Skip to main content
New
Stack Overflow Jobs powered by Indeed: A job site that puts thousands of tech jobs at your fingertips (U.S. only). Search jobs

Questions tagged [certificates]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
17 views

How to create 2GP package when using JWT Bearer Type External Credentials

I am trying to create a 2GP managed package that includes named credentials / external credentials. The issue I'm having is related to the Authentication Flow Type of my external credential being 'JWT ...
Daniel Collier's user avatar
0 votes
1 answer
48 views

How to programmatically generate a certificate or keys and add it to the store

I'm working on integrating salesforce instances with an external service that I control and we're currently evaluating using JWTs to authenticate. If I have a certificate in the Certificate and Key ...
StaticMethod's user avatar
0 votes
0 answers
99 views

Common Name for CA-Signed CSR in MTLS?

I am trying to set up MTLS for my client->server SOAP Apex callout to an external web app, following the directions in these help articles: https://developer.salesforce.com/docs/atlas.en-us....
DCastel's user avatar
0 votes
0 answers
179 views

SSO and CA-signed certificates

We are trying to set up SSO with Okta for our prod salesforce instance. And one of the compliance requirements from our IT/security department is to use only CA-signed certificates, i.e. self-signed ...
wesaw's user avatar
  • 3,080
0 votes
0 answers
44 views

Salesforce OAuth Token endpoint certificate not accepted

We're currently working with Bank of America to provide an exposed Rest Service that they can use to send in financial data. We are currently running into a roadblock, in that they aren't able to ...
Alexander Folkerts's user avatar
0 votes
0 answers
449 views

How to use Signed certificates to expose REST API in Salesforce?

My use case is expose REST API in salesforce using certificate (trying self-signed), should not use OAuth authentication to consume in postman. Below Steps did but not able to complete. Created Self-...
Silambarasan's user avatar
0 votes
1 answer
443 views

which salesforce certificate shall I use for outbound messages?

One of the salesforce security considerations for outbound messages is: If the configuration of your application (endpoint) server's SSL/TLS allows, validate the identity of the Salesforce server ...
Cuban coffee's user avatar
  • 1,564
0 votes
0 answers
170 views

Salesforce SFDX and Netskope

Following the deployment of a security solution within our park, Netskope (similar to Zscaler) We have problems with SFDX CLI and VSCode, indeed we solved a first problem concerning SSL: We added the ...
Sebastien38300's user avatar
2 votes
3 answers
2k views

VS Code/sfdx: authorization fails with reason: self-signed certificate in certificate chain

I have been using VS Code and Salesforce since a year in my company laptop. I am trying to authorize VS code with my sandbox. Process I followed: VS Code> Sfdx auth org shortcut Also tried sfdx ...
Rhuan Miguel's user avatar
5 votes
1 answer
3k views

Importing a Java keystore (JKS) yields a "Keystore file is corrupted" message

You have a Java keystore (JKS) file with a public/private keypair that you're importing via Certificate and Key Management. When you do so, you see an error message: Error: keystore file is corrupted:
identigral's user avatar
  • 7,625
0 votes
1 answer
795 views

"Add a domain" not visible after sandbox refresh

The first picture is of the production -> Setup-> Domains The second picture is of the sandbox-> Setup-> Domains. The add domain button disappeared after sandbox refreh Is there anyway i ...
Ashutosh R's user avatar
1 vote
0 answers
62 views

Org-to-org: certificate-based authentication when calling REST APIs

I have implemented SSO among two ORGS. I have made a web services class in my service Org. Can I hit that web service from my Identity provider Org using rest callout? I tried it by making a http get ...
nischal vasisth's user avatar
0 votes
0 answers
915 views

How do I import a JKS where I do not have the private key

The public cert is issued by the claims provider. It is for custom apex JWT verification. I get an error when uploading: "Error: No certificate was imported because the keystore file doesn't ...
K A's user avatar
  • 1
2 votes
2 answers
2k views

Expiring Certificate Notification - But No Certificates

I am getting, by mail, the following notification: Sandbox: SFDC Expiring Certificate Notification You have one or more certificates in your Salesforce org xxxxxxxxx 00Dxxxxxxxxxxxx that will expire ...
willeg's user avatar
  • 303
0 votes
1 answer
2k views

Deactivate Certificates in Salesforce [closed]

There is a certificate created in my org and it is expired. I want to deactivate it. Is that possible?
sThirumagal93's user avatar
1 vote
1 answer
33 views

List of installed certificates from BM and their expiration

I want to add some external system monitoring for certificates, listed on "Private keys and Certificates" in commerce cloud BM. Basically I need "Alias" and "Valid to" ...
Anna's user avatar
  • 11
0 votes
0 answers
329 views

Bad certificate in call out

I use the certificate provided to me. During callout, I get this message in the developer console. Is this a bug on the side of SF or an external system? How can I verify the correctness of the ...
Saero's user avatar
  • 5
2 votes
1 answer
172 views

How often does Salesforce change the keys at https://login.salesforce.com/id/keys?

How often does Salesforce change the keys change at https://login.salesforce.com/id/keys ? Context A client wants to verify the JWT signature generated for Salesforce's OpenID Connect token However, ...
Rob's user avatar
  • 2,122
1 vote
0 answers
356 views

Sectigo SSL certificate - SunCertPathBuilderException: unable to find valid certification path to requested target

I'm trying to send a HTTP request to a service hosted on the domain salesforceearth.com, however it's returning the above error. The SSL certificate recently expired so I replaced it and this error ...
Alex Curry's user avatar
0 votes
2 answers
2k views

Importing certificates: "Keystore contains a certificate with an alias that conflicts with a certificate already in the organization."

I'm trying to deploy changes that include Named Credentials from one sandbox to another. In order to do that, all the certificates used by my Named Credentials need to be in the target sandbox at the ...
Matthew Souther's user avatar
0 votes
0 answers
2k views

Cannot authorise a salesforce org in VS Code due to certificate error

I cannot authorise a salesforce org in VS Code. I am prompted to login, but then I get this error: ERROR running auth:web:login: Invalid client credentials. Verify the OAuth client secret and ID. ...
Jolene's user avatar
  • 1
0 votes
1 answer
946 views

SSL certificate confusion

Pardon me for my complete ignorance(even after reading a lot on this) but would like to get community's view on following questions: While I know for 2-way SSL authentication, we need to generate ...
sfdc_Qrius's user avatar
1 vote
1 answer
881 views

Export public key from the certificate

I want to understand if there is a way to export a public key using any crypto methods, the way openssl is generating. I am able to successful generate public key with the following command, however I ...
bhavya's user avatar
  • 11
2 votes
1 answer
196 views

Importing KvK NL CRT certificates to the Salesforce org

our end goal is to import the following certificates in our salesforce org so that https://ssltest.kvk.nl/ is trusted by our salesforce org. Certificates are provided at the following link: https://...
ExtForce's user avatar
1 vote
0 answers
859 views

MTLS certificate error

I have been breaking my head to get the Mutual Authentication(MTLS) to work in Salesforce for a while but with little success. I am trying this out on a sandbox by enabling this feature and by ...
Anee's user avatar
  • 381
0 votes
1 answer
290 views

Email notification when single sign-on certificate has expired

We've implemented single sign-on in our org and. How do we configure email notification when single sign-on certificate expires?
Anvesh Varma's user avatar
0 votes
1 answer
1k views

How do I create a CSR from Salesforce containing an ORG element? [closed]

I am trying to create a new certificate in Salesforce. I have filled in the fields in the certificate record, exported a CSR and get the following error message from the CA (Network Solutions) CSR ...
Jagular's user avatar
  • 3,356
1 vote
1 answer
221 views

Marketing Cloud - Changing the Status of a Mobile Push Android App

We have an android app with a status of expired because we unintentionally uploaded an Apple APNS cert to the app, and now that has expired. Is there a way to change the status to active without ...
Luke Krausmann's user avatar
7 votes
1 answer
3k views

Do expired certificates for salesforce connected applications block connections?

Salesforce implements a non-standard client credentials OAuth flow for connected apps that want to do machine to machine authorization. Standard OAuth flow only requires a client ID and secret, while ...
Andy Ray's user avatar
  • 1,468
0 votes
1 answer
269 views

Connected app - packaging vs subscriber org and access token validity

I had a brief question about how certificates work in a ConnectedApp within a packaging org. To give context, we have a packaging org that contains a single ConnectedApp. This ConnectedApp uses the ...
thomastaylor's user avatar
0 votes
0 answers
312 views

Certificate-based authentication for users via a shared public key

I would like to authenticate my users to SalesForce (web console and Salesforce1 app) using client certificate based authentication (CBA) issued from my internal CA and eventually block username/...
Zenith63's user avatar
1 vote
1 answer
807 views

Issue getting public key, getting 400 Bad Request using JWT+OAuth while integrating salesforce with Box.com [closed]

I am trying to get access token from box.com. For this I created a custom app that uses OAuth and JWT. I have also created a self signed certificate in salesforce. This self signed certificate is used ...
lambad's user avatar
  • 385
3 votes
0 answers
870 views

Import CA-Signed Certificate from One Org into Another via MetadataAPI

I am trying to automate the set up of some of my lower sandboxes. In my SandboxPostCopy class, I'm using the FinancialForce MetadataAPI wrapper MetadataService to query and upsert a certificate. (...
S.B.'s user avatar
  • 2,071
0 votes
0 answers
103 views

Apex callout to a SSL endpoint: unable to find valid certification path to requested target [duplicate]

since some days I get the following error message when I call an webservice from SF: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid ...
utm's user avatar
  • 552
0 votes
0 answers
122 views

Is self signed certificate generated in Sandbox environment available on Production too? [duplicate]

I have generated a self-signed certificate on Sandbox environment and based on that have a JWT token that would be sent to my API being called from Salesforce on some action. Now since I am using the ...
Ashna Arora's user avatar
1 vote
0 answers
76 views

Certificates change from Symantec to DigiCert

An SAP to Salesforce integration via a REST API uses a certificate provided by Salesforce/DigiCert. Now that certificate is about to expire and we need to provide them with a new cert. The problem ...
Frank Lucero's user avatar
3 votes
1 answer
2k views

Constructing a SSL certificate chain for uploading to Certificate and Key Management [closed]

Background I generated a CSR from Salesforce setup and have received back the PositiveSSL Certificate from sectigo.com. But when I try and upload the certificate into Salesforce, I get this error: ...
Robs's user avatar
  • 9,346
2 votes
1 answer
1k views

What are the security implications of using a self signed certificate for the JWT-Based Auth flow or to authorize a connected app in Salesforce?

I am new to Salesforce DX and am in the process of setting up a scratch org. The steps on Salesforce's website instruct the user to create a self-signed certificate because "The JWT-based ...
Cyberfreak's user avatar
8 votes
1 answer
1k views

How can I unit test a http callout that uses a certificate?

The .setClientCertificateName method of the HttpRequest class requires a string that is the name of a certificate in the organization. In a unit test class, is it possible to mock this method? When I ...
Renato Oliveira's user avatar
-3 votes
1 answer
270 views

Admin certification (ADM 201) [closed]

I have registered for ADM 201 admin certification for Spring 19, and my exam is on August 20. But Salesforce is coming out with new release on August 14 (Summer 19). So will questions the be about ...
007vaibhaw's user avatar
7 votes
2 answers
2k views

Metadata API Apex fails to create fields in Connected App

I am using the latest v46 version of the Financial Force Metadata API Apex Wrapper to create a Connected App but the values I put in the code are partly ignored. What is not working: ConnectedApp....
Robert Sösemann's user avatar
0 votes
1 answer
1k views

Query Org's Certificates in Apex using Metadata API

I am unable to retrieve the Certificates of an org using the Financial Force Metadata API Apex Wrapper although I see the object in the Metadata API Documentation and can query it using the workbench. ...
Robert Sösemann's user avatar
6 votes
1 answer
1k views

Automate setup of an external identity provider via APIs

I use the Financial Force Metadata API Apex Wrapper to simplify an app setup using a custom UI. Part of the setup is the creation of a Self-Signed Certificate and its usage in a Single Sign-On Setting....
Robert Sösemann's user avatar
-2 votes
2 answers
939 views

SSL setup using digital certificates

I started to read about ssl and its certificates and I can't imagine one thing. SSL provides two types of digital certificates: Self-Signed and created by trusted CA. The question is in your opinion ...
Adamo's user avatar
  • 381
1 vote
1 answer
1k views

ADM 201 will expire if I miss one maintanence exam?

Will my adm 201 expire if I miss a single release exam that is winter 2019, till December I wrote all exams and it was just behind a single release exam till April and I never got a reminder mail for ...
MATHEW Thomas's user avatar
2 votes
1 answer
873 views

Is there a need to renew the Self Signed Cert for Single Sign On if Salesforce is not the Identity Provider?

Based on this help article and this community post, can we allow the Self Signed Cert within Salesforce to expire if we do not use Salesforce for an Identity Provider? Is there any harm in doing this? ...
Trevor Bartlett's user avatar
2 votes
1 answer
3k views

Create self-signed x509 certificate

I am trying to get an access token by following the guide OAuth 2.0 JWT Bearer Token Flow. But I am stuck on the following The developer writes an app that generates a JWT. The JWT is signed with ...
Whatamidoing's user avatar
0 votes
2 answers
2k views

What will happen if I won`t complete a maintenance module?

Right now I have a Platform Developer I Certificate. But I am not working with the Salesforce right now and do not plan to work with it in the near future. So, from my perspective it seems redundant ...
qqqqqqq's user avatar
  • 103
1 vote
0 answers
147 views

SSL Certificate: Is an intermediate certificate always needed?

We recently purchased an SSL certificate for a custom domain. When we received it, the provider said we needed to also install an intermediate certificate. There is an article called 'Merge a ...
James's user avatar
  • 11
1 vote
2 answers
4k views

Can someone let me know how to install root and intermediate certificates in salesforce?

We are using a CA-signed certificate for portal but recently another company acquired the company that authorized our web address and now there are some updates made to the certificate. As per the ...
SunnyG's user avatar
  • 421