How to fix deployed Windows Server not being able to call PlayFab API because of missing certificate ?

Question

question

Mathieu Deletrain asked May 1, '20

How to fix deployed Windows Server not being able to call PlayFab API because of missing certificate ?

Hi,

I have deployed UE4 (4.24.3) servers that needs to communicate with PlayFab API, but when I try to do so I get errors like that :

LogHttp: Warning: 0000022B0CD28800: invalid HTTP response code received. URL: https://1C194.playfabapi.com/Authentication/GetEntityToken?sdk=UE4MKPL-1.31.200121, HTTP code: 0, content length: 0, actual payload size: 0
LogHttp: Warning: 0000022B0CD28800: request failed, libcurl error: 60 (Peer certificate cannot be authenticated with given CA certificates)
LogHttp: Warning: 0000022B0CD28800: libcurl info message cache 0 (  Trying 52.25.154.57...)
LogHttp: Warning: 0000022B0CD28800: libcurl info message cache 1 (TCP_NODELAY set)
LogHttp: Warning: 0000022B0CD28800: libcurl info message cache 2 (Connected to 1C194.playfabapi.com (52.25.154.57) port 443 (#0))
LogHttp: Warning: 0000022B0CD28800: libcurl info message cache 3 (ALPN, offering http/1.1)
LogHttp: Warning: 0000022B0CD28800: libcurl info message cache 4 (Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH)
LogHttp: Warning: 0000022B0CD28800: libcurl info message cache 5 (TLSv1.3 (OUT), TLS handshake, Client hello (1):)
LogHttp: Warning: 0000022B0CD28800: libcurl info message cache 6 (TLSv1.3 (IN), TLS handshake, Server hello (2):)
LogHttp: Warning: 0000022B0CD28800: libcurl info message cache 7 (TLSv1.2 (IN), TLS handshake, Certificate (11):)
LogHttp: Warning: 0000022B0CD28800: libcurl info message cache 8 (TLSv1.2 (OUT), TLS alert, Server hello (2):)
LogHttp: Warning: 0000022B0CD28800: libcurl info message cache 9 (SSL certificate problem: unable to get local issuer certificate)
LogHttp: Warning: 0000022B0CD28800: libcurl info message cache 10 (Closing connection 0)

When running from my dev environment everything works fine. I also tried using the mock agent. When using process mode everything works fine too, when I use container mode, I get the same result as deployed server. Thus I suspect that's an issue with my container's setup.

Could you help me find what I missed ?

Custom Game Servers windows

10 |1200

Attachments: Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Answer 1 · 2020-05-02T02:33:07Z

element808 answered May 2, '20

Uncheck "verify peer" in your UE4 project settings. Should be under Libcurl if I'm not mistaken.

2

10 |1200

Attachments: Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Mathieu Deletrain commented · May 02, 2020 at 11:45 PM

Thanks for the idea.

I'll try that and let you know if that works.

Anyway that would only be a temporary solution, as it basically disables the network security provided by certificates, right ?

Isn't there a way to find and install proper certificates instead ?

0 ·

element808 Mathieu Deletrain commented · May 03, 2020 at 05:37 PM

Not necessarily. You're just disabling it from checking directly within the UE4 networking side of things. Since you're using PlayFab as a backend service, it has its own security methods when connecting to their services. All connections to/from PlayFab is SSL.

However, if you wanted to control your own certs on the servers, I think there's a section called "Certificates" on the server build menus (next to where you setup your regions).

0 ·

question