Select certificate to add web reference for web service - web-services

I am trying to add a web reference for a web service but it prompts me to select a certificate. The cert is installed in my trust store and uploaded on the web services's server. But when i request the wsdl (in browser/uddi) i dont see my cert in the select cert pop up. Note that my cert does not have any private key and its a .cer format. I have already tried importing the certificate in web browser/trust store but no luck.
Any idea why this is happening?

Hey having same problem here, at the end I have downloaded the wsdl file and create the reference from there.

Related

unable to test google endpoint using postman

I am trying to use Google Cloud Endpoints as a API Gateway. For the same I created the endpoint and deployed it in a Google Run Container. When I call the url on the browser: https://... it works. However, when I try to call the same from Postman I get a 400 Bad Request error. I notice that from Postman when I try using http://... instead of https it works.
From this I concluded that perhaps this has something got to do with the SSL certificate. When I checked the certificate on the browser (by clicking on the lock icon), it shows *.a.run.app issued by GTS CA 1O1.
Then, I tried to add a Certificate in Postman (I am not sure about this). I opened Settings and tried to add a certificate by adding: *.a.run.app under host, but it did not work. I am not sure if that is the correct way to add a certificate.
Anyone can suggest what is the way to get the endpoint tested in Postman? Thanks

Postman Error: self signed certificate in certificate chain

I try to test REST api in Postman but every time I try to POST I get the following error
Error: self signed certificate in certificate chain.
I have tried with the SSL certificate verification on and off but both methods dont work. Postman is also updated to latest v7.3.6.
Tbh I dont know what to try anymore and would really appreciate any tip.
Go to Postman Settings > General > turn OFF SSL certificate verification
"make ssl certificate verification on and make it still work"
If you're under organization environment, you can:
Export your organization self-signed certificate as Base-64 encoded X.509 (.CER) format flat file. It could be done from Chrome.
Go back to Postman: Settings -> Certificates -> CA Certificates, switch on and select the file you just exported.
Adding CA certificates doesn't work for me. My certs are not self-signed but got the same error. Adding client certificates solved my problem. Quoted docs from Postman here: To send requests to an API that uses mutual TLS authentication, add your client certificate to Postman.
I used mkcert and here's how I managed to get rid of the error :
On the Site Information Icon, click where it's written Connection Not Secure
On the Connection Info dialog, click on More Information
On Page Info, click on View Certificate
On the Certificate tab, scroll down till where you'll see 2 links for the PEM files, and download the PEM (Chain) file
On Postman, go to Settings -> Certificates -> CA Certificates (make sure the toggle button is ON), and specify (click on Select File) the location of your PEM Chain file.
There you are !!!

SSL doesn't work on Windows Server

I had never installed SSL onto a Windows Server before, now I ran into a problem.
I had a website hosted by Smarter ASP, and I got a SSL certificate from them. Then I moved the website into Azure as a App Service, without creating a virtual server myself. I imported the pfx file into Azure, and it worked.
Now I want to move the website into AWS.
I created a Windows Server EC2 instance in AWS. I did all the A Record and CNames changes. Now when I request "www.teacherspet.net.au", the home page is returned without any problem.
I then did the following to import the SSL certificate into the AWS EC2 server:
On "Server Certificates", I imported the pfx file using "WebHosting" as the certificate store;
I added a HTTPS binding on the site, with ip address being "*" and host name being empty;
I checked the "Require SSL" checkbox on "SSL Settings".
I have also added the same pfx file into intermediate certificate:
However, when I requested "https://www.teacherspet.net.au", I got
This site can’t be reached
www.teacherspet.net.au took too long to respond.
Why? I can't figure out what went wrong. Please help!
I am terribly sorry for the silly mistake - when I created the Network ACL inbound rule, instead of selecting "HTTPS (443)", I accidentally selected "HTTPS* (8443)". Once I corrected it, everything works. Thank you disflux for your help!

Crypto API CSR process

I want to request a certificate from my own CA. I know how to create a CSR (https://msdn.microsoft.com/en-us/library/windows/desktop/aa382364(v=vs.85).aspx) and send it, but, assuming that the server responds with a certificate, how do I "join" the two certificates to one?
I could use IE to do it for me but my users will not even know how to open IE in Windows 10 and, besides, our root certificate must be installed as well, I have to create a local application.
I checked the certificate enrollment API but I do not know how to setup my PHP app to be compatible with it.

Using installed SSL/TLS certificate with SoapUI?

I need to be able to hit a web service using SoapUI to inspect the request and response. I was previously provided with a certificate in the form of a .PFX file, along with the keystore password, which I could import into SoapUI and successfully hit the service.
The certificate I was provided recently expired, and my company has now deployed a new certificate via SCCM to my machine. I have the certificate installed in both Local Machine and Current User.
My question is:
Is there a way to use an installed certificate (meaning I can't export it first) to complete the SSL/TLS handshake when making a request via SoapUI?
Everything I've been able to find on the web has referenced exporting the certificate and setting the SSL settings in SoapUI (like I did before). Unfortunately, I do not have required authority to export the certificate to a .PFX file with a keystore password...
I assume there has to be a configuration setting of some sort in SoapUI that will let me hit the service with my installed certificate, but I can't find it for the life of me. Any help is greatly appreciated!
Even confirmation that it's impossible is appreciated; just not as much as I would appreciate a solution ;)
Thanks in advance!