# Webhook Testing and Certs

**URL:** <https://discuss.dwolla.com/t/webhook-testing-and-certs/5123>\
**Category:** API Support\
**Created:** [March 6, 2019, 4:44pm UTC](https://discuss.dwolla.com/t/webhook-testing-and-certs/5123 "2019-03-06T16:44:31Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![kard](https://avatars.discourse-cdn.com/v4/letter/k/85e7bf/32.png) [@kard](https://discuss.dwolla.com/u/kard)\
**Post date:** [March 6, 2019, 4:44pm UTC](https://discuss.dwolla.com/t/webhook-testing-and-certs/5123/1 "2019-03-06T16:44:31Z")

</div>

I’m having some issues with setting up webhooks. I’ve setup a self-signed certificate and port forwarding/firewall rules but I’m not getting any webhooks delivered to me.

I’ve pulled the webhooks for my subscription to view the events and I do notice that the webhook attempts have a request but no response field at all.

Is the self-signed cert. the problem?

---

<div class="post-metadata">

**Author:** ![CoolStoryCory](https://sea2.discourse-cdn.com/dwolla/user_avatar/discuss.dwolla.com/coolstorycory/32/2160_2.png) [@CoolStoryCory](https://discuss.dwolla.com/u/CoolStoryCory)\
**Post date:** [March 6, 2019, 5:24pm UTC](https://discuss.dwolla.com/t/webhook-testing-and-certs/5123/2 "2019-03-06T17:24:16Z")

</div>

Hi @kard  
Dwolla’s webhooks are emitted based on the remote host having a valid certificate with the associated chain/pedigree available. To show the differences between your domain and dwolla, the following command should help: `openssl s_client -host dwolla.com -port 443 -prexit -showcerts`.  
I would recommend checking to see if you have a [trusted cert](https://www.ssllabs.com/ssltest/index.html) as well.

---

<div class="post-metadata">

**Author:** ![kard](https://avatars.discourse-cdn.com/v4/letter/k/85e7bf/32.png) [@kard](https://discuss.dwolla.com/u/kard)\
**Post date:** [March 6, 2019, 6:16pm UTC](https://discuss.dwolla.com/t/webhook-testing-and-certs/5123/3 "2019-03-06T18:16:20Z")

</div>

Thanks, will check. I was trying to get that self-signed cert working in Dwolla sandbox and not production, so just to clarify, i’ll need a trusted cert (not self-signed) on both sandbox and production?

---

<div class="post-metadata">

**Author:** ![spencer](https://sea2.discourse-cdn.com/dwolla/user_avatar/discuss.dwolla.com/spencer/32/2143_2.png) [@spencer](https://discuss.dwolla.com/u/spencer)\
**Post date:** [March 6, 2019, 7:48pm UTC](https://discuss.dwolla.com/t/webhook-testing-and-certs/5123/4 "2019-03-06T19:48:33Z")

</div>

Hi @kard, I believe you should be able to use something like Let’s Encrypt: [https://letsencrypt.org/](https://letsencrypt.org/) to solve your needs.

---

<div class="post-metadata">

**Author:** ![kard](https://avatars.discourse-cdn.com/v4/letter/k/85e7bf/32.png) [@kard](https://discuss.dwolla.com/u/kard)\
**Post date:** [March 7, 2019, 4:16pm UTC](https://discuss.dwolla.com/t/webhook-testing-and-certs/5123/5 "2019-03-07T16:16:35Z")

</div>

Thanks! That looks like the best fit for now.