OTDS token request with HTTPS url

Hi Team,

End point of OTDS to get a token everytime a user hits a CS URL as here below is working fine with HTTP url.

http://localhost/otdsws/rest/authentication/credentials 

{ username: , password: }

 However once have enabled SSL to OTDS url and started using HTTPS for the same URL , the URL does'nt work and returning error . We have imported the cacerts to the java as well. 

i.e.., We are getting the below error when we use the URL httpS://localhost/otdsws/rest/authentication/credentials

   <error>javax.net.ssl.SSLException: Received fatal alert: protocol_version

      at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)

Please advise if we are missing any thing in this case ? Please note that HTTPS is working fine for the OTDS login URL and OTDS integration testing with HTTPS is working fine when tested from OTCS admin pages.

 Regards,

Vishnu

Tagged:

Comments

  • appuq
    appuq Member
    edited January 20 #2

    the only thing I can think of is that HTTPS is never really going to work with localhost. Also, OTDS has an interface it has provided for doing the swagger commands so if you go to your OTDS and provide you are using the https url of it something like

    https://myotdsserver:port/otdsws/rest it will redirect you to the swagger page

    now what you posted above is there available as a try-it-out. If you have not used this interface before it is like Postman and OT has a CURL program on this to do the requests.While doing turn developer tools

    in mine it executed

    curl -X 'POST' \  'https://server:8443/otdsws/rest/authentication/credentials' \  -H 'accept: application/json' \  -H 'Content-Type: application/json' \  -d '{  "userName": "Admin",  "password": "020!",   "ticketType": "OTDSTICKET"}'
    

    The browser in this case is a Client to the HTTPS server so the certificate chain is trusted by it,same with Postman. For any other language code like Java, C#,or Python you have to google and try to find an example that hits an https server and where to hold your certificates. In Java the traditional place is under/lib/cacerts I think

    JAVA_HOME/jre/lib/security/cacerts

    that is where you typically add your certificates using the default password changeit

    .

    I use the swagger to do all my OTDS experiments I even suggested OT once to provide us a swagger for their rest api as well,I also understand that while OTDS is a modern application it in and out is JSON whereas CS is an old application so it cannot fully do everything json.