topic Re: RE: How to use a .crt, .pfx and .pem files to access a Web API in Product Forum

How to use a .crt, .pfx and .pem files to access a Web API

venkig_2022 — Mon, 28 Nov 2022 12:44:00 GMT

Hi Team,

Business team provided SSL certificates with .crt, .pfx and .pem files to access a their Web API. We imported crt and .pfx files as suggested in the below documents but we are unable to import or install .pem file. Hence we are unable to generate the Token successfully. We used OAuth 2.0 (Client credentials) for token generation.

We referred below document

https://bpdocs.blueprism.com/hub-interact/4-3/en-us/installation/install-interact-typical-runtime-resources.htm#ConfigurConfigure Digital Workers for Interact

Thanks & Regards,
Venkateswara Rao G

------------------------------
Venkateswara Rao Gubbala
------------------------------

RE: How to use a .crt, .pfx and .pem files to access a Web API

ewilson — Mon, 28 Nov 2022 14:12:00 GMT

@Venkateswara_R3,

Are you specifically trying to do something with Interact, or are you simply trying to get a process to be able to use a client certificate to authenticate with a 3rs party Web API?

Cheers,

------------------------------
Eric Wilson
Director, Integrations and Enablement
Blue Prism Digital Exchange
------------------------------

RE: How to use a .crt, .pfx and .pem files to access a Web API

venkig_2022 — Tue, 29 Nov 2022 06:45:00 GMT

Hi @ewilson,

Yes. We are simply trying to get a process to use a client certificate to authenticate with a 3rd party Web API.

Business provided the ssl certificates(.cer,.pfx and .pem files) for authentication and to generate the Token. If token generated then only we can access their API.

Kindly suggest the steps how can use it in Blue Prism.

Thanks & Regards,
Venkateswara Rao G

------------------------------
Venkateswara Rao Gubbala
------------------------------

RE: How to use a .crt, .pfx and .pem files to access a Web API

ewilson — Wed, 30 Nov 2022 12:37:00 GMT

@Venkateswara_R3,

Are you making use of the Utility - HTTP VBO? If so, newer versions of that VBO, available on the DX, include support for using a client certificate for authentication. You'll want to check out the Load Certificate action. After loading the certificate, you'll receive and Certificate ID which you can then pass into the other actions like HTTP Request.

Cheers,

------------------------------
Eric Wilson
Director, Integrations and Enablement
Blue Prism Digital Exchange
------------------------------

RE: How to use a .crt, .pfx and .pem files to access a Web API

venkig_2022 — Mon, 12 Dec 2022 05:51:00 GMT

Hi @ewilson,

As you suggested above, we have used Load Certificate action and we are getting Certificate ID and we are passing this Certificate ID into HTTP Request Action as shown below. Now we are getting error as "errorcode":"oauth.v2.InvalidAccessToken" because we are not supplying any token for request.

Note: We are using AOuth2.0 authentication. Kindly help us where to pass Token url, Client ID and Client secret key.

Thanks & Regards,

Venkateswara Rao G

------------------------------
Venkateswara Rao Gubbala
------------------------------

RE: How to use a .crt, .pfx and .pem files to access a Web API

ewilson — Mon, 12 Dec 2022 12:14:00 GMT

@Venkateswara_R3,

We started out talking about certificates and now we're talking about access tokens. These are different parts of an OAuth authentication flow. Without knowing specifics of the flow that was implemented by your business team this is just shooting in the dark. Ideally, they should be able to provide you a guide detailing the steps of how to authenticate with their service.

A good site to review for information about the different authentication flows in OAuth2 can be found here.

Cheers,

------------------------------
Eric Wilson
Director, Integrations and Enablement
Blue Prism Digital Exchange
------------------------------

Re: RE: How to use a .crt, .pfx and .pem files to access a Web API

weiliang — Thu, 15 Aug 2024 03:25:22 GMT

Hi,

Is it possible to bypass load certificate and enter the cert thumbprint manually? We tried doing so and not able to connect throwing error "the given key is not found in dictionary"

it's working if we first load certificate then only run http request