Page 1 of 1
certificate verify failed
Posted: Mon Jun 08, 2015 2:15 pm
by svu
I am getting this error in the logs:
Error fetching document
https://demo-ivr-api.loopbackanalytics. ... /Recording due to SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
DocumentParser::FetchBuffer - could not open URL:
https://demo-ivr-api.loopbackanalytics. ... /Recording
DocumentParser::FetchDocument - exiting with error result 2
errno: 203 uri
https://demo-ivr-api.loopbackanalytics. ... /Recording
I have verified that it works from any browser.
Any ideas?
scott
Re: certificate verify failed
Posted: Mon Jun 08, 2015 2:32 pm
by support
Hi Scott,
When we try to access that url from our browser we are getting an untrusted certificate error.
The error from chrome:
Code: Select all
You attempted to reach demo-ivr-api.loopbackanalytics.com, but instead you actually reached a server identifying itself as *.loopbackllc.com. This may be caused by a misconfiguration on the server or by something more serious. An attacker on your network could be trying to get you to visit a fake (and potentially harmful) version of demo-ivr-api.loopbackanalytics.com.
Same issue from firefox:
Code: Select all
demo-ivr-api.loopbackanalytics.com uses an invalid security certificate.
The certificate is not trusted because no issuer chain was provided. The certificate is only valid for the following names: *.loopbackllc.com, loopbackllc.com (Error code: sec_error_unknown_issuer)
It appears as though the certificate is not correctly configured and therefore we are seeing their error when accessing this url from the web.
This is most certainly what is causing the platform to fail to fetch the url.
Please let us know if you have any questions.
Regards,
Plum Support
Re: certificate verify failed
Posted: Thu Jun 11, 2015 10:22 am
by svu
I was doing some testing, so that is why you were getting that. I put back the correct certs and I do not have any problems with chrome, ie, or firefox. Still getting this error:
Error fetching document
https://ivr-api.loopbackanalytics.com/v ... inCodeNav2 due to SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
VXI::FetchXML - could not open URL:
https://ivr-api.loopbackanalytics.com/v ... inCodeNav2
errno: 203 uri
https://ivr-api.loopbackanalytics.com/v ... inCodeNav2
Re: certificate verify failed
Posted: Thu Jun 11, 2015 10:34 am
by svu
Re: certificate verify failed
Posted: Fri Jun 12, 2015 12:09 pm
by support
Hi Scott,
Thank you for providing that information.
We are currently taking a look into why the certificates are failing to verify and will reply shortly when we have identified the cause. We appreciate your patience while our investigation is still ongoing.
Regards,
Plum Support
Re: certificate verify failed
Posted: Wed Jun 17, 2015 9:04 am
by support
Hi Scott,
Thank you for your patience.
It seems that there is some incompatibility between the certificates you are using and the version of openssl we are using in our platform. We already have in place a plan to upgrade openssl in our environment and have confirmed that this newer version does work correctly with your certificates, but this is a process that could take an additional 4-6 months to fully test and implement.
In the interim, we suggest using the
certverifypeer property to turn off certification verification for your HTTPS connections.
We apologize for the inconvenience and would be happy to update you whenever the newer openssl is in place.
Regards,
Plum Support