Hi,
We have a REST based connection, that uses SSL certificate to make any kind of calls(GET, POST etc). We have used the below mentioned path in Connection Json and we were able to make calls to the server. However, when we use same "KeyFilePath" in UpdateUserJSON, we are unable to read the certificate and we see handshake error as the response because of missing certificate in the call. (Please refer to the screenshot below).
Could you please confirm the right location that could be used in UpdateUserJson so that we can use SSL certificate while making the call.
P.S: I have raised a Support request but they have closed the ticket saying it a "how to" request.
Working SSL path in connectionjson:
"ssl": {
"keyFile": "/saviynt_shared/saviynt/ConnectorFiles/DIAS_SAP_OAuth.p12",
"keyFilePassword": "xxxxxxx",
"keyManagerAlgorithm": "SunX509",
"keyStoreType": "JKS",
"sslAlgorithmName": "TLSv1.2"
}
SSL path NOT working for UpdateUserJSON:
"ssl": {
"keyFile": "/saviynt_shared/saviynt/ConnectorFiles/DIAS_SAP_OAuth.p12",
"keyFilePassword": "xxxxxxx",
"keyManagerAlgorithm": "SunX509",
"keyStoreType": "JKS",
"sslAlgorithmName": "TLSv1.2"
}
Logs:
Response from Client server:
Thanks!
Hi @sk ,
Please find the responses below:
- Can you share your UpdateUserJSON with masked values of sensitive information?
- {
"actions": {
"Update Login": {
"call": [
{
"name": "Update Login",
"callOrder": 0,
"connection": "acctAuth",
"url": "https://XXXX/sap/opu/odata/sap/ZHR_SRV/$metadata",
"httpMethod": "GET",
"ssl": {
"keyFile": "/saviynt_shared/saviynt/ConnectorFiles/DIAS_SAP_OAuth.p12",
"keyFilePassword": "xxxxx",
"keyManagerAlgorithm": "SunX509",
"keyStoreType": "JKS",
"sslAlgorithmName": "TLSv1.2"
},
"httpHeaders": {
"Authorization": "${access_token}",
"Content-Type": "application/xml",
"x-csrf-token": "fetch"
},
"successResponses": {
"statusCode": [
200,201
]
}
},
{
"name": "Update Login",
"callOrder": 1,
"connection": "acctAuth",
"url": "https://XXXX/sap/opu/odata/sap/ZHR_SRV/usridSet",
"httpMethod": "POST",
"ssl": {
"keyFile": "/saviynt_shared/saviynt/ConnectorFiles/DIAS_SAP_OAuth.p12",
"keyFilePassword": "xxxxx",
"keyManagerAlgorithm": "SunX509",
"keyStoreType": "JKS",
"sslAlgorithmName": "TLSv1.2"
},
"httpContentType": "application/xml",
"httpHeaders": {
"Authorization": "${access_token}",
"Content-Type": "application/json",
"x-csrf-token": "${response.'Update Login'.headers.x-csrf-token}",
"Cookie": "${response.'Update Login'.headers.Cookie}"
},
"httpParams": "{\"UsrID\":\"${user.username}\",\"Pernr\":\"${user.employeeid}\"}",
"successResponses": {
"statusCode": [
200,
201
]
}
}
]
}
}
}
- {
- Also issue is only happening for update scenario and working for all other scenarios?
- I am not sure of the other scenarios because we do not have those use cases at the moment. SSL params are working only in the connectionJSON.
- Does your target expect SSL parameters for all calls?
- Yes, we need to pass it for all the calls.
- Would you be able to share postman screenshot for same call?
Thanks!
Hi @rushikeshvartak ,
Yes, we have defined the SSL params in the connectionjson and hence we are able to see the response of the GET call mentioned in the TestConnectParams of the connectionjson. However, the status of the connection shows failed because of "GrailsAnonymousAuthenticationFilter.doFilter". I am not sure why I am seeing that. Please find the Connectionjson below:
"authentications": {
"acctAuth": {
"authType": "oauth2",
"url": "https://xxxxxx/f5-oauth2/v1/token",
"httpMethod": "POST",
"httpParams": {
"grant_type": "client_credentials",
"client_id": "xxxxxx",
"client_secret": "xxxxx",
"scope": "xxxxx-xxx.xxx"
},
"ssl": {
"keyFile": "/saviynt_shared/saviynt/ConnectorFiles/DIAS_SAP_OAuth.p12",
"keyFilePassword": "xxxx",
"keyManagerAlgorithm": "SunX509",
"keyStoreType": "JKS",
"sslAlgorithmName": "TLSv1.2"
},
"httpContentType": "application/x-www-form-urlencoded",
"httpHeaders": {},
"successResponse": [200,201],
"successResponsePath": "",
"expiryError": "ExpiredAuthenticationToken",
"retryFailureStatusCode": [
401,403
],
"timeOutError": "Read timed out",
"errorPath": "error",
"maxRefreshTryCount": 3,
"tokenResponsePath": "access_token",
"tokenType": "Bearer",
"accessToken": "Bearer abcd",
"testConnectionParams": {
"http": {
"url": "https://XXXXX/sap/opu/odata/sap/ZHR_SRV/usridSet('yyyyyyy')?$format=json",
"httpHeaders": {"Authorization": "${access_token}"},
"httpMethod": "GET",
"httpContentType": "application/json",
"ssl": {
"keyFile": "/saviynt_shared/saviynt/ConnectorFiles/DIAS_SAP_OAuth.p12",
"keyFilePassword": "xxxxxx",
"keyManagerAlgorithm": "SunX509",
"keyStoreType": "JKS",
"sslAlgorithmName": "TLSv1.2"
}
},
"successResponse": [200,201],
"successResponsePath": "",
"errors": [
"Couldn't authenticate you"
],
"errorPath": "error"
}
}
}
}
Response in the logs:
Thanks!
