Whatsapp Business API HTTPS Certificate

Viewed 858

We just deploy on AWS Cloudformation an enterprise WhatsApp API following the next instructions:

AWS WhatsApp API

So all works normally, and the deploy finished correctly, the problem comes with the option "SSL Configuration", we understand that the API creates a self signed certificate so we get the error on the browsers because of that.

The documentation says that we need to upload a certificate authority, but do we need to get one from a third party to avoid this error?

We are a little bit lost, any advice will be nice.

enter image description here

1 Answers

Like everything else in SSL, the answer is "it's all about trust" and "it depends (on who you trust)".

To get this error to go away you will need to upload an "intermediate CA" including a private key, certificate for the key, and the whole chain of signed certificates back to a trusted CA.

In a default operating system / browser environment, the (root or an intermediate) CA must be trusted in the client system. This usually means having your private key signed by Let's Encrypt or paying a commercial CA.

Related