REST API - Chain Certificate p7b

[rushikeshvartak]

Hi All,

We have application based on key cloak which needs chain certificate of extension p7b.

This application was working as expected on v5.5 as we added p7b certificate directly on keystore. now from UI p7b Certificate can't be added from Connection --> Add certificate and Certificate management.

Chain Certificate ;

Please note 

• Connection works with hardcoded token
• Postman works as expected.
• We are aware its SSL issue.

Please let me know if anyone implemented chain certificate in EIC

[sudeshjaiswal]

Hello @rushikeshvartak,

Do you mean you need to use multiple certificates in a single connection to establish the connection?

Thanks.

[rushikeshvartak]

yes

[sudeshjaiswal]

Hello @rushikeshvartak,|

So, you are saying in SP3 you were able to consume all three certificates in the single connection.

Thanks.

[rushikeshvartak]

Yes . Main concern is we can't upload p7b files from certificate management anymore which will add certificate in keystore. Do you know any API other than DEVOPS ticket

[sudeshjaiswal]

Hello @rushikeshvartak,

Please raise the support ticket to get it added to the keystore.
Did you try to convert the p7b certificate and try to add it via certificate management.

Thanks.

[rushikeshvartak]

P7b to crt does not works

[sudeshjaiswal]

Hello @rushikeshvartak,

In that case, would request you to create the devops ticket and request them to get it added in the keystore.

Thanks.

[rushikeshvartak]

I have raised this idea. Devops ticket is always going to take long time.

https://ideas.saviynt.com/ideas/EIC-I-5777

[riteshkumar · Accepted solution]

You shouldnt be uploading the certificate chain containing private key into Saviynt for Connectors.

Only public certificate (.cer or .crt) is required to be uploaded from UI and selected in the connector.

Hence DevOps ticket should not be required for backend uploads of cert chains.

Thanks,

If you find the above response useful, Kindly Mark it as "Accept As Solution".

[rushikeshvartak]

Thanks for support issue has been resolved