SSL error for URL with self-signed CA certificate while calling external API in EPL

Forum
, , ,
1

Hi,
We have an on-premise installation of Cumulocity IoT and the environment is no way connected to the internet. All the applications are with in the intranet and self-signed SSL certificate is being used for https communication. All ports are blocked except 443. While development of one functionality it requires to call an internal Pega API which is hosted with in the network and accessible over https only.

In the API call, using EPL, exceptions are thrown due to self signed SSL certificate.

Please let me know if there is any way to by pass the SSL verification while calling the API or please guide how it can be done while being on-premise.

I tried below code

dictionary<string, string> httpConfig := {
		HttpTransport.CONFIG_TLS:"true",
		HttpTransport.CONFIG_TIMEOUT_SECS:"60",
		HttpTransport.CONFIG_AUTH_TYPE:"HTTP_BASIC",
		HttpTransport.CONFIG_USERNAME:"username",
		HttpTransport.CONFIG_PASSWORD:"password"
	};

// 1) Get the transport instance
HttpTransport transport := HttpTransport.getOrCreateWithConfigurations(HTTP_HOST_NAME, 443, httpConfig);
// 2) Create the request event
Request req:= transport.createGETRequest(API_PATH);
// 3) Execute the request and pass the callback action  	
req.execute(ResponseHandler().handleResponse);

Error

SSL connection unexpectedly closed: error:16000069:STORE routines::unregistered scheme",com.softwareag.connectivity.httpclient.HttpOptions({},{},{}),19) (87124675)
2

Sounds like you might need to either specify tlsAcceptUnrecognizedCertificates or tlsCertificateAuthorityFile

1 Like
3

Thanks @Sandeep_Komarneni