Unknown Issuer Error

[akash3gupta]

I deployed svix server in my local machine by using your docker compose file (docker compose is using "svix/svix-server" image). I did not get any issue till this step.
I registered a app, some events, and endpoints also. When I am creating a message, it is trying to call registered endpoints, but It is not able to hit endpoints properly. I am getting some Unkown Issuer error or some certificate errors.
What do I need to do to reslove this issue?

[jaymell]

Hi, can you paste the actual error you're seeing?

I'm not sure offhand if this is a client- or server-side issue, so I'm wondering, if you haven't already, if you can try to create an endpoint using a URL generated by Svix Play to see if this also fails.

[akash3gupta]

Now, I am getting below error:

[akash3gupta]

This is the UnknowIssuer error screenshot. Please check it and give me some suggestions what thing I am doing wrong here

[akash3gupta]

Thanks for the reply. @tasn So Can I use svix play for my testing? Because svix play is also throwing error.

[akash3gupta]

Hi @tasn I have resolved the certificate issue. Now I am getting this issue.

[tasn]

Try again?

[akash3gupta]

I tried lot of time.

[tasn]

It could be a firewall on your network or something. Are you even able to send a webhook anywhere?

[cheleswer]

How can I send the event to the endpoints which are using self-signed certificates? Is this possible in SVIX-SERVER? I am running a POC for webhooks and sending events to the internal system which may not have publicly verified certifications.

[tasn]

Hm... The easiest way is probably adding the private CA certificate (what you're self-signing with) to the Docker image's certificate store. Though why use self-signed certs instead of e.g. http?

[cheleswer]

That's because our product is mostly deployed in clients' close environments and sometimes they don't really want to use the public certificates for their internal communication but want to use SSL (always https). My requirement is to keep adding new self-signed certs as and when needed for the different clients, I am not sure how the docker images certificate store will work though.

[tasn]

Can you open a ticket to support allowing ignoring certificate authenticity? We can discuss it further then, and maybe take action.

[cheleswer]

sure, created below ticket
Allowing ignoring certificate authenticity #1030

[tasn]

Thanks!