Webhook deliveries failing to endpoints behind one certificate chain
- Etkilenenler
- Webhook teslimi
- Süre
- 08:52–11:18 UTC · 2 sa 26 dk
08:52 UTC
Webhook deliveries to a subset of endpoints are failing with a TLS verification error. Events are queued and will be retried, so nothing is being dropped. Investigating.
09:14 UTC
A base image update on the delivery workers shipped a trust store that no longer carries a cross-signed intermediate that several customer endpoints still serve. Around 4 % of registered endpoints are affected.
09:48 UTC
We have pinned the previous trust store on the delivery workers and the queued deliveries are going out. The oldest queued event is 56 minutes old.
11:18 UTC
Resolved. The queue is empty and every event from the window was delivered well inside the 24-hour retry budget. The trust store is now pinned explicitly and updated deliberately instead of being inherited from the base image.