SSLHandshakeException on subscriber endpoint

[joshsharp]

Hi,

I'm attempting to set up a webhook subscriber and so far I'm only getting failures with the cryptic error reason "SSLHandshakeException". It seems this is a Java exception (I guess that's what the Fitbit server uses) but it can be caused by a number of reasons.

My server at exist.io definitely supports TLSv1 as outlined in the API docs, but perhaps you don't recognise my SSL cert? It's not self-signed but it is verified by StartCom (perhaps a vendor Fitbit's library doesn't recognise?)

Any help would be appreciated.

[JeremiahFitbit]

Are you using TLS+SNI? Fitbit does not support SNI yet.

[joshsharp]

No, no SNI.

[joshsharp]

I've been testing various options such as turning on SSLv3 and resetting nginx to the default list of supported ciphers, but still no luck. Perhaps a cert issue?

[ibahdanau]

Please send PM to me your application id.

[JeremiahFitbit · Accepted solution]

Fitbit currently uses Java 7 and StartCom is not a recognized certificate authority in that version. We will be supporting more certificate authorities in the future. For now, you will need to use another CA.

[joshsharp · Accepted solution]

Thanks Jeremiah, I figured as much. That's a bummer but I'll switch CAs I guess.

[thai_sentrian]

I'm having this same issue. Can we get more detailed exception descriptions?

[JeremiahFitbit]

@thai_sentrian: What's your host name?

[thai_sentrian_1]

https://internal.sentrian.com/