Re: "HTTP/1.1 403 Forbidden" error from HTTPAPIR4

[Brad Stone <bvstone@xxxxxxxxx>]

No, a certificate wouldn't cause the server to return that error.

Ask them if they're blocking outgoing requests.  I've seen it many times
with my customers.  They just block everything going out from the IBM i
because they don't know what it is.

Also, without seeing the actual request it's also hard to say much more.
If the response is from the correct server then there are most likely
issues with the request itself.

I would also check to make sure they don't have any host table entries for
the host you're trying to connect to.  I've seen that as well.

On Fri, Oct 17, 2025 at 9:17 AM x y <xy6581@xxxxxxxxx> wrote:

> An app using HTTPAPIR4 runs without issue on multiple systems, including
> systems delivered new from IBM.  It's a straightforward SOAP app--I deploy
> the code and it works.
>
> However, it's not working with a new customer's existing system--I get the
> dreaded "HTTP/1.1 403 Forbidden" returned from HTTPAPIR4.  This Canadian
> customer does not have other SOAP or REST apps running and they're very
> security-conscious, so I suspect they've blocked themselves from getting
> into the internet for port 80/443 calls.
>
> Their system may not have a certificate--is the problem that simple?
>
> And I told them this would be an easy install...thank you for your help!
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list
> To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/web400.