Uninstall Webhooks are not getting triggered

[EstoreAutomate]

Hi, 

From the past couple of days two of our apps are not getting triggered by the Uninstall Webhooks. But our other products are getting triggered by the uninstall webhooks. We even checked the SSL certificate and it seems to be valid. Not sure what went wrong with the webhooks for those Products.

Can any one please help me to fix this?

[richard-penner]

Hello @EstoreAutomate – sorry to hear you're having trouble. We have seen some partners having issues with SSL certificates, so I'd like to double check your certificate to start out. Can you either post the domain here, or send me a message with it?

[EstoreAutomate]

Hi @richard-penner 

Here is our domain name - estoreautomate.com

And our app names are Data Export and Report Pundit.

Let me know if you need any other informations.

[richard-penner]

Hi @EstoreAutomate – I looked up some of the domains in your webhook subscriptions. Strangely, if I try to access them with the curl utility, I get a certificate error. But if I put them into my browser it works. This might be a hint that something about the certificate is problematic.

[Nulls]

Hi,

Just re-download your cert from the provider and replace the CA-bundle file then restart your server.

[kmetric]

our app, seen to be the same issue.

Other webhooks still working fine, only this topic facing issue

app/uninstalled

Please help to check

My app: https://apps.shopify.com/kmetric-analytics-platform

our API: https//api.kmetric.io

[richard-penner]

Hi @kmetric – I found something similar in your records – if I try to access the URL you posted with the curl utility, I see a certificate error, however in the browser it works.

[Gregarican]

Yeah, out of curiosity I tested the site's SSL and an intermediate cert up the chain expired 10 days ago.

https://www.sslshopper.com/ssl-checker.html#hostname=estoreautomate.com

[richard-penner]

One other important note for everyone here: the system that triggers the app/uninstalled webhooks appears to be more sensitive to SSL certificate validity than the system that sends all other topics.

[pauldowman]

I think this article describes the issue and a possible fix: https://www.agwa.name/blog/post/fixing_the_addtrust_root_expiration

We will also look into being able to accept this cert chain from all systems.