Questions tagged [ssl]

SSL (Secure Sockets Layer) is a standard security technology for establishing an encrypted link between a server and a client

17
votes
1answer
5k views

Two Way Authentication Into Salesforce?

Salesforce can use a SSL certificate to authenticate itself with a third party server, but can a third party server authenticate with a Salesforce in the same manner? Our use case is that we have ...
15
votes
4answers
2k views

Twilio Integration and SSLv3 POODLE Vulnerability

I have an existing integration with Twilio that works great - Twilio posts a message to a custom SFDC REST endpoint, and we can generate a new SMS message by calling out to the standard Twilio REST ...
12
votes
2answers
1k views

Possible to use letsencrypt to generate certificates from a Salesforce CA Request?

Update 2016-03-04 letsencrypt still cannot sign CSRs without a Subject Alt Name (SAN). But it may be on their road map: Update --csr to check common name #1076 Client should be able to accept ...
11
votes
4answers
5k views

Solutions for using https on custom domains on a force.com site

We have a force.com site which has a simple lead form. We want to use a custom domain name like https://www.companyname.com/leadform as our url which we can use for marketing. I know we can register a ...
9
votes
3answers
2k views

Sites/Portals and SSL [duplicate]

Most of my clients who ask for a public portal or site on salesforce want two things: SSL personally branded site They like being able to manage everything through salesforce but they dont want ...
8
votes
3answers
1k views

What can be done with SSL + Communities + Force.com Site + Branded Domain

I'm getting mixed messages online regarding SSL support for a Force.com site that is branded with a custom URL domain: These two articles, Registering a Custom Force.com Domina and Registering a ...
8
votes
1answer
512 views

What would be the proactive steps that we need to take when salesforce disables SSL and enables TLS?

I heard that salesforce would stop the support for SSL 3.0 and will enforce TLS 1.0 and higher. https://help.salesforce.com/apex/HTViewSolution?urlname=Salesforce-disabling-SSL-3-0-encryption From ...
6
votes
1answer
219 views

SSL icons on force.com sites

Marketing folks would like to add the traditional "secure" graphic from verisign/etc. we authenticate through the customer portal and customers make e-commerce transactions on our site. Normally you ...
6
votes
1answer
12k views

Is there a way to force SOAP to use TLS instead of SSL?

When we do callout via SOAP, it uses either TLS or SSL. Can we restrict salesforce to use TLS instead of SSL.
5
votes
3answers
5k views

Two Way Authentication and SSL Certitificates

I'm building an integration to a third party webservice, and wanted to implement Two Way SSL Certificates based on this article We started out using Digicert certificates, but after many hours of ...
5
votes
1answer
838 views

Outbound Messaging Error -The domain name wasn't in the supported set of domain names

We're using Workflow Rules with Outbound Messages and Salesforce seems to have a problem with our SSL certificate. The Outbound Messaging Delivery Status page show a message with a Delivery Failure ...
5
votes
1answer
448 views

Salesforce disabling SSL 3.0 support

In light of this article: https://help.salesforce.com/apex/HTViewSolution?urlname=Salesforce-disabling-SSL-3-0-encryption&language=en_US Salesforce is disabling SSL 3.0. As a developer ...
5
votes
1answer
378 views

Force.com Site: SSL exception javax.net.ssl.SSLPeerUnverifiedException

Situation I enabled SSL for one of our Force.com Sites. The website is available and all SSL certs are working fine. I noticed that SSL doesn't work in case you are using getContent(). As you can ...
5
votes
1answer
89 views

Force.com Sites SSL Forwarding | HTTPS Only

Situation After creating, signing and deploying a new certificate for a custom domain we want to forward non-SSL connections to SSL and force our customers to use SSL. Question What is the best way ...
4
votes
1answer
804 views

heartbleed and its impact on salesforce

As an IT professional, I am very concerned at the news that Heartbleed can exploit weaknesses in the OpenSSL architecture. Is there any risk to users logging onto Salesforce via browser or app?
4
votes
1answer
242 views

Salesforce Communities: Safari can't open the page because safari can't establish a secure connecti

Background I have a public Salesforce community page hosted on a custom domain with a RapidSSL (Part of Digicert) SSL certificate. I've checked the RapidSSL SSL certificate with SSL Checker, and ...
4
votes
0answers
329 views

Dataloader to MySQL with SSL

Have scripted a salesforce dataloader import job using cliq with a MySQL source. see http://code.google.com/p/dataloadercliq/wiki/CLIqWithMySQL Everything works correctly.. Yet I am required to use ...
3
votes
1answer
223 views

How will Salesforce's move to SHA-256 for certs impact Mobile SDK users?

Is Mobile SDK 3.0 compatible with the new SSL certificates coming out later this year? If not, what changes should be applied by iOS users of the Mobile SDK? EDIT: Thanks to Gaurav below for this ...
3
votes
2answers
3k views

How to use Self-Signed CA for 2-way SSL?

I would like to use Self-Signed CA of Salesforce to build a 2-way SSL connection with my Web Server. The Web Server is built on Apache 2.2 and the 1-way SSl test is fine. In the 2-way SSL test, the CA-...
3
votes
1answer
789 views

Can we configure SSL certificate for Customer Communities

We have a customer community in Salesforce, where user can login with their username/password. We would like to map our custom domain and secure SSL certificate on the site. I found few article which ...
3
votes
0answers
379 views

Disable hostname verification in Apex

I have an app in Salesforce developed in APEX. This app will use REST API exposed by another app running in EC2. The REST API running in EC2 is having signed certificate, but the host name does not ...
3
votes
0answers
238 views

requests to https://test.salesforce.com/ are failing on ios 9

With iOS 9's improved security we are not able to connect to https://test.salesforce.com We get NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9824) which based on ...
2
votes
3answers
9k views

Salesforce Certificate Exception: No subject alternative DNS name matching found

We are trying to make a callout to "https://support.dreamwares.com/payment/v1/accounts/somevalue" from Salesforce. But, we are facing an exception: System.CalloutException: java.security.cert....
2
votes
1answer
749 views

Certificate Error - Website calling Apex web service

I have an Apex class exposed as a web service. When our Cold Fusion based website calls this service, they get the following error: Error: I/O Exception: Name in certificate 'na14.salesForce.com' ...
2
votes
1answer
132 views

Community Custom Domain with SSL Error: NET::ERR_CERT_COMMON_NAME_INVALID

BACKGROUND We have a Salesforce Community with a custom domain and SSL certificate installed. But when I do an SSL check on the site, I get this warning: The certificate is not trusted in all web ...
2
votes
1answer
399 views

Outbound Messages 2 way SSL with Self-Signed Certificate

I'm trying to configure 2 way SSL between SFDC and a 3rd party server (layer7), using outbound messages. On the SFDC side I've selected a self-signed certificate (following this documentation). The ...
2
votes
1answer
364 views

Force.com Site SSL issue - https://domain.com not working while https://www.domain.com works

I have created a Force.com site and mapped a custom domain to it. SSL is enabled. The issue is, when I visit the domain with link like this https://domain.com, it fails to load anything. Browser ...
2
votes
1answer
942 views

Ignore Untrusted Server Certificate with Salesforce1

We're setting up forward proxies to access Salesforce (eg, https://localsfdc). We're in dev still so accessing https://localsfdc results to a cert error that testers can easily ignore from their ...
2
votes
1answer
3k views

Way to get around SSL certificate errors when calling an external web service?

I'm using WebServiceCallout.invoke in an Apex class to call an external SOAP web service (namely the SOAP API for Central Desktop). Unfortunately, the external service has an invalid SSL certificate ...
2
votes
1answer
927 views

Mutual Authentication Certificates

Salesforce provides Mutual Authentication Certificate for inbound calls. These certificated are provided by external systems from where request will come into the salesforce and we upload it in ...
2
votes
1answer
35 views

view_email_url on a secured page

Is it possible to make the view_email_url link in Marketing Cloud open up on a secured page (using https protocol)? We have purchased SSL certificates for CloudPages and images but can you apply SSL ...
2
votes
1answer
113 views

Can I use one SSL Certificate across all Sandboxes?

I need to call an external API from Salesforce. I have 3 different sandboxes (Dev, QA, Training) that point to the same external QA API endpoint. Is it possible to create a single CA signed ...
2
votes
1answer
174 views

Connection reset by peer - SSL_connect (Marketing cloud FuelSDK)

Since, yesterday I am getting SSL error when trying to access Marketing cloud APIs using FuelSDK-Ruby. It keep on throwing the two errors SSL_connect SYSCALL returned=5 errno=0 state=SSLv2/v3 read ...
2
votes
0answers
618 views

Client certificate authentication on web service callout in Salesforce

I am trying to invoke 3rd party web-services from Salesforce using WSDL2APEX. The client has also shared a .p12 certificate which I need to use for client authentication while making web-service call ...
2
votes
0answers
162 views

Two Way SSL Configuration With Tomcat 6

I am trying to configure SSL with Tomcat I have following all the steps of the configuration on tomcat server and Force. com side. I have follow the below link- https://developer.salesforce.com/page/...
2
votes
0answers
5k views

How Could Error: SSL Connection Request has Failed be generated using TLS?

We are getting an error in the SChannel Event log: “An TLS 1.2 connection request was received from a remote client application, but none of the cipher suites supported by the client application are ...
2
votes
0answers
322 views

Certificate Error with Rest API : PKIX path building failed

I am getting this error "PKIX path building failed " when i make Rest call to web-service. Earlier it was working fine, but recently some certificate expired from web-service side and this error ...
2
votes
0answers
137 views

Should we give the guest user profile the “view encrypted data” permission?

We've developed native VF/Apex code that allows us to send a link to a customer and have them securely view a PDF of their contract (contract is a VF page generated using data from fields in their ...
2
votes
0answers
127 views

2 way SSL authentification on expose FDC webservice

My client calls a webservice on Salesforce (server), first i send him my certificate (server) and then i would like him to send me back a client certificate ( two way ssl) how do I implement that? ...
1
vote
1answer
98 views

Two-Way SSL vs Crypto Class

I would study and understand the differences about these two technologies in Apex. I know that in Two-Way SSL both the client and the server uses a certificate to "check" the other while whith Crypto ...
1
vote
1answer
3k views

Mutual Authentication / two way SSL & OAuth

Could you kindly help with following API authentication related questions: Would Mutual Authentication / two way SSL described in this link works in combination with OAuth authentication? Does ...
1
vote
1answer
114 views

How are certificates passed when using apex setClientCertificateName

I am working on integrating Salesforce with a bespoke system using APEX Http callouts and one of the security requirements is to allow two way SSL. Apex supports this by allowing you to attach a ...
1
vote
1answer
309 views

cURL Error 51 when Posting to Force.com

I have a form on my WordPress website that collects additional information from Leads. I want this information added to an existing Lead record, so I made a WordPress plugin that initializes a cURL ...
1
vote
1answer
3k views

Apex Callout failed due to SunCertPathBuilderException

I am trying to make a apex callout from salesforce to external system which is hosted inside in corporate firewall. Firewall sends the request to load-balancer which sends the request to appropriate ...
1
vote
1answer
10k views

java.security.cert.CertificateException: No subject alternative names present

We are calling external system webservice from Salesforce. the webservice exposed are internet We have created stub from the WSDL. It is a SOAP based call. But while calling the service, We are ...
1
vote
1answer
4k views

SSL Exception when calling out: “System.CalloutException: IO Exception: java.security.cert.CertificateException: No subject alternative names present”

When I call out to an external webservice, I'm getting the following exception "System.CalloutException: IO Exception: java.security.cert.CertificateException: No subject alternative names present". ...
1
vote
3answers
2k views

Use HTTPS for Marketing cloud microsite

We have built microsite page.mycompany.com, when we try to access this site using HTTPS we get error for certificate net::ERR_CERT_COMMON_NAME_INVALID The certificate is issued for *.s6.exacttaget.com
1
vote
1answer
1k views

Could not find client cert with dev name - web service

I use an application which call an extern web service from Salesforce and I get an error during the call. I get this message : Could not find client cert with dev name: '***' specified in ...
1
vote
1answer
213 views

Name Mismatch Certificate error when window.open()'ing to visual.force.com page from visualforce page

I have a visualforce page with an iframe'd app. When you click a link in the iframe, it communicates with the parent window via postMessage and instructs the JS running on the parent window (...
1
vote
1answer
202 views

FTP SSL documentation for Batch File Export (Bulk Async) Call is wrong. Can't get it to function

Output for a Batch File Export (Bulk Async) Call is Below is what we are finding in trying to make use of this: The documentation for enabling FTP SSL does not work. Documentation Link: http://...