no longer be a thing.

Thanks again to those that contributed. 🙂

[aarondcoleman]

Hey Andrew,

Do you have an endpoint that can be hit now just as a double-check? Cheers,

--Aaron

[AndrewFitbit]

@aarondcoleman Hey Aaron, I'll have to ask tomorrow and get back to you on that.

Update: Still waiting on a response, but I'll post again when I have more information.