Questions tagged [certificates]
The certificates tag has no usage guidance.
107
questions
0
votes
0
answers
59
views
Bad certificate in call out
I use the certificate provided to me. During callout, I get this message in the developer console.
Is this a bug on the side of SF or an external system? How can I verify the correctness of the ...
- 5
2
votes
1
answer
45
views
How often does Salesforce change the keys at https://login.salesforce.com/id/keys?
How often does Salesforce change the keys change at https://login.salesforce.com/id/keys ?
Context
A client wants to verify the JWT signature generated for Salesforce's OpenID Connect token
However, ...
- 2,092
1
vote
0
answers
53
views
Sectigo SSL certificate - SunCertPathBuilderException: unable to find valid certification path to requested target
I'm trying to send a HTTP request to a service hosted on the domain salesforceearth.com, however it's returning the above error. The SSL certificate recently expired so I replaced it and this error ...
- 33
0
votes
1
answer
155
views
Importing certificates: "Keystore contains a certificate with an alias that conflicts with a certificate already in the organization."
I'm trying to deploy changes that include Named Credentials from one sandbox to another. In order to do that, all the certificates used by my Named Credentials need to be in the target sandbox at the ...
- 2,922
0
votes
0
answers
433
views
Cannot authorise a salesforce org in VS Code due to certificate error
I cannot authorise a salesforce org in VS Code. I am prompted to login, but then I get this error:
ERROR running auth:web:login: Invalid client credentials. Verify the OAuth client secret and ID. ...
- 1
0
votes
1
answer
250
views
SSL certificate confusion
Pardon me for my complete ignorance(even after reading a lot on this) but would like to get community's view on following questions:
While I know for 2-way SSL authentication, we need to generate ...
- 473
1
vote
1
answer
240
views
Export public key from the certificate
I want to understand if there is a way to export a public key using any crypto methods, the way openssl is generating.
I am able to successful generate public key with the following command, however I ...
- 11
2
votes
1
answer
98
views
Importing KvK NL CRT certificates to the Salesforce org
our end goal is to import the following certificates in our salesforce org so that https://ssltest.kvk.nl/ is trusted by our salesforce org.
Certificates are provided at the following link: https://...
- 23
1
vote
0
answers
296
views
MTLS certificate error
I have been breaking my head to get the Mutual Authentication(MTLS) to work in Salesforce for a while but with little success. I am trying this out on a sandbox by enabling this feature and by ...
- 361
0
votes
1
answer
95
views
Email notification when single sign-on certificate has expired
We've implemented single sign-on in our org and. How do we configure email notification when single sign-on certificate expires?
- 19
0
votes
1
answer
316
views
How do I create a CSR from Salesforce containing an ORG element? [closed]
I am trying to create a new certificate in Salesforce. I have filled in the fields in the certificate record, exported a CSR and get the following error message from the CA (Network Solutions)
CSR ...
- 3,368
1
vote
1
answer
111
views
Marketing Cloud - Changing the Status of a Mobile Push Android App
We have an android app with a status of expired because we unintentionally uploaded an Apple APNS cert to the app, and now that has expired. Is there a way to change the status to active without ...
4
votes
1
answer
1k
views
Do expired certificates for salesforce connected applications block connections?
Salesforce implements a non-standard client credentials OAuth flow for connected apps that want to do machine to machine authorization. Standard OAuth flow only requires a client ID and secret, while ...
- 1,151
0
votes
1
answer
84
views
Connected app - packaging vs subscriber org and access token validity
I had a brief question about how certificates work in a ConnectedApp within a packaging org.
To give context, we have a packaging org that contains a single ConnectedApp. This ConnectedApp uses the ...
0
votes
0
answers
139
views
Certificate-based authentication for users via a shared public key
I would like to authenticate my users to SalesForce (web console and Salesforce1 app) using client certificate based authentication (CBA) issued from my internal CA and eventually block username/...
- 1
1
vote
1
answer
382
views
Issue getting public key, getting 400 Bad Request using JWT+OAuth while integrating salesforce with Box.com [closed]
I am trying to get access token from box.com. For this I created a custom app that uses OAuth and JWT. I have also created a self signed certificate in salesforce. This self signed certificate is used ...
- 355
2
votes
0
answers
318
views
Import CA-Signed Certificate from One Org into Another via MetadataAPI
I am trying to automate the set up of some of my lower sandboxes.
In my SandboxPostCopy class, I'm using the FinancialForce MetadataAPI wrapper MetadataService to query and upsert a certificate. (...
- 1,818
0
votes
0
answers
102
views
Apex callout to a SSL endpoint: unable to find valid certification path to requested target [duplicate]
since some days I get the following error message when I call an webservice from SF:
PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid ...
- 512
0
votes
0
answers
122
views
Is self signed certificate generated in Sandbox environment available on Production too? [duplicate]
I have generated a self-signed certificate on Sandbox environment and based on that have a JWT token that would be sent to my API being called from Salesforce on some action. Now since I am using the ...
- 35
1
vote
0
answers
49
views
Certificates change from Symantec to DigiCert
An SAP to Salesforce integration via a REST API uses a certificate provided by Salesforce/DigiCert.
Now that certificate is about to expire and we need to provide them with a new cert. The problem ...
- 11
2
votes
1
answer
2k
views
Constructing a SSL certificate chain for uploading to Certificate and Key Management [closed]
Background
I generated a CSR from Salesforce setup and have received back the PositiveSSL Certificate from sectigo.com.
But when I try and upload the certificate into Salesforce, I get this error:
...
- 8,223
2
votes
1
answer
788
views
What are the security implications of using a self signed certificate for the JWT-Based Auth flow or to authorize a connected app in Salesforce?
I am new to Salesforce DX and am in the process of setting up a scratch org. The steps on Salesforce's website instruct the user to create a self-signed certificate because "The JWT-based ...
- 21
7
votes
1
answer
785
views
How can I unit test a http callout that uses a certificate?
The .setClientCertificateName method of the HttpRequest class requires a string that is the name of a certificate in the organization.
In a unit test class, is it possible to mock this method? When I ...
- 11k
-3
votes
1
answer
261
views
Admin certification (ADM 201) [closed]
I have registered for ADM 201 admin certification for Spring 19, and my exam is on August 20. But Salesforce is coming out with new release on August 14 (Summer 19). So will questions the be about ...
7
votes
2
answers
1k
views
Metadata API Apex fails to create fields in Connected App
I am using the latest v46 version of the Financial Force Metadata API Apex Wrapper to create a Connected App but the values I put in the code are partly ignored.
What is not working:
ConnectedApp....
- 34.3k
0
votes
1
answer
579
views
Query Org's Certificates in Apex using Metadata API
I am unable to retrieve the Certificates of an org using the Financial Force Metadata API Apex Wrapper although I see the object in the Metadata API Documentation and can query it using the workbench.
...
- 34.3k
6
votes
1
answer
790
views
Automate setup of an external identity provider via APIs
I use the Financial Force Metadata API Apex Wrapper to simplify an app setup using a custom UI. Part of the setup is the creation of a Self-Signed Certificate and its usage in a Single Sign-On Setting....
- 34.3k
-2
votes
2
answers
523
views
SSL setup using digital certificates
I started to read about ssl and its certificates and I can't imagine one thing. SSL provides two types of digital certificates: Self-Signed and created by trusted CA. The question is in your opinion ...
- 390
1
vote
1
answer
545
views
ADM 201 will expire if I miss one maintanence exam?
Will my adm 201 expire if I miss a single release exam that is winter 2019, till December I wrote all exams and it was just behind a single release exam till April and I never got a reminder mail for ...
2
votes
1
answer
388
views
Is there a need to renew the Self Signed Cert for Single Sign On if Salesforce is not the Identity Provider?
Based on this help article and this community post, can we allow the Self Signed Cert within Salesforce to expire if we do not use Salesforce for an Identity Provider? Is there any harm in doing this? ...
- 131
2
votes
1
answer
2k
views
Create self-signed x509 certificate
I am trying to get an access token by following the guide OAuth 2.0 JWT Bearer Token Flow. But I am stuck on the following
The developer writes an app that generates a JWT. The JWT is signed with ...
- 165
0
votes
2
answers
1k
views
What will happen if I won`t complete a maintenance module?
Right now I have a Platform Developer I Certificate. But I am not working with the Salesforce right now and do not plan to work with it in the near future. So, from my perspective it seems redundant ...
- 103
1
vote
0
answers
79
views
SSL Certificate: Is an intermediate certificate always needed?
We recently purchased an SSL certificate for a custom domain. When we received it, the provider said we needed to also install an intermediate certificate.
There is an article called 'Merge a ...
- 11
1
vote
2
answers
2k
views
Can someone let me know how to install root and intermediate certificates in salesforce?
We are using a CA-signed certificate for portal but recently another company acquired the company that authorized our web address and now there are some updates made to the certificate. As per the ...
- 379
0
votes
0
answers
675
views
Certification and Key Management Expiration
I have been researching about certification renewal and expiration and am confused if I need to renew or not. I read here that I only need a certificate if I have "service providers" in my org.
I ...
- 3,177
1
vote
1
answer
201
views
transfer certificate Self-Signed between 2 sandboxes
I'm looking for a way to migrate certificate Self-Signed between two unbound sandboxes. I saw that certificate are not metadata, so it's a bit harder than expected for me.
- 341
0
votes
1
answer
112
views
Newsletter open and click tracking use http. Can i configure it that it uses https with our certificate? Can this cause block bounces?
We recently saw that a particular domain (lets say it is recipient.com operated by recipient ltd) of newsletter recipients block our newsletter quite often. Therefore we asked the operating company of ...
- 4,161
3
votes
0
answers
480
views
Trying to call API through Apex with custom security certificate but getting CalloutException
I'm trying to use Apex to call some API endpoints to do some validation for my company. There are some specific properties of these APIs that make it a bit tricky:
The APIs are hosted on self-...
- 31
0
votes
1
answer
34
views
Can an AppExchange app install Certificates in a Salesforce instance?
I want to create an AppExchange app, which needs to install a certificate in Salesforce, so that certificate can be used to make calls with an external server.
Is this possible? If so, could you ...
- 113
0
votes
1
answer
2k
views
Authorization using certificates
I want to know the process of authorization or authentication using self-signed certificates.
I am trying to integrate two salesforce dev orgs using REST callouts. I have created a self-signed ...
- 63
1
vote
0
answers
734
views
Generate Public key from Self signed Certificate [closed]
I have a .crt Self signed certificate generated from salesforce. How can i generate public key from it , i need to provide the public key to be make a call to services
- 301
1
vote
1
answer
214
views
Certificate and Key Management
Currently I have a community that users have been successfully using for about a year. The web address starts with https://... There is a self signed certificate. I don't remember creating this so ...
- 1,281
1
vote
0
answers
196
views
Salesforce stopped accepting certificate for outbound call
Our Salesforce instance is making an outbound call to a web service and receiving the following error:
IO Exception: sun.security.validator.ValidatorException: PKIX path validation failed: java....
- 105
0
votes
1
answer
68
views
What cause the "Recipient field contains invalid device token"?
I've been working on creating a simple connected App, that can receive Apple Push Notification.
For that I:
Created an Xcode project using force iOS.
Used Keychain Access to create 2 CSR file, and ...
5
votes
2
answers
1k
views
Insufficient Privileges Certificate
Any idea on why it's giving an error Insufficient Privileges when I'm trying to import a key store (exported from another sandbox) ?
Importing/Exporting it as an System Admin, with or without ...
- 914
2
votes
2
answers
2k
views
All SSO's got affected by changing Self Signed Certificate. What do I need to share with Vendors?
Recently, I got an email from Salesforce, notifying that one of my self-signed certificates is going to expire soon. As a solution to this, I created a new self-signed certificate and replaced the ...
- 1,069
5
votes
0
answers
50
views
Certificate api name
For example, I do the following :
Export from Keystore the certs located in my Prod
Import from Keystore the certs to my Sandbox
Anyone knows why during this transaction the api names (and labels) ...
- 914
2
votes
1
answer
999
views
CA-Signed Certificates
We are looking to integrate Salesforce with a web service using 2 way SSL. One of the requirements is that we have the certificates CA-signed.
Can we use the same certificates across multiple ...
- 21
0
votes
0
answers
60
views
Update a Record's Fields in Production Org from External Website w/o Salesforce Login
I have a form on my WordPress website that collects additional information from customers. I want this information added to an existing record of MyCustomObject. To do this, I will need to make a ...
- 133
1
vote
0
answers
309
views
CAN we use JWT with CA signed cert
We have an inbound integration to salesforce where client uses JWT login mechanism. A self signed cert has been provided from salesforce which they use to sign the request. Is there any way we can use ...
- 341