Insecure Outbound REST Message

[A Elbarbary]

Hi Community,

I'm looking for a way to disable the certificate verification when a SNOW instance communicates with an external system through outbound REST messages (the HTTP request is coming out from SNOW to the external world), typically in a curl request this would be done by adding the "--insecure" parameter to the command, is this possible here?

[jarodm · Accepted solution]

I'm not aware of a per-session or per-REST-Message parameter.

There is a system property (depending on your SN release) that will disable it for the whole instance:

• com.glide.communications.trustmanager_trust_all

I would only recommend using this property for testing/debugging in a sub-PROD instance.

If you're trying to get around a self-signed cert on a single site, you can add that key to the local cert store:

• Download site's public key
• System Definition > Certificates
• Attach .cer as DER/Trust Store Cert

[Deepali5]

Hi

I have a business rule that send updates to my third party application over https. I don't have any certificate.

I set this property to false in sys_properties.list.:-

"com.glide.communications.httpclient.verify_hostname"   >> false

but I still am getting org.apache.commons.httpclient.HttpException: javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated

Is there any way for servicenow to ignore SSL certificate

Please advise.

Thank you

[CarstenG]

I exported the CER-file via Chrome and attached it to the SNOW certificates, but I am still getting the same error " org.apache.commons.httpclient.HttpException: java.security.cert.CertificateException: No subject alternative DNS name matchin". What am I missing?