WebClient NET - SSL

[balta]

Good afternoon,

I am trying to use WebClient with SSL

I can do POST with HTTP. With HTTPS, I have the error of certificate.



Any have converted this code to 4GL? (This is the code to "ignore" SSL validation)

System.Net.ServicePointManager.ServerCertificateValidationCallback =
           new RemoteCertificateValidationCallback(
                delegate
                { return true; }
            );

OE 11.7.8 - Windows

Thanks
Baltazar

 

[Osborne]

I do not think this is possible in 4GL:

Progress Customer Community

community.progress.com

 

[balta]

Thanks Osborne. A limitation of OE.

Do you have any example of doing a POST with SSL communication without install the cert in OE?

 

[Osborne]

Unfortunately I have never done anything that requires SSL so unable to really help.

Can you use OpenEdge.Net.HTTP, and if so is the "sslVerifyHost(NO)" option a solution?:

https://community.progress.com/s/article/Error-9318-when-connecting-with-SSL-certificate-without-a-common

 

[balta]

Thanks Osborne.

I have tried that, same error...

 

[Cecil]

The certificate alias 2e5ac55d.0 is related to an expired Let Encrypt Root Certificate (DST Root CA X3) that expired on ‎1 ‎October ‎2021.

I have attached a ZIP file that contains the new Root & Intermediary certificate for Let's Encrypt (isrgrootx1.pem.crt & lets-encrypt-r3.pem.crt).

1. Unzip the LetEncrypt.zip file into your %WRKDIR% folder.
2. open a proenv session and cd %WRKDIR%
3. Enter certutil -import isrgrootx1.pem.crt
4. Enter certutil -import lets-encrypt-r3.pem.crt

Then retry your code. If you are still having issues make sure the Web Server has the correct Let's Encrypt certificate bundled installed.

You can use SSL Checker to validate the certificate chain of the Web Server.

Good Luck.

 

[balta]

Thanks Cecil. I don´t want to install the certificate.

OE should be capable to "read" https certificates without problems. (like "web" languages [PHP, etc]).

 

[Cecil]

i think php uses the curl lib and curl uses the Mozilla trusted CA pem file.

It’s just a case of keeping the trusted CA certificate store, up-to-date as certificates do expire.

i can’t remember if applying OE service packs updates the OE certificate store.