RE: QSYS2.HTTP_POST & SSL

[Nadir Amra <amra@xxxxxxxxxx>]

See the sslTolerate option at:

https://www.ibm.com/docs/en/i/7.4?topic=functions-http-get-http-get-blob#rbafzscahttpget__HTTP_options

Setting it to true will allow you to not have to import the certificate.

-----------------------------------------------
Nadir Amra
e-mail: amra@xxxxxxxxxx


From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> on behalf of Brad Stone <bvstone@xxxxxxxxx>
Date: Monday, October 30, 2023 at 3:57 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: [EXTERNAL] Re: QSYS2.HTTP_POST & SSL
You'll need to:

1.  Import the CA chain from the site into the *SYSTEM store

or

2.  Use an application that allows the not trusting error to be bypassed
(HTTPAPI and GETURI both do this).

This will help for option 1:
https://docs.bvstools.com/home/ssl-documentation

On Mon, Oct 30, 2023 at 3:51 PM Justin Taylor <jtaylor.0ab@xxxxxxxxx> wrote:

> I'm trying to use HTTP_POST to access an HTTPS service from FedEx, but I'm
> getting an SSL error.  "GSKit Error is 6000 - Certificate is not signed by
> a trusted certificate authority".
>
> The docs show a sslCertificateStoreFile parameter, but it's not clear what
> to put there. A second doc, "SSL Considerations for QSYS2 HTTP Functions"
> is equally vague.
>
> My PC connects to the URL just fine, and the site cert is fine.  What does
> IBMi want here?