Request timed out when connecting over https to server with Let's Encrypt certificate

Former Member over 7 years ago

Hi,

As the title says, my vivoactive HR (FW version 4.3.0, widget built for SDK 2.4.x) gets NETWORK_REQUEST_TIMED_OUT when trying to POST to a server with Let's Encrypt certificate. If I configure the server to not use the certificate and run only on http, then makeWebRequest functions as expected.

Oddly enough, this only happens on the device; on the simulator, https with Let's Encrypt works fine.

Since on-device https connections do work in the WebRequest sample in the SDK, is this a problem with Let's Encrypt certificates? Can I load my certificate onto the watch somehow?

Thanks in advance!

gasteropod over 7 years ago

Have you got the entire certificate chain loaded onto you web server? This was the problem I had for a long time before I worked out the problem, and the symptoms match. If you have only loaded the leaf certificate and do not have the intermediate certificate then you get a timeout.

If you are using apache2, make sure you have SSLCertificateChainFile point to a file containing the Let’s Encrypt Authority X3 intermediate certificate found at https://letsencrypt.org/certificates/

Former Member over 7 years ago

You are completely correct. I had been accidentally using only the leaf certificate. Appending the intermediate certificate to it resolved the timeout issue.

Thank you very much!