# Validate Webhooks Endpoint Fails with Invalid TLS certificate

**URL:** <https://devforum.zoom.us/t/validate-webhooks-endpoint-fails-with-invalid-tls-certificate/84286>\
**Category:** API and Webhooks\
**Tags:** webhooks\
**Created:** [March 7, 2023, 10:10am UTC](https://devforum.zoom.us/t/validate-webhooks-endpoint-fails-with-invalid-tls-certificate/84286 "2023-03-07T10:10:53Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![mirkin23](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/mirkin23/32/46179_2.png) [@mirkin23](https://devforum.zoom.us/u/mirkin23)\
**Post date:** [March 7, 2023, 10:10am UTC](https://devforum.zoom.us/t/validate-webhooks-endpoint-fails-with-invalid-tls-certificate/84286/1 "2023-03-07T10:10:53Z")

</div>

When I hit the validate button when adding our latest endpoint URL for Zoom Webhooks I’m getting Invalid TLS certificate error.

The URL is accessible in every browser I tested and curl which all validate the certificate.

Kind of a show-stopper for us.

We’ve used webhooks for other projects in the past with no problems.

Any help is appreciated.

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [March 13, 2023, 9:53pm UTC](https://devforum.zoom.us/t/validate-webhooks-endpoint-fails-with-invalid-tls-certificate/84286/2 "2023-03-13T21:53:32Z")

</div>

Hi @mirkin23  
Thanks for reaching out to the Zoom Developer Forum, I am happy to help here!  
Have you been able to troubleshoot this error?  
Or are you still facing this issue?  
Here is a link to our Docs about the Webhook Endpoint requirements:

[https://marketplace.zoom.us/docs/api-reference/webhook-reference/#webhook-endpoint-requirements](https://marketplace.zoom.us/docs/api-reference/webhook-reference/#webhook-endpoint-requirements)

Let me know if you need anything else moving forward  
Best,  
Elisa

---

<div class="post-metadata">

**Author:** ![reyaz.ahmed](https://avatars.discourse-cdn.com/v4/letter/r/8e7dd6/32.png) [@reyaz.ahmed](https://devforum.zoom.us/u/reyaz.ahmed)\
**Post date:** [March 14, 2023, 2:25pm UTC](https://devforum.zoom.us/t/validate-webhooks-endpoint-fails-with-invalid-tls-certificate/84286/3 "2023-03-14T14:25:59Z")

</div>

Hi @elisa.zoom

I am trying to create a webhook in my zoom app, I have created API using AWS API Gateway which executes AWS Lambda function (Node.Js) to validate. I have added code from the documentation as below:

const { body } = event;  
if(body.event === ‘endpoint.url\_validation’) {

```auto
  const hashForValidate = CryptoJS.createHmac('sha256', 'xxxxxxx').update(body.payload.plainToken).digest('hex')

   const response = {
    statusCode: 200,
    body: JSON.stringify({
      plainToken: body.payload.plainToken,
      encryptedToken: hashForValidate
    }),
   };
 return response;

}

```

But every time it showing URL validation failed, Try again later, Could you please help me to solve this issue.

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [March 14, 2023, 10:24pm UTC](https://devforum.zoom.us/t/validate-webhooks-endpoint-fails-with-invalid-tls-certificate/84286/4 "2023-03-14T22:24:16Z")

</div>

Thanks @reyaz.ahmed  
I think it could be the way you are sending the response back , according to our docs, it should be a json object and status.  
Can you try sending something like this?

```auto
   response.status(200)
   response.json({
      "plainToken": request.body.payload.plainToken,
      "encryptedToken": hashForValidate
   })

```

---

<div class="post-metadata">

**Author:** ![reyaz.ahmed](https://avatars.discourse-cdn.com/v4/letter/r/8e7dd6/32.png) [@reyaz.ahmed](https://devforum.zoom.us/u/reyaz.ahmed)\
**Post date:** [March 15, 2023, 5:32am UTC](https://devforum.zoom.us/t/validate-webhooks-endpoint-fails-with-invalid-tls-certificate/84286/5 "2023-03-15T05:32:41Z")

</div>

Hi @elisa.zoom , As I am using aws lambda function we need to return the response and response.status will not work, so I tried as below:

return response.json({  
status: 200,  
plainToken: event.body.payload.plainToken,  
encryptedToken: hashForValidate  
});

but still it won’t work

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [March 15, 2023, 12:15pm UTC](https://devforum.zoom.us/t/validate-webhooks-endpoint-fails-with-invalid-tls-certificate/84286/6 "2023-03-15T12:15:55Z")

</div>

Hi @reyaz.ahmed  
I see, when you run your app and click on validate are you getting any errors in your terminal?

---

<div class="post-metadata">

**Author:** ![reyaz.ahmed](https://avatars.discourse-cdn.com/v4/letter/r/8e7dd6/32.png) [@reyaz.ahmed](https://devforum.zoom.us/u/reyaz.ahmed)\
**Post date:** [March 15, 2023, 12:20pm UTC](https://devforum.zoom.us/t/validate-webhooks-endpoint-fails-with-invalid-tls-certificate/84286/7 "2023-03-15T12:20:16Z")

</div>

Hi @elisa.zoom , Yes when I am clicking validate button in the app, below error showing.

 ![err](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/d/f/dfbad1833428febff7742e4ec288bc34248e3de9.png)

---

<div class="post-metadata">

**Author:** ![anderson.miranda](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/anderson.miranda/32/32651_2.png) [@anderson.miranda](https://devforum.zoom.us/u/anderson.miranda)\
**Post date:** [June 6, 2023, 12:45pm UTC](https://devforum.zoom.us/t/validate-webhooks-endpoint-fails-with-invalid-tls-certificate/84286/8 "2023-06-06T12:45:55Z")

</div>

I’m facing the same problem: Invalid TLS certificate

But the certificate is valid, it’s is from Let’s encrypt…

Any solution for this problem?

---

<div class="post-metadata">

**Author:** ![sato](https://avatars.discourse-cdn.com/v4/letter/s/34f0e0/32.png) [@sato](https://devforum.zoom.us/u/sato)\
**Post date:** [October 31, 2023, 8:36am UTC](https://devforum.zoom.us/t/validate-webhooks-endpoint-fails-with-invalid-tls-certificate/84286/9 "2023-10-31T08:36:43Z")

</div>

Hi @elisa.zoom ,  
My website is using GlobalSign nv-sa certificates. I’m facing an issue related to zoom phone webhook registration: Proving invalid TLS point.

But when I switch to Let’s Encrypt the certificate is valid.

Is there any solution to this problem?

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [November 2, 2023, 4:58pm UTC](https://devforum.zoom.us/t/validate-webhooks-endpoint-fails-with-invalid-tls-certificate/84286/10 "2023-11-02T16:58:06Z")

</div>

Hi @sato  
Please make sure that you are following our docs here:

> **[Using webhooks](https://developers.zoom.us/docs/api/rest/webhook-reference/)**
>
> The Zoom Developer Platform is an open platform that allows third-party developers to build applications and integrations upon Zoom’s video-first unified communications platform.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [November 5, 2024, 8:34am UTC](https://devforum.zoom.us/t/validate-webhooks-endpoint-fails-with-invalid-tls-certificate/84286/11 "2024-11-05T08:34:41Z")

</div>

Closed on November 5, 2024, 8:34am UTC

This topic was automatically closed 368 days after the last reply. New replies are no longer allowed.
