Questions tagged [certificates]
The certificates tag has no usage guidance.
94
questions
1
vote
0answers
18 views
Certificates change from Symantec to DigiCert
An SAP to Salesforce integration via a REST API uses a certificate provided by Salesforce/DigiCert.
Now that certificate is about to expire and we need to provide them with a new cert. The problem ...
2
votes
1answer
114 views
Constructing a SSL certificate chain for uploading to Certificate and Key Management
Background
I generated a CSR from Salesforce setup and have received back the PositiveSSL Certificate from sectigo.com.
But when I try and upload the certificate into Salesforce, I get this error:
...
0
votes
0answers
34 views
SOAP Callout Intermediate Certificate Issue
For our SOAP callouts, we need to be using a Certificate which is part of the following certificate chain:
Root: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Intermediate: CN=...
2
votes
1answer
55 views
What are the security implications of using a self signed certificate for the JWT-Based Auth flow or to authorize a connected app in Salesforce?
I am new to Salesforce DX and am in the process of setting up a scratch org. The steps on Salesforce's website instruct the user to create a self-signed certificate because "The JWT-based ...
0
votes
0answers
15 views
SOAP Web service callout to 'https' endpoint with one-way SSL certificate by the service provider
What is the approach to make a SOAP web service callout from Salesforce to 'https' endpoint url, when the service provider gives a one-way SSL certificate?
6
votes
1answer
104 views
How can I unit test a http callout that uses a certificate?
The .setClientCertificateName method of the HttpRequest class requires a string that is the name of a certificate in the organization.
In a unit test class, is it possible to mock this method? When I ...
-3
votes
1answer
215 views
Admin certification (ADM 201) [closed]
I have registered for ADM 201 admin certification for Spring 19, and my exam is on August 20. But Salesforce is coming out with new release on August 14 (Summer 19). So will questions the be about ...
4
votes
1answer
325 views
Metadata API Apex fails to create fields in Connected App
I am using the latest v46 version of the Financial Force Metadata API Apex Wrapper to create a Connected App but the values I put in the code are partly ignored.
What is not working:
ConnectedApp....
0
votes
1answer
63 views
Query Org's Certificates in Apex using Metadata API
I am unable to retrieve the Certificates of an org using the Financial Force Metadata API Apex Wrapper although I see the object in the Metadata API Documentation and can query it using the workbench.
...
4
votes
1answer
285 views
Automate setup of an external identity provider via APIs
I use the Financial Force Metadata API Apex Wrapper to simplify an app setup using a custom UI. Part of the setup is the creation of a Self-Signed Certificate and its usage in a Single Sign-On Setting....
-2
votes
2answers
98 views
SSL setup using digital certificates
I started to read about ssl and its certificates and I can't imagine one thing. SSL provides two types of digital certificates: Self-Signed and created by trusted CA. The question is in your opinion ...
0
votes
0answers
21 views
CA Certificate renewal
I want to know if when we have to renew a CA Certificate I can download the CSR and send it to sign and reuploaded the new CA Certificate or should I create a new from the beginning.
Thank you
1
vote
1answer
226 views
ADM 201 will expire if I miss one maintanence exam?
Will my adm 201 expire if I miss a single release exam that is winter 2019, till December I wrote all exams and it was just behind a single release exam till April and I never got a reminder mail for ...
2
votes
1answer
32 views
Is there a need to renew the Self Signed Cert for Single Sign On if Salesforce is not the Identity Provider?
Based on this help article and this community post, can we allow the Self Signed Cert within Salesforce to expire if we do not use Salesforce for an Identity Provider? Is there any harm in doing this? ...
0
votes
1answer
225 views
Create self-signed x509 certificate
I am trying to get an access token by following the guide OAuth 2.0 JWT Bearer Token Flow. But I am stuck on the following
The developer writes an app that generates a JWT. The JWT is signed with ...
0
votes
2answers
194 views
What will happen if I won`t complete a maintenance module?
Right now I have a Platform Developer I Certificate. But I am not working with the Salesforce right now and do not plan to work with it in the near future. So, from my perspective it seems redundant ...
1
vote
0answers
27 views
SSL Certificate: Is an intermediate certificate always needed?
We recently purchased an SSL certificate for a custom domain. When we received it, the provider said we needed to also install an intermediate certificate.
There is an article called 'Merge a ...
1
vote
2answers
502 views
Can someone let me know how to install root and intermediate certificates in salesforce?
We are using a CA-signed certificate for portal but recently another company acquired the company that authorized our web address and now there are some updates made to the certificate. As per the ...
0
votes
0answers
157 views
Certification and Key Management Expiration
I have been researching about certification renewal and expiration and am confused if I need to renew or not. I read here that I only need a certificate if I have "service providers" in my org.
I ...
1
vote
1answer
69 views
transfer certificate Self-Signed between 2 sandboxes
I'm looking for a way to migrate certificate Self-Signed between two unbound sandboxes. I saw that certificate are not metadata, so it's a bit harder than expected for me.
0
votes
1answer
49 views
Newsletter open and click tracking use http. Can i configure it that it uses https with our certificate? Can this cause block bounces?
We recently saw that a particular domain (lets say it is recipient.com operated by recipient ltd) of newsletter recipients block our newsletter quite often. Therefore we asked the operating company of ...
3
votes
0answers
256 views
Trying to call API through Apex with custom security certificate but getting CalloutException
I'm trying to use Apex to call some API endpoints to do some validation for my company. There are some specific properties of these APIs that make it a bit tricky:
The APIs are hosted on self-...
0
votes
1answer
25 views
Can an AppExchange app install Certificates in a Salesforce instance?
I want to create an AppExchange app, which needs to install a certificate in Salesforce, so that certificate can be used to make calls with an external server.
Is this possible? If so, could you ...
0
votes
1answer
424 views
Authorization using certificates
I want to know the process of authorization or authentication using self-signed certificates.
I am trying to integrate two salesforce dev orgs using REST callouts. I have created a self-signed ...
1
vote
0answers
304 views
Generate Public key from Self signed Certificate [closed]
I have a .crt Self signed certificate generated from salesforce. How can i generate public key from it , i need to provide the public key to be make a call to services
1
vote
1answer
102 views
Certificate and Key Management
Currently I have a community that users have been successfully using for about a year. The web address starts with https://... There is a self signed certificate. I don't remember creating this so ...
1
vote
0answers
150 views
Salesforce stopped accepting certificate for outbound call
Our Salesforce instance is making an outbound call to a web service and receiving the following error:
IO Exception: sun.security.validator.ValidatorException: PKIX path validation failed: java....
0
votes
1answer
32 views
What cause the “Recipient field contains invalid device token”?
I've been working on creating a simple connected App, that can receive Apple Push Notification.
For that I:
Created an Xcode project using force iOS.
Used Keychain Access to create 2 CSR file, and ...
2
votes
1answer
840 views
Insufficient Privileges Certificate
Any idea on why it's giving an error Insufficient Privileges when I'm trying to import a key store (exported from another sandbox) ?
Importing/Exporting it as an System Admin, with or without ...
2
votes
1answer
643 views
All SSO's got affected by changing Self Signed Certificate. What do I need to share with Vendors?
Recently, I got an email from Salesforce, notifying that one of my self-signed certificates is going to expire soon. As a solution to this, I created a new self-signed certificate and replaced the ...
1
vote
1answer
245 views
clientCertPasswd_x
We are building integration between Salesfoce and other system.
The other system has SOAP API to expose data and they implemented authication using certificates.
We genarateed class from WSDL. In ...
5
votes
0answers
46 views
Certificate api name
For example, I do the following :
Export from Keystore the certs located in my Prod
Import from Keystore the certs to my Sandbox
Anyone knows why during this transaction the api names (and labels) ...
1
vote
1answer
545 views
CA-Signed Certificates
We are looking to integrate Salesforce with a web service using 2 way SSL. One of the requirements is that we have the certificates CA-signed.
Can we use the same certificates across multiple ...
0
votes
0answers
41 views
Update a Record's Fields in Production Org from External Website w/o Salesforce Login
I have a form on my WordPress website that collects additional information from customers. I want this information added to an existing record of MyCustomObject. To do this, I will need to make a ...
1
vote
0answers
215 views
CAN we use JWT with CA signed cert
We have an inbound integration to salesforce where client uses JWT login mechanism. A self signed cert has been provided from salesforce which they use to sign the request. Is there any way we can use ...
0
votes
1answer
41 views
Generating a test certification
Is there a way to generate a certificate that denotes a class has passed its tests so that the class doesn't need to be tested again unless it is changed?
1
vote
1answer
529 views
Is Digital Signature mandatory for the oauth JWT token flow?
Is Digital Signature mandatory for the oauth JWT token flow ? If not, how do I implement the flow without the certificate.A web server is supposed to send a request for the access token and I need to ...
0
votes
1answer
217 views
Same CA signed certificate for both salesforce act as server (Mutual TLS) and salesforce act as client
Can i use same CA signed certificate for both salesforce act as server (Mutual TLS) and salesforce act as client(2 way ssl).
Actually in one of my project we have exposed some api to external system ...
1
vote
1answer
1k views
Self Singed Certificate for Mutual TLS
I need to expose an rest api to an external system, and wanted to allow authentication only through certificate. So as per the salesforce mutual tls feature can we use self signed certificate ...
1
vote
0answers
28 views
how to separate a self signed certificate to certficate and key in salesforce?
please help me how to separate the self signed certificate as key and certificate.because based on the separated key i converted it to pkcs8 format.
Thanks
7
votes
1answer
699 views
Number of Salesforce certified experts
Lately I have seen for example new Application Architect certifications with certification number code like 0000700. Does that mean, that there is 700 certified persons? This numbering does not make ...
1
vote
1answer
41 views
Is there any possible way to create a Certificate with more than 2 years?
For single-sign-on authenticate, a certificate is being made but it has only 1 year of expiry. That's why the user is getting an email regarding expiry. Is there any other way out for automatic ...
2
votes
0answers
206 views
Default Certificate Expiration, is action required for getContent calls to Visualforce Pages?
I maintain an iOS app that uses the Salesforce Mobile SDK. My app uses the SDK to make a POST request to an Apex class. That apex class calls getContent on a Visualforce page. I have checked the ...
5
votes
1answer
1k views
Question regarding default Salesforce client certificate being retired
I just received an email informing that the default Salesforce client certificate (proxy.salesforce.com) will retire on August 7, 2017 at 09:30 a.m. PDT (16:30 UTC).
They say customers using the ...
1
vote
0answers
34 views
Does Salesforce automatically creates a cert on successful communication with an external system?
We were trying point to point integration between Salesforce & SAP. As a standard method we tested the service exposed by SAP on SoapUI and then from Salesforce successfully. I see now that a self-...
2
votes
1answer
512 views
Update Signed Certificate Error
I’ve tried to update one of our existing certificates in Salesforce by performing the following steps:
Setup -> Certificate and Key Management
Click the “wildcard.codefuel.com” certificate.
Click ...
1
vote
2answers
323 views
Can not log into org with 'My Domain' due to HSTS
This Monday I have noticed that I can not login my developer org with custom domain.
The problem in brief: certificate for *.salesforce.com does not allow to add exception for subdomains.
So I ...
2
votes
1answer
2k views
self signed vs CA signed certificate
I am trying to update an expiring self signed certificate in salesforce.
I want to know what is the difference between self signed and CA signed certificates and when to use either of them.
I know ...
5
votes
1answer
1k views
What is the difference between 2048 and 4096 key size?
We are using a Self-signed certificate for our SSO with 2048 key size (which we are generating from Salesforce). I understand that this will only last one year. If we switch to 4096 key size, what ...
4
votes
0answers
213 views
Managing certificates programmatically in Salesforce Org (after sandbox creation/refresh)
I was trying to find some information on feasibility of creating and deleting self-signed certificates in Salesforce Org programmatically, which could be incorporated into post sandbox creation/...
