CODEWITHSUNDEEP
botframework
Charles Wood
Charles Wood

Reputation: 882

Can't establish SSL/TLS secure channel with signed cert

I'm getting this error message while using the "Test connection to your bot" section on https://dev.botframework.com/.

An error occurred while sending the request. The request was aborted: Could not create SSL/TLS secure channel.

As noted in this Stack Overflow question, the bot framework does not work with self-signed certs.

However, this is not a self-signed cert. It is issued by DigiCert and my browser does not complain about it.

The endpoint is https://gem-hair.hyperdev.space/chat

EDIT: per http://social.technet.microsoft.com/wiki/contents/articles/31634.microsoft-trusted-root-certificate-program-participants-v-2016-april.aspx, DigiCert is a trusted certificate root.

Upvotes: 2

Views: 1539

Answers (1)

Ming-wei Wang
Ming-wei Wang

Reputation: 26

One of my colleague took a look. It seems that your cert requires TLS 1.2 which we don't currently support. We are working on a fix.

We do currently support TLS 1.0.

EDIT: Some clarifications. My earlier statement above about your cert is wrong. It's not your cert that requires TLS 1.2.

BotFramework endpoints supports TLS 1.0, 1.1 and 1.2 on connections inbound to it. However connections outbound from it was configured only for SSLv3 and TLS 1.0. Your "gem-hair" endpoint in Amazon EC2 is configured to only accept incoming connections with TLS 1.1 and 1.2. You can check this using https://ssllabs.com. That's why BotFramework can't reach you.

UPDATE: We updated outbound support to TLS 1.0, 1.1 and 1.2. This problem is now fixed.

Upvotes: 1

Related Questions