Acknowledged

makeWebRequest not working on device with Let's Encrypt certificate

Hi,
I've been struggling the last day with getting my app to work on my device.

With a let's encrypt certificate it's working fine in the simulator, but on my Fenix 7 pro it's failing with error code 0.

I've tried different server configurations (both nginx and apache), but with no luck.

The nginx server config is setup with fullchain, and is getting "A" ranking on test tools. But maybe I'm still missing something.

It seems to me to be quite a widespread problem on garmin devices, and seems like something garmin should sort out (I would guess they are not trusting some part of the Let's encrypt chain), but I'm hoping that there is something I can do to sort it out myself, that does not include buying a $50/year premium cert for a toy app.

Parents
  • I think you're right, this should work with the known free ssl providers.

    But depending on which devices you want to support and how many quarters you're prepared to wait for Garmin to maybe fix it for the newer devices that still get updates, you might need to rethink your strategy...

Comment
  • I think you're right, this should work with the known free ssl providers.

    But depending on which devices you want to support and how many quarters you're prepared to wait for Garmin to maybe fix it for the newer devices that still get updates, you might need to rethink your strategy...

Children
  • Hi,

    I am facing this issue with my new Fenix 8 Solar, whereas on my Fenix 7 it was not an issue. Is there a new restirction being put in place with Fenix 7 pro and Fenix 8 that was not there with earlier devices? This fact renders my own app useless and I am wondering why such a great initiative like Let's Encrypt is blocked by Garmin. I don't think there is a difference between Let's Encrypt and other fee certificate issuers out there. In both cases you can get a free certificate and create milicious servers. So what is the point in giving that problems to your developers?

  • Yeah. I found a cheap cert from ssls.com that had a 90 day trial.

    Used that and now it works.

    So seems like the free certs are just not working on garmin.