tag:support.appharbor.com,2010-11-23:/discussions/problems/120355-problems-with-certificatesAppHarbor: Discussion 2022-11-10T04:26:08Ztag:support.appharbor.com,2010-11-23:Comment/494142262021-09-30T22:18:34Z2021-09-30T22:18:34ZProblems with certificates<div><p>Hi,</p>
<p>Happy to help! What applications/certificates are you having problems with, and what errors are you experiencing?</p>
<p>Best,<br>
Rune</p></div>runetag:support.appharbor.com,2010-11-23:Comment/494142262021-09-30T22:29:16Z2021-09-30T22:29:16ZProblems with certificates<div><p>Name of the application is: ticketpassapi</p>
<p>I guess the problem could be related to:</p>
<p><a href="https://www.entrepreneur.com/article/388125">https://www.entrepreneur.com/article/388125</a></p>
<p>Really I am using the Piggyback SSL certificate no a custom one.</p></div>ibanezjptag:support.appharbor.com,2010-11-23:Comment/494142262021-09-30T22:58:08Z2021-09-30T22:58:08ZProblems with certificates<div><p>Ah that's right - we've actually just pushed an update to the certificates serving <code>appharbor.com</code> (which are also used to push to the built-in git repository for your apps - and caused problems for some older Git client as <a href="https://support.appharbor.com/discussions/problems/120358-also-problems-with-certificates-while-uploading-source-code-to-git-server">mentioned in this discussion</a>).</p>
<p>If I understand you correctly the issues you're experiencing are related to an API you're serving with the piggyback <code>*.apphb.com</code> certificate? We may update the certificate chain causing these issues for older clients on the <code>*.apphb.com</code> certificates well, but still evaluating the impact this could.</p>
<p>Best,<br>
Rune</p></div>runetag:support.appharbor.com,2010-11-23:Comment/494142262021-09-30T23:06:02Z2021-09-30T23:06:39ZProblems with certificates<div><p>Yes we are using https://*.apphb.com.</p>
<p>So, option A is to wait until you update the certificate chain.</p>
<p>What could be option B?</p></div>ibanezjptag:support.appharbor.com,2010-11-23:Comment/494142262021-10-01T00:28:17Z2021-10-01T00:28:17ZProblems with certificates<div><p>There are a couple of "option B" solutions to fix this right away:</p>
<ol>
<li>You add a custom hostname to your app, and install a certificate that doesn't have this issue.<br></li>
<li>Who are your clients and what software do they use to connect to your API? If you control the clients accessing the site you could just follow the steps outlined <a href="https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/">in this article</a> (in the "What should you do?" section). This might not be practical if you have a lot out external clients, but would actually be a good idea to upgrade the client software in any case.</li>
</ol>
<p>I suspect we'll be able to make a change on our end in the relatively near future (like the next few days) so perhaps option A is an acceptable solution.</p>
<p>Best,<br>
Rune</p></div>runetag:support.appharbor.com,2010-11-23:Comment/494142262021-10-01T02:03:07Z2021-10-01T02:03:07ZProblems with certificates<div><p>Our API is consumed by iPhone and Android APPs, so make the change would take us several days :(</p>
<p>I guess we will need to wait until you fix it in your end.</p></div>ibanezjp