How to ignore/bypass SSL Certificate in Activity Custom Scripts (API call ) , SAP IRPA 2.0

[staseeb]

Hello,

I am trying to POST a API request in my Automation under the activity Custom Script. But i am getting the error Hostname/IP does not match certificate's altnames: IP: **.**.***.*** is not in the cert's list:

i guess its related to SSL certificate, as same request posted perfectly on Postman.

I have tried to bypass/ignore it by sending an additional header in my request

insecure: true, but still facing same issues.

Any clues ?

Thanks

[TJe · Accepted solution]

can you please try to add this to the options:

https: { rejectUnauthorized: false }

or

rejectUnauthorized: false

[staseeb · Accepted solution]

Thanks thomas.jentsch ,

After adding the rejectUnauthorized: false , getting following error

[TJe · Accepted solution]

please try the other option also

[staseeb · Accepted solution]

Yes i tried with

https: { rejectUnauthorized: false }

Still same SSL error , let me tell you that, the URL contain the local IP, which is accessible from the Local Machine where Desktop Agent is running.

Same Request working fine on Postman, AFTER DISABLING SSL CERTIFICATION VERIFICATION.

Is there any header to Bypass the SSL, like we can do it in C# .

Thanks Alot

[TJe · Accepted solution]

found another option entry that may help:

requestCert: false

[staseeb · Accepted solution]

same Error, any other hints?

[TJe]

So the final solution was to use both settings in the options ?

https:{ rejectUnauthorized: false },
cryptoCredentialsDetails: { minVersion: 'TLSv1' }

[staseeb]

we have done 2 things

1. Added https: { rejectUnauthorized: false } to request.
2. IT has uploaded the SSL in Service Layer.

Thanks

Taseeb Saeed

[staseeb]

Dear thomas.jentsch,

Thanks for your answer, i have added https: { rejectUnauthorized: false }

and here is the error which i am facing now SSL routines:ssl_choose_client_version:unsupported protocol:c:\ws\deps\openssl\openssl\ssl\statem\statem_lib.c:1942:

Thanks

[staseeb]

thomas.jentsch

Any Help ?

[TJe]

I have just tested HTTPS with my SAP BusinessObject server.

1. before adding https: { rejectUnauthorized: false } to the options the request failed with Error: self signed certificate in certificate chain
2. adding https: { rejectUnauthorized: false } the request worked fine
3. another finding is, that https: { rejectUnauthorized: false } must be added to each request

logon request

const options = {
    resolveBodyOnly: true,
    responseType: 'json',
    url: pSession.accessURL + 'logon/long',
    method: 'POST',
    headers: {
        'Accept': 'application/json',
        'Content-Type': 'application/json'
    },
    body: JSON.stringify({
        'password': pSession.logonParameters.password,
        'clientType': '',
        'auth': pSession.logonParameters.authentication,
        'userName': pSession.logonParameters.username
    })
};
const response = await irpa_core.request.call(options);
pSession.logonToken = response.logonToken;

group request

const options = {
    resolveBodyOnly: true,
    responseType: 'json',
    url: pSession.accessURL + '/v1/usergroups/usergroup',
    method: 'POST',
    headers: {
        'Accept': 'application/json',
        'Content-Type': 'application/json',
        'X-SAP-LogonToken': pSession.logonToken
    },
    https: { rejectUnauthorized: false },
    body :  JSON.stringify({
        'name': name
    })
};
const response = await irpa_core.request.call(options);

[TJe]

found some information in google, searched for 'SSL routines:ssl_choose_client_version:unsupported protocol:c:\ws\deps\openssl\openssl\ssl\statem\statem_lib.c:1942' .

• One was use encrypt:false in options
• seems another and better one could be cryptoCredentialsDetails: { minVersion: 'TLSv1' }

not sure this helps, but you may find more information here: The https.request() make error 'ERR_SSL_UNSUPPORTED_PROTOCOL' with Node V12.2.0

[former_member268378]

Dear Taseeb,

You may refer to the answer posted in Irpa-2.0-call-webservice

Hopefully this will help.

Thanks & Regards,

Deepty

[staseeb]

Dear ,

I am using the same way, my script is as follows, but its still giving the same error

const options = {
 resolveBodyOnly: true,
 responseType: 'json',
 url: pSession.accessURL,
 method: 'POST',
 insecure: true,
 headers: {
 'Accept': 'application/json',
 'Content-Type': 'application/json'
 },
 body: JSON.stringify({
 'api_password': pSession.logonParameters.password,
 'api_username': pSession.logonParameters.username,
 'key': pSession.logonParameters.key
 })
};
const response = await irpa_core.request.call(options);
pSession.logonToken = response.access_token;