SslHandshakeError on Card Validator

dssupport · 2014-09-12T20:20:15.442Z

When I try to test my domain in the validator I get:

ERROR: Failed to fetch page due to: SslHandshakeError

I am using a wildcard SSL cert on the domain and using CloudFront to serve the page (which I think is the problem). I ran into this problem with Java 6 in the past, not sure if this is related or not.

Is there a way to debug this further?

dssupport · 2014-09-15T18:43:10.037Z

Any ideas? Both Facebook and Google parse the site just fine. I’m not sure where Twitter is getting hung up so it’s difficult to debug on my end. Thanks!

iainbeeston · 2014-09-22T16:26:08.161Z

I’m having the same problems.

I wonder if this is because the validator does not support Server Name Indication (SNI) for SSL? Cloudfront relies on SNI so that it doesn’t have to assign a dedicated IP address to each SSL endpoint.

dssupport · 2014-09-22T16:48:34.519Z

Yes, that’s exactly it. It appears that they are using Java 6 which does not support SNI. Unless Twitter plans on updating their Java version, the only solution is to pay the $600 a month for a dedicated IP or not use Cloudfront for the entire site.

It was cheaper for us to spin up a beanstalk with a tomcat server and install the SSL cert on that.

jbulava · 2014-09-22T22:36:09.411Z

Hi @dssupport, it looks like your card at https://dumbstruck.me/ is working. Are you having issues with other URLs or domains?

dssupport · 2014-09-22T22:48:57.168Z

Nope, we fixed it, thanks!

iainbeeston · 2014-09-24T10:48:00.442Z

Hey @jbulava, we’re having the same issue for https://www.new-bamboo.co.uk - could you please take a look at that? I’d really like to find out what the underlying problem is

jbulava · 2014-09-28T16:05:08.671Z

I will reach out to the engineering team about the SSL error as I am unsure myself. Apologies for the trouble.

haobcheng · 2014-10-02T03:32:51.304Z

Hey @jbulava, is there any update on this? We’re running into the same issue with CloudFront and moving to an implementation that does not require any SNI would be a major hurdle for us. Other popular crawlers and bots work fine. Fixing this would require us to eliminate the benefits of our CDN and SSL offloading.

sshreyas · 2014-10-02T18:27:57.893Z

Hey,

Any update on this? Anyone using Cloudfront and Amazon right now cant use Twitter cards.

–
Shreyas

apassant · 2014-10-03T13:49:32.440Z

Hi @jbulava, all

I have a similar issue with my domain - can’t validate the card as it complains about the handshake error. Yet, my website lods w/ SSL correctly on the browser, e.g.

https://www.yapme.co/y/ag1zfnlhcG1lLWRvdGNvchILEgVNZWRpYRiAgICA1LqGCQw

I’m using SNI for my certificate and found that it fails on command line with

openssl s_client -connect www[DOT]yapme.co:443

but works with

openssl s_client -servername www[DOT]yapme.co -connect www[DOT]yapme.co:443

(Had to use [DOT] to make the post valid in the previous commands)

So I’m wondering if you support SNI w/ SSL?

Thanks!

JonathanGirven · 2014-10-16T14:41:30.643Z

We are having the same issue with Google App Engine.

jspraed · 2014-10-17T16:02:02.826Z

+1 We are seeing the same problem.

iainbeeston · 2014-12-21T18:16:10.085Z

@jbulava Any update on this? We have no problems with Facebook or Google Plus, but Twitter cards integration seems pretty broken right now.

leozc · 2014-12-26T19:52:51.861Z

iainbeeston:

https://www.new-bamboo.co.uk

We have deployed a new release, would you please try again?
https://cards-dev.twitter.com/portal/validation

NightSurge · 2014-12-29T14:35:06.057Z

I too am getting this error. I just noticed that none of the links were showing the cards lately, and I did just add SSL to my server a few days ago. What gives? As others have said, Googe, Twitter, etc works fine. It is only twitter cards that are currently giving errors for my site after adding SSL.

joncipriano · 2015-01-12T20:29:29.730Z

Just checking in to see if this is still an issue for people. All URLs provided above (that also have Twitter meta data) appear to be validating correctly.

@NightSurge, you are the last person to post after a fix was implemented. If you are still having an issue, please reply with a URL to debug.

NightSurge · 2015-01-12T20:57:04.735Z

https://xboxdvr.com/DiPN%20D%20Dizzy/3f96633e-e368-4d57-aeb3-e5c95f56324f

Still getting error. If I simply remove the s from https it works, but my site uses SSL, so I can’t simply do that.

iainbeeston · 2015-01-12T21:20:15.220Z

Our site now works, but we’ve moved to a different infrastructure.

QuoteFlare · 2015-01-29T04:54:09.933Z

our site quoteflare.com is still getting this same error
twitter cards are getting a 404 error where the image is supposed to be when you open them.