SSL Cert Verification Disable

Hi all

I am attempting to access the Orion API using Postmaster to test the API and we get the following issue:

However if we turn off SSL verification it works fine:

The application that we want to connect to the API doesn't have an option to ignore SSL, so is there a way to disable it on the Orion server, or bind the API to a CA signed cert? Or do we just need to install the API self signed cert on the application server?

Any advise greatly received, thanks

Find more posts tagged with

ssl cert

sdk

Accepted answers

All comments

antonis.athanasiou

As far as I know, there isn't a way to change the self-signed certificate from the SWIS API service.

Trying to install the cert on the application server would be a good point to start.

phil.braithwaite

OK thanks for that will give that a try and see what happens

antonis.athanasiou

Let me know if that was successful.

I've found an old thread about changing the certificate however it is old, a lot of things have changed since 2013 and I've never tested it myself. Better to well-test it in a non-prod system first:

Change SolarWinds Information Services SSL Certificate

dan_jagnow

The following documentation describes your options for working with certificates for the Orion server:

https://documentation.solarwinds.com/en/Success_Center/orionplatform/Content/Core-Enabling-and-Requiring-Secure-Channels-with-SSL-sw1514.htm

https://support.solarwinds.com/SuccessCenter/s/article/Add-and-assign-certificate-for-web-console

https://support.solarwinds.com/SuccessCenter/s/article/There-is-a-problem-with-this-website-s-security-certificate

Since your application does not have the option to ignore SSL certificate errors, you'll either need to install a valid certificate on the Orion server or issue a self-signed certificate and trust that self-signed cert on all client machines that need to access Orion.

sturdyerde

+1 to Dan, with special emphasis for installing a valid Orion certificate.

antonis.athanasiou

dan jagnow is this for the website certificate or the SWIS REST API Endpoint? I was under the impression the self-signed certificate found on port 17778 cannot be changed as described here:

dan_jagnow

You're right, antonis.athanasiou. I should have included a link to tdanner's response on this thread:

Change SolarWinds Information Services SSL Certificate

Note that this is a manual process that involves editing configuration files, and which will be overwritten whenever you run the Orion Configuration Wizard (including during product upgrades). I do encourage voting for the feature request you mentioned, , as that would offer a cleaner solution once it is implemented.