Hi,
When I'm trying to send the API request to the Qualys US Platform 2, All my requests are resulting in the following error
requests.exceptions.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)
Do I need to install any extra (Qualys) Certificate to get this issue resolved
Thanks,
Suraj
Hi Busby,
I'm using Python requests to send the POST requests. I tried using " verify=False", in which case I'm getting this error
C:\Python27\lib\site-packages\urllib3\connectionpool.py:852: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
InsecureRequestWarning)
How can I download Qualys Certificate? I'm not able to find any of that option in GUI
Thanks
Suraj
what browser are you using and I will try and give you the step-by-step
I use Google Chrome as my browser. I can access the Qualys API/Guard through the browser but this error is only seen when trying to access through API.
Thanks
Suraj
ok I use both but I can tell you the steps in Firefox, Chrome I did not see how.
In Firefox in the upper left next to the padlock there is a little information ICON.
If you click that it should give you two icons one for Secure Connection with an arrow to the right. Click the arrow then click More Information. Now a new page comes up.
Now click on view Certificate then details. Under details you can Export the certificate. On Windows you can add this to your certificate store to trust. But depending on what tool your using to access the API you may need to put the certificate in another location as well and you would need to consult the documentation.
Let me know if you need help on that.
David
Please see: Using SSL client certificate authentication with QualysGuard API v1 and v2 and note we do not support cert auth with the API.
Yep no certificate authentication but I read the issue as they get warning for insecure communication. For things like CURL you can put the cert in a specific place and then you don't get the warnings but it has nothing to do with authentication just verification that the certificate is trusted. This can be specific to the clients as they don't usually come with a trusted certificate store.
David
Hi Jeff,
If I can't send the certificate for authentication, how can I resolve this issue "requests.exceptions.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)"
And when I change the request to add the Qualys Certificate
request = self.session.post(url, cert="path/qualys.crt",data=data, auth=self.auth, headers=headers, proxies=self.proxies)
result in " requests.exceptions.SSLError: [SSL] PEM lib (_ssl.c:2600)" Error.
I'm sending basic authorization for logging and then SessionID for the subsequent requests. Sending the same data using POSTMAN is working but not with Python requests. What do you suggest for this issue?
Thanks
Suraj
"Sending the same data using POSTMAN is working but not with Python requests." this suggests the problem is with your code and not on the Qualys side.
First as Mr. Leggett has stated before the API does not support certificate based authentication; all you are doing is removing errors related to insecure communications warnings.
So typically to resolve the error in say a CURL command you pass the parameter --insecure. This does not fix the error merely acknowledge that that is what you expect.
I do not know if post man is doing anything with the certificate or not but it is not part of your authorization or authentication.
Depending on how your making the call. You have two options; you can explicit say insecure. So in CURL you could use --insecure and most commands would allow this.
Otherwise you would need to download the certificate from Qualys and put this in your local certificate store.
I would try it first with the insecure flag. If it works then try to load it into your system and see if it then works without the secure flag.
David