ignore SSL certificate error / disable SSL certificate verification

This Q&A forum allows users to post and respond to "How Do I Do ....." questions. Please do not use to report (suspected) errors - you must use your regional help desk for this. The information contained in this forum has not been validated by LANSA and, as such, LANSA cannot guarantee the accuracy of the information.
Post Reply
adale
Posts: 212
Joined: Wed Apr 08, 2020 9:18 pm
Location: Poplarville, MS

ignore SSL certificate error / disable SSL certificate verification

Post by adale »

In VL Web application, using #PRIM_WEB.HttpRequest, to make a GET request to a network attached device, is there any means to ignore SSL certificate error, or to disable the SSL certificate verification in request?

I have found some other examples for other platforms, and am thinking there might be a .headers (key/value) option, but I am unclear on what header key values would be valid in Lansa VL web?
Arlyn Dale
Servias LLC
BrendanB
Posts: 134
Joined: Tue Nov 24, 2015 10:29 am

Re: ignore SSL certificate error / disable SSL certificate verification

Post by BrendanB »

Arlyn,

since you are using #PRIM_WEB.HttpRequest, you will need to set your web BROWSER to ignore ssl certificate errors.

some examples of how to do this are found at:

https://support.avigilon.com/s/article/ ... uage=en_US

if you are using #XPRIM_HttpRequest (so, server routine) then we dont have this ability (mostly because IBMi GSKit doesnt support it).

using a non SSL connection (eg. HTTP://mydevice/ ) is the easiest way to ensure certificates are not checked/in-error...
adale
Posts: 212
Joined: Wed Apr 08, 2020 9:18 pm
Location: Poplarville, MS

Re: ignore SSL certificate error / disable SSL certificate verification

Post by adale »

Brendan,
Yes using #PRIM_WEB.HttpRequest on the client side. Setting the Browser to ignore ssl cert errors, brings up other issues, and opens too many security issues.

I am trying to find a means to use the non SSL connection (HTTP://mydevice/) like you mention, and I can send or reach out via this means, but the returning response data is blocked because it is non HTTP being requested from a HTTPS browser session. Our VL web application runs in HTTPS.

Am I missing a setting somewhere that would allow the non SSL HTTP data to be received by the initiating VL web request?
Arlyn Dale
Servias LLC
adale
Posts: 212
Joined: Wed Apr 08, 2020 9:18 pm
Location: Poplarville, MS

Re: ignore SSL certificate error / disable SSL certificate verification

Post by adale »

In Postman there is a setting "ignore SSL certificate error" which lets me read the data from the HTTP response. Is there anything like this setting that could be replicated in VL web?
Arlyn Dale
Servias LLC
Post Reply