Calling REST in HTTPS with certificate : Portal

Gregory SCHMID

started a topic over 1 year ago

Hi,

I tried to call a REST API in HTTPS for witch the certificate is mandatory (local company REST service).
I don't find the way to pass the cert file or public key via the REST-Client.

For ex, if a try to call a std Semarchy REST API like Get Platform Status

I get error when I test it

As far I understand, the SSL certificate is missing from the request but I don't know who to provide it.

Who can call my HTTPS REST with the Semarchy REST-client?

Regards.

Best Answer

G

Guillaume RIVOLLIER said over 1 year ago

Hello Gregory,

You need to get the certificate from the API provider, then it should be imported in the JVM/JDK trustsore.

To do so, locate the JVM/JDK used by the tomcat.

Then, using a tool like keytool, we can import the certificate into the cacert of the jvm.

keytool -import -trustcacerts -keystore /path/of/the/jdk/lib/security/cacerts 
   -storepass changeit -alias MyAPIcertificate -file /path/of/the/cert.crt

There are also GUI tools, but the CLI should be shipped with all JVM/JDK installation by default.

Feel free to open a support ticket if you still face issues.

Best Regards,

Guillaume R

G

Guillaume RIVOLLIER

said over 1 year ago

Answer

Hello Gregory,

You need to get the certificate from the API provider, then it should be imported in the JVM/JDK trustsore.

To do so, locate the JVM/JDK used by the tomcat.

Then, using a tool like keytool, we can import the certificate into the cacert of the jvm.

keytool -import -trustcacerts -keystore /path/of/the/jdk/lib/security/cacerts 
   -storepass changeit -alias MyAPIcertificate -file /path/of/the/cert.crt

There are also GUI tools, but the CLI should be shipped with all JVM/JDK installation by default.

Feel free to open a support ticket if you still face issues.

Best Regards,

Guillaume R

Gregory SCHMID

said over 1 year ago

Thank for your answer.
I tried to do what you say, it's not working for me, I think I miss something

G

Guillaume RIVOLLIER

said over 1 year ago

Hi Gregory,

Please double-check the certificate is the good one (the one used by the API service)

Also, please double-check the certificate is correctly imported into the cacert, with the following command :

keytool -list -v -keystore /path/to/cacerts

If the issue persists, feel free to open a support ticket so we can investigate specifically the issue.

Best regards,

Guillaume R