Page 1 of 1

ignore SSL certificate error / disable SSL certificate verification

Posted: Fri Feb 09, 2024 4:44 am
by adale
In VL Web application, using #PRIM_WEB.HttpRequest, to make a GET request to a network attached device, is there any means to ignore SSL certificate error, or to disable the SSL certificate verification in request?

I have found some other examples for other platforms, and am thinking there might be a .headers (key/value) option, but I am unclear on what header key values would be valid in Lansa VL web?

Re: ignore SSL certificate error / disable SSL certificate verification

Posted: Fri Feb 09, 2024 10:36 am
by BrendanB
Arlyn,

since you are using #PRIM_WEB.HttpRequest, you will need to set your web BROWSER to ignore ssl certificate errors.

some examples of how to do this are found at:

https://support.avigilon.com/s/article/ ... uage=en_US

if you are using #XPRIM_HttpRequest (so, server routine) then we dont have this ability (mostly because IBMi GSKit doesnt support it).

using a non SSL connection (eg. HTTP://mydevice/ ) is the easiest way to ensure certificates are not checked/in-error...

Re: ignore SSL certificate error / disable SSL certificate verification

Posted: Thu Feb 15, 2024 10:48 pm
by adale
Brendan,
Yes using #PRIM_WEB.HttpRequest on the client side. Setting the Browser to ignore ssl cert errors, brings up other issues, and opens too many security issues.

I am trying to find a means to use the non SSL connection (HTTP://mydevice/) like you mention, and I can send or reach out via this means, but the returning response data is blocked because it is non HTTP being requested from a HTTPS browser session. Our VL web application runs in HTTPS.

Am I missing a setting somewhere that would allow the non SSL HTTP data to be received by the initiating VL web request?

Re: ignore SSL certificate error / disable SSL certificate verification

Posted: Thu Feb 15, 2024 10:52 pm
by adale
In Postman there is a setting "ignore SSL certificate error" which lets me read the data from the HTTP response. Is there anything like this setting that could be replicated in VL web?