0

I am trying to connect to a company's internal API (I am working on a project for them). This company has an API that has an SSL certificate from Sectigo.

From what I have gathered is a pretty well known CA, but for some weird reason, if I make a cURL request or use Postman, an error returns stating that it cannot solve the SSL encryption.

The company has told me that this is usual in their projects and that they always solve this by sharing the .cert file, so you can add it to your trusted CA's or something like that.

I have never done that with SSL, and in case this is needed, it is going to be kind of complex due to the specifics of the project. I should state that I do trust the company and the cert myself, is the way this cert appears to be installed that makes me doubtful. I would prefer to avoid this, although maybe I am missing something.

Now, before answering them, I want to know if this is something that should be avoided or if this is normal and I just have never happened to find myself in the situation. I also find it weird that a well known CA is not in the default OS's trusted CAs list.

Any advice?

Improve this question
6
  • 3
    Some SSL certs are not signed by an OS trusted root certificate, and others need intermediate certs. If it's a work computer, just install it. If it's your equipment, then you need to define your own trust criteria for what certs you can or will install.
    – Todd A. Jacobs
    Apr 25 at 15:05
  • @ToddA.Jacobs It would need to be installed in a server. I do not doubt of the authenticity of the cert, so it is not a matter of trust, is just that I never came across this procedure and I had doubts of the security and viability of it.
    – S. Dre
    Apr 25 at 15:14
  • 1
    Here's a link from GoDaddy explaining intermediate certificates. Administrative how-tos are more appropriate for Server Fault than here. godaddy.com/help/what-is-an-intermediate-certificate-868
    – Todd A. Jacobs
    Apr 25 at 15:27
  • Ok, thanks for letting me know!
    – S. Dre
    Apr 25 at 15:32
  • 1
    @S.Dre It is a normal procedure for certificates that you don't have a trust chain to.
    – user253751
    Apr 25 at 15:42

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.