JS errors in the browser console

FastSpring API: No access key found in payload

Make sure, that you have defined the FastSpring Store Builder Library Access Key in the plugin settings. If that is configured properly, but the issue still remains, then the issue is probably in an existing FastSpring JS script tag in the HTML head of your websites. Please read this article and remove your FastSpring script tag from the head of your website pages.

FastSpring Webhook problems

Received fatal alert: handshake_failure

This error: Received fatal alert: handshake_failure is displayed in Integrations » Webhooks » Recent Activity (button).

This error indicates that there is something wrong with the HTTPS certificates on your website/server and the webhooks triggered by FastSpring cannot reach your WordPress API endpoint.

The most common case is that you are using a free CloudFlare plan. CloudFlare is using different cipher suites in the free plans compared to the paid plans (link to the source). The FastSpring webhooks support only the ciphers on the CloudFlare paid plan and the requests will fail (result into the handshake_failure) when using the CloudFlare free plan SSL in front of your server.

We've been in touch with the FastSpring team and they are currently working on this issue. Until this is resolved you have two options:

  1. Upgrade to a paid Cloudflare plan (starting $20/mo) or buy a dedicated SSL certificate (available on the free and paid plans, starting $5/mo).
  2. Disable CloudFlare for your website (or set in the DNS settings to bypass the CloudFlare acceleration and protection)*.

* if you're using a self-signed certificate or no certificate at all on your origin server (CloudFlare Flexible SSL option) there may be severe side-effect by disabling the CloudFlare for your website.

If you are not using Cloudflare, then ask your hosting provider to change the default cipher to one of 25 ssl cipher that FastSpring supports. After they change the cipher, reissue the certificate with new CSR (and new cipher). Now it should be working fine. More info of supported chipers can be found here.

This issue can also be fixed without buying a ssl. "Let's encrypt" should work if hosting provider offer supported ciphers.

Error: sun.security.validator.ValidatorException: PKIX path building failed

This error is displayed: {"message":"sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"}

This error indicates that there is something wrong with the HTTPS certificates on your website/server and the webhooks triggered by FastSpring cannot reach your WordPress API endpoint.

The problem is probably in one of the certificates on your hosting server. You can verify your certificates with this site SSL Server Test.

To solve this issue, please contact your hosting company and show them the results of the test. They should know what is wrong and how to fix your problem.