Questions tagged [api-client-certificate]
The api-client-certificate tag has no usage guidance.
22 questions
0
votes
0
answers
65
views
Security concerns regarding Outbound Messages and Certificates
We're looking to implement an outbound integration from Salesforce to an external application that our company built.
Reading through the documentation about Outbound Messages, Salesforce mentioned ...
0
votes
1
answer
685
views
which salesforce certificate shall I use for outbound messages?
One of the salesforce security considerations for outbound messages is:
If the configuration of your application (endpoint) server's SSL/TLS
allows, validate the identity of the Salesforce server ...
1
vote
1
answer
569
views
What is the OpenSSL version supported by Salesforce?
We are receiving exceptions while making SOAP callouts which is explained here. We would like to know what version of OpenSSL is used by salesforce? and how to toggle it to support the latest version?
1
vote
2
answers
1k
views
Error Making SOAP Calls "System.CalloutException: IO Exception: PKIX path validation failed: java.security.cert.CertPathValidatorException"
We are making calls to an external SOAP endpoint from the Salesforce platform & it stopped working on 30th Sept 2021. Anyone having a similar issue and associated resolution?
Our endpoint is ...
1
vote
0
answers
50
views
Importing a 1024bit key into SF
we are integrating into a government system (yep one of those!)
they have given us a PFX certificate and I have managed to use openssl and java keystore to convert it to a JKS file
When I tried to ...
1
vote
0
answers
93
views
Upload MTLS Cert using Metadata API [closed]
Is there a way to upload the mtls cert into Salesforce metadata API?
Trying to automate based on some process / conditions.
0
votes
0
answers
76
views
Error while using client certificate in callouts [duplicate]
I am integrating with an external API which expects client certificate in the request. They had provided .p12 file. I have converted it into .jks and imported in Salesforce.
I have tried to use it two ...
0
votes
1
answer
117
views
Using Managed Certificate from Visualforce Page
I have an API I need to call where the only auth is with a certificate, but it must be called from the Visualforce page to work properly as it returns a JavaScript object that will be called ...
5
votes
1
answer
2k
views
Is it possible to upload a self-signed certificate into Salesforce for callout purpose?
We need to make a callout to an external system. The external system uses a self-generated certificate to verify the caller. So is it possible to upload a certificate into Salesforce for this purpose? ...
1
vote
1
answer
873
views
Client Credential call for OAuth 2.0 providing "unsupported_grant_type"
{"error": "unsupported_grant_type","error_description": "grant type not supported"}
I am creating a app to connect Salesforce to communicate(app-myApp to app-salesforceApp).
So we took the channel "...
0
votes
1
answer
751
views
Mutual authentication - Timeouts on port 8443
I am getting started on the Mutual Authentication certificates. I have followed the documentation and set up the Enforce TLS/SSL and API Only system properties for the profile. I have logged in ...
0
votes
0
answers
855
views
Certification and Key Management Expiration
I have been researching about certification renewal and expiration and am confused if I need to renew or not. I read here that I only need a certificate if I have "service providers" in my org.
I ...
3
votes
0
answers
899
views
Trying to call API through Apex with custom security certificate but getting CalloutException
I'm trying to use Apex to call some API endpoints to do some validation for my company. There are some specific properties of these APIs that make it a bit tricky:
The APIs are hosted on self-...
2
votes
1
answer
1k
views
CA-Signed Certificates
We are looking to integrate Salesforce with a web service using 2 way SSL. One of the requirements is that we have the certificates CA-signed.
Can we use the same certificates across multiple ...
1
vote
1
answer
6k
views
How to Enable the Enforce SSL/TLS Mutual Authentication user permission - API user
Can anyone guide me how to Enable the Enforce SSL/TLS Mutual Authentication user permission for API client user.
Regards
1
vote
1
answer
661
views
CA-signed Certificate: What URL (Common Name)
I'm trying to set up mutual authentication with a third-party. I want to create a new CA signed certificate but I don't know what URL I should use. Testing from our sandbox.
0
votes
1
answer
368
views
Same CA signed certificate for both salesforce act as server (Mutual TLS) and salesforce act as client
Can i use same CA signed certificate for both salesforce act as server (Mutual TLS) and salesforce act as client(2 way ssl).
Actually in one of my project we have exposed some api to external system ...
1
vote
1
answer
3k
views
Self Singed Certificate for Mutual TLS
I need to expose an rest api to an external system, and wanted to allow authentication only through certificate. So as per the salesforce mutual tls feature can we use self signed certificate ...
0
votes
1
answer
140
views
Salesforce required to store server certificate
Do i need to upload server certificate in Salesforce to trust the server while connecting in 2 way ssl?
Thanks,
2
votes
1
answer
4k
views
Creating keystore file from certificate
I have a .crt file shared with my client but when i converted it into .jks format and try importing it into salesforce under Certificate and Key Management it gives me below error:
Error: No ...
1
vote
0
answers
1k
views
Connection reset by peer while implementing Mutual Authentication
We have enabled Mutual Authentication in our system.
We are facing some issues while external system is trying to connect.
Below is the error details when we tried to handshake.
The connection from ...
0
votes
2
answers
1k
views
Steps to change Default Salesforce Client Certificate [duplicate]
Yesterday I received an email from Salesforce that the default salesforce client certificate will expire on Aug 7, 2017. In the required actions, the article said:
If you don’t have an existing ...