Webhook endpoint validation is too strict

Question

We are pointing the webhook at an internal load balancer with a self signed certificate and registration keeps failing validation.

Demo Team · Accepted Answer

Confirmed this is intentional, we reject self signed certificates at registration specifically to prevent a misconfigured endpoint from silently swallowing deliveries. A tunnel with a real certificate is the supported path for internal testing.

Demo Team · Answer

That check is intentional, we reject self signed certificates at registration time so a misconfigured endpoint cannot silently swallow deliveries. For internal testing, a tunnel with a real certificate is the supported path instead of the load balancer directly.

Hannah Wright · Answer

Switched our internal testing to a tunnel like suggested, works fine now.

Demo Team · Answer

To be clear this only applies to registration, an already-registered endpoint whose cert later expires will just start failing deliveries, worth monitoring separately.

Rebecca Stone · Answer

Switched to a tunnel for our internal testing after reading this thread, works well.

Webhook endpoint validation is too strict

Solution

5 replies