Random SSL/TLS error

[wizard]

Hello, I get random (but continuously) SSL errors from HubSpot. Typically, if I retry, the next call is fine. Additionally, it doesn't happen very often. But I observed it since a couple of months. Could there be a bad host in a cluster or something like this?

The majority of calls is fine!

Examples:

1.

2019-09-13 20:26:22,165 ---> GET https://api.hubapi.com/companies/v2/companies/
2397198968

2019-09-13 20:26:22,233 <--- ERROR SSLPeerUnverifiedException: Hostname api.hubapi.com not verified (no certificates)

2019-09-13 20:26:22,388  ---> GET https://api.hubapi.com/companies/v2/companies/
2397198968
2019-09-13 20:26:22,510 <--- HTTP/1.1 200

2.

2019-09-13 21:50:00,580 ---> GET https://api.hubapi.com/companies/v2/companies/2394893760

2019-09-13 21:50:00,607 <--- ERROR SSLPeerUnverifiedException: Hostname api.hubapi.com not verified (no certificates)

3.

2019-07-25 11:51:00,470 Hostname api.hubapi.com not verified (no certificates) executing POST https://api.hubapi.com/contacts/v1/contact/batch

Could you potentially shed more light on the issue from your side?

Thanks!

[IsaacTakushi]

Hi, @wizard.

Apologies for the delayed response.

I'll try to dig into this with the team! Could you help me out by clarifying a couple points?

1. Your examples include both the Contacts API and the Companies API. Do you encounter these exceptions with any other APIs?
2. Can you estimate the incidence rate as a percentage of all requests you make? Are we talking <1%, 5%?

[wizard]

Hello Isaac,

thank you for looking into this!

1. I saw it happening on Companies, Contacts and Deals API. Other APIs I probably don't use with a high enough volume.

2. It's definitly <1%. On the 13/09 it's something like 15 failures out of 100.000 requests (for testing). It's just that I'm seeing it happen every day a handful of times if I let it run with these high volumes.

I see the Exception and then a successful retry on our end. So functionally it appears to be working. And technically it would also be a neglectible fault ratio. My concern is more about the fact that it appears to concern SSL / TLS. Therefore, I'd like to understand what exactly goes wrong and where. 🙂

Thank you again!

[IsaacTakushi · Accepted solution]

Hey, @wizard.

Thanks for the additional context!

I shared your findings with the team and they believe the issue may lie with an outdated or missing certificate in your client:

"Yeah, I believe the no certificate message means that no certificate was found in teh system's truststore that validated the certificate returned by api.hubapi.com. Updating the trusted certificates on the machine making the API calls usually solves the issue in these cases."

Would you mind checking your machine's truststore?