5

We need to make a callout to an external system. The external system uses a self-generated certificate to verify the caller. So is it possible to upload a certificate into Salesforce for this purpose?

The only two places I can recall is connected app JWT bearer token and two-way SSL. But since this is a callout to a third party system I don't think either of this should apply. Currently we are uploading it as a document or static resource and read the file as string. But is there a better solution for this?

Improve this question
1
  • @identigral I am not asking for using a SF signed cert or CA signed cert.
    – Lance Shi
    Commented Sep 3, 2019 at 2:37

1 Answer 1

Reset to default
5

For callouts that need to implement mutual auth in SSL (aka 2-way SSL) with your own, self-signed cert:

  1. Drop your cert + private key into a JKS keystore and import it via Certificate and Key Management admin UI. Even though JKS supports a cert-only entry, that won't work here. SF will only import a JKS with one or more entry of type PrivateKeyEntry. The PrivateKeyEntry is a public/private keypair item.
  2. Use the cert in an Apex callout: Apex callout with a client certificate
Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .