Call REST API https with certificate, key and CAcertificate The 2019 Stack Overflow Developer Survey Results Are In Announcing the arrival of Valued Associate #679: Cesar Manara Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern) The Ask Question Wizard is Live! Data science time! April 2019 and salary with experienceHow to send a header using a HTTP request through a curl call?How do I get a YouTube video thumbnail from the YouTube API?“Public key certificate and private key doesn't match” when using Godaddy issued certificateHow do I POST JSON data with Curl from a terminal/commandline to Test Spring REST?How to create a self-signed certificate with OpenSSLUnable to resolve “unable to get local issuer certificate” using git on Windows with self-signed certificateCurl command for https ( SSL )Getting (58) unable to use client certificate (no key found or wrong pass phrase?) from curlClient authentication using self signed ssl certificate for nginx400 Bad Request No required SSL certificate was sent. Sorry for the inconvenience

Semisimplicity of the category of coherent sheaves?

Create an outline of font

Is above average number of years spent on PhD considered a red flag in future academia or industry positions?

Can the DM override racial traits?

Windows 10: How to Lock (not sleep) laptop on lid close?

How to grep and cut numbers from a file and sum them

Can the prologue be the backstory of your main character?

He got a vote 80% that of Emmanuel Macron’s

What can I do if neighbor is blocking my solar panels intentionally?

Would it be possible to rearrange a dragon's flight muscle to somewhat circumvent the square-cube law?

Install many applications using one command

Who or what is the being for whom Being is a question for Heidegger?

A pet rabbit called Belle

The following signatures were invalid: EXPKEYSIG 1397BC53640DB551

Relations between two reciprocal partial derivatives?

Can withdrawing asylum be illegal?

how can a perfect fourth interval be considered either consonant or dissonant?

Finding the path in a graph from A to B then back to A with a minimum of shared edges

Scientific Reports - Significant Figures

"... to apply for a visa" or "... and applied for a visa"?

Change bounding box of math glyphs in LuaTeX

Are spiders unable to hurt humans, especially very small spiders?

Can smartphones with the same camera sensor have different image quality?

Difference between "generating set" and free product?



Call REST API https with certificate, key and CAcertificate



The 2019 Stack Overflow Developer Survey Results Are In
Announcing the arrival of Valued Associate #679: Cesar Manara
Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern)
The Ask Question Wizard is Live!
Data science time! April 2019 and salary with experienceHow to send a header using a HTTP request through a curl call?How do I get a YouTube video thumbnail from the YouTube API?“Public key certificate and private key doesn't match” when using Godaddy issued certificateHow do I POST JSON data with Curl from a terminal/commandline to Test Spring REST?How to create a self-signed certificate with OpenSSLUnable to resolve “unable to get local issuer certificate” using git on Windows with self-signed certificateCurl command for https ( SSL )Getting (58) unable to use client certificate (no key found or wrong pass phrase?) from curlClient authentication using self signed ssl certificate for nginx400 Bad Request No required SSL certificate was sent. Sorry for the inconvenience



.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;








0















I need to call a payment solution provider REST API endpoint with SSL authentication.



The provider gives me these files :



  • merchantCA.crt

  • rootCA.crt

  • client.crt

  • client.key

  • client.pfx

  • a passphrase

The API documentation says for the rootCA.crt that this is the certificate authority that signed the certificates provider servers use to authenticate when they connect to the merchant.



And merchantCA.crt is the certificate authority that signed the merchant certificate



So this is my CURL call :



curl --cacert rootCA.crt --cert client.crt:passphrase --key client.key -X GET -H 'Content-Type: application/json' "https://provider_website/api/desired_endpoint"



But I received this error



curl: (58) could not load PEM client certificate, OpenSSL error error:140AB18E:SSL routines:SSL_CTX_use_certificate:ca md too weak, (no key found, wrong pass phrase, or wrong file format?)



No idea what's happening.










share|improve this question




























    0















    I need to call a payment solution provider REST API endpoint with SSL authentication.



    The provider gives me these files :



    • merchantCA.crt

    • rootCA.crt

    • client.crt

    • client.key

    • client.pfx

    • a passphrase

    The API documentation says for the rootCA.crt that this is the certificate authority that signed the certificates provider servers use to authenticate when they connect to the merchant.



    And merchantCA.crt is the certificate authority that signed the merchant certificate



    So this is my CURL call :



    curl --cacert rootCA.crt --cert client.crt:passphrase --key client.key -X GET -H 'Content-Type: application/json' "https://provider_website/api/desired_endpoint"



    But I received this error



    curl: (58) could not load PEM client certificate, OpenSSL error error:140AB18E:SSL routines:SSL_CTX_use_certificate:ca md too weak, (no key found, wrong pass phrase, or wrong file format?)



    No idea what's happening.










    share|improve this question
























      0












      0








      0








      I need to call a payment solution provider REST API endpoint with SSL authentication.



      The provider gives me these files :



      • merchantCA.crt

      • rootCA.crt

      • client.crt

      • client.key

      • client.pfx

      • a passphrase

      The API documentation says for the rootCA.crt that this is the certificate authority that signed the certificates provider servers use to authenticate when they connect to the merchant.



      And merchantCA.crt is the certificate authority that signed the merchant certificate



      So this is my CURL call :



      curl --cacert rootCA.crt --cert client.crt:passphrase --key client.key -X GET -H 'Content-Type: application/json' "https://provider_website/api/desired_endpoint"



      But I received this error



      curl: (58) could not load PEM client certificate, OpenSSL error error:140AB18E:SSL routines:SSL_CTX_use_certificate:ca md too weak, (no key found, wrong pass phrase, or wrong file format?)



      No idea what's happening.










      share|improve this question














      I need to call a payment solution provider REST API endpoint with SSL authentication.



      The provider gives me these files :



      • merchantCA.crt

      • rootCA.crt

      • client.crt

      • client.key

      • client.pfx

      • a passphrase

      The API documentation says for the rootCA.crt that this is the certificate authority that signed the certificates provider servers use to authenticate when they connect to the merchant.



      And merchantCA.crt is the certificate authority that signed the merchant certificate



      So this is my CURL call :



      curl --cacert rootCA.crt --cert client.crt:passphrase --key client.key -X GET -H 'Content-Type: application/json' "https://provider_website/api/desired_endpoint"



      But I received this error



      curl: (58) could not load PEM client certificate, OpenSSL error error:140AB18E:SSL routines:SSL_CTX_use_certificate:ca md too weak, (no key found, wrong pass phrase, or wrong file format?)



      No idea what's happening.







      curl https openssl






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Mar 8 at 13:16









      ceadreakceadreak

      9602825




      9602825






















          0






          active

          oldest

          votes












          Your Answer






          StackExchange.ifUsing("editor", function ()
          StackExchange.using("externalEditor", function ()
          StackExchange.using("snippets", function ()
          StackExchange.snippets.init();
          );
          );
          , "code-snippets");

          StackExchange.ready(function()
          var channelOptions =
          tags: "".split(" "),
          id: "1"
          ;
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function()
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled)
          StackExchange.using("snippets", function()
          createEditor();
          );

          else
          createEditor();

          );

          function createEditor()
          StackExchange.prepareEditor(
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader:
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          ,
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          );



          );













          draft saved

          draft discarded


















          StackExchange.ready(
          function ()
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55064014%2fcall-rest-api-https-with-certificate-key-and-cacertificate%23new-answer', 'question_page');

          );

          Post as a guest















          Required, but never shown

























          0






          active

          oldest

          votes








          0






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes















          draft saved

          draft discarded
















































          Thanks for contributing an answer to Stack Overflow!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid


          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.

          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function ()
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55064014%2fcall-rest-api-https-with-certificate-key-and-cacertificate%23new-answer', 'question_page');

          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          AWS Lex not identifying response if by a variable The 2019 Stack Overflow Developer Survey Results Are In Announcing the arrival of Valued Associate #679: Cesar Manara Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern) The Ask Question Wizard is Live! Data science time! April 2019 and salary with experienceEnforcing custom enumeration in AWS LEX for slot valuesHow to give response based on user response in Amazon Lex?Intercepting AWS Lambda Response to a AWS Lex QueryLex chat bot error: Reached second execution of fulfillment lambda on the same utteranceamazon lex showing invalid responseLambda response send back to Lex slot?Response card in Amazon lexAmazon Lex - Lambda response return HTML to botHow can I solve 424 (Failed Dependency) (python) obtained from Amazon lex?

          Алба-Юлія

          Захаров Федір Захарович