P12 PFX NodeJS Request
10
I am trying to make a request with a p12 file or a pfx, but I can't get it to work. If I use PEM and KEY the code works fine. But Azure Keyvault does not support PEM and KEY. Is there an alternative that works with KEY/PEM certificates?
This is how I generated a p12/pfx file if that is the problem.
openssl pkcs12 -export -out certificate.pfx -inkey 1231181189.key -in
1231181189.pem -certfile CA.pem
Here is an example code, if I comment out cert and key the system does not work,
Error: read ECONNRESET
But if I comment out pfx and passphrase and use pem and key the connection work.
var request = require('request');
var fs = require('fs');
var path = require('path');
var certFile = __dirname + '/certs/1231181189.pem';
var keyFile = __dirname + '/certs/1231181189.key';
var options = {
method: 'POST',
url: 'https://mss.cpc.getswish.net/swish-cpcapi/api/v1/paymentrequests',
headers: { 'Content-Type': 'application/json' },
agentOptions: {
cert: fs.readFileSync(certFile),
key: fs.readFileSync(keyFile),
pfx: fs.readFileSync(__dirname + '/certs/certificate.pfx'),
passphrase: 'swish'
},
body: {
payeePaymentReference: '0123456789',
callbackUrl: 'https://example.com/api/swishcb/paymentrequests',
payerAlias: '4671234768',
payeeAlias: '1231181189',
amount: '100',
currency: 'SEK',
message: 'Kingston USB Flash Drive 8 GB'
},
json: true
};
request(options, function (error, response, body) {
if (error) throw new Error(error);
console.log(response.headers);
console.log(body);
});
node.js ssl certificate pfx
asked Nov 19 '18 at 10:08
Krister JohanssonKrister Johansson
107421
|
show 3 more comments
10
I am trying to make a request with a p12 file or a pfx, but I can't get it to work. If I use PEM and KEY the code works fine. But Azure Keyvault does not support PEM and KEY. Is there an alternative that works with KEY/PEM certificates?
This is how I generated a p12/pfx file if that is the problem.
openssl pkcs12 -export -out certificate.pfx -inkey 1231181189.key -in
1231181189.pem -certfile CA.pem
Here is an example code, if I comment out cert and key the system does not work,
Error: read ECONNRESET
But if I comment out pfx and passphrase and use pem and key the connection work.
var request = require('request');
var fs = require('fs');
var path = require('path');
var certFile = __dirname + '/certs/1231181189.pem';
var keyFile = __dirname + '/certs/1231181189.key';
var options = {
method: 'POST',
url: 'https://mss.cpc.getswish.net/swish-cpcapi/api/v1/paymentrequests',
headers: { 'Content-Type': 'application/json' },
agentOptions: {
cert: fs.readFileSync(certFile),
key: fs.readFileSync(keyFile),
pfx: fs.readFileSync(__dirname + '/certs/certificate.pfx'),
passphrase: 'swish'
},
body: {
payeePaymentReference: '0123456789',
callbackUrl: 'https://example.com/api/swishcb/paymentrequests',
payerAlias: '4671234768',
payeeAlias: '1231181189',
amount: '100',
currency: 'SEK',
message: 'Kingston USB Flash Drive 8 GB'
},
json: true
};
request(options, function (error, response, body) {
if (error) throw new Error(error);
console.log(response.headers);
console.log(body);
});
node.js ssl certificate pfx
asked Nov 19 '18 at 10:08
Krister JohanssonKrister Johansson
107421
What error message do you get?
– antzshrek
Nov 27 '18 at 22:32
@antzshrek No code error, just connection fail ”ECONNREST” Its in my question 👍🏻
– Krister Johansson
Nov 27 '18 at 23:15
Your code seems ok. A pem file can contain several certificates, including the certificacion chain. Since you are not usingCA.pemin theagentOptions, could you check that the entire certification chain is really included inCA.pemor is only present in1231181189.pem?
– pedrofb
Dec 10 '18 at 12:48
@pedrofb my "Swish TLS Root CA.pem" does only have one CERTIFICATE and my "1231181189.pem" have multiple. I'm I mixing them up? Tried to add ca:CA.pem to my code but got the same error.
– Krister Johansson
Dec 10 '18 at 13:22
The PFX file should contain the entire certificate chain, from the final certificate to root CA. It could be the error cause (i do not know if-in 1231181189.pemincludes only the final certificate, but I suspect that it does). Try to copy the certificate chain of1231181189.pemintoCA.pem. PEM is a text file containing certificates with a header and a footer. Alternatively, I think you can also try exporting the P12 using openssl command-certfile 1231181189.pem
– pedrofb
Dec 10 '18 at 13:40
|
show 3 more comments
10
10
10
2
I am trying to make a request with a p12 file or a pfx, but I can't get it to work. If I use PEM and KEY the code works fine. But Azure Keyvault does not support PEM and KEY. Is there an alternative that works with KEY/PEM certificates?
This is how I generated a p12/pfx file if that is the problem.
openssl pkcs12 -export -out certificate.pfx -inkey 1231181189.key -in
1231181189.pem -certfile CA.pem
Here is an example code, if I comment out cert and key the system does not work,
Error: read ECONNRESET
But if I comment out pfx and passphrase and use pem and key the connection work.
var request = require('request');
var fs = require('fs');
var path = require('path');
var certFile = __dirname + '/certs/1231181189.pem';
var keyFile = __dirname + '/certs/1231181189.key';
var options = {
method: 'POST',
url: 'https://mss.cpc.getswish.net/swish-cpcapi/api/v1/paymentrequests',
headers: { 'Content-Type': 'application/json' },
agentOptions: {
cert: fs.readFileSync(certFile),
key: fs.readFileSync(keyFile),
pfx: fs.readFileSync(__dirname + '/certs/certificate.pfx'),
passphrase: 'swish'
},
body: {
payeePaymentReference: '0123456789',
callbackUrl: 'https://example.com/api/swishcb/paymentrequests',
payerAlias: '4671234768',
payeeAlias: '1231181189',
amount: '100',
currency: 'SEK',
message: 'Kingston USB Flash Drive 8 GB'
},
json: true
};
request(options, function (error, response, body) {
if (error) throw new Error(error);
console.log(response.headers);
console.log(body);
});
node.js ssl certificate pfx
asked Nov 19 '18 at 10:08
Krister JohanssonKrister Johansson
107421
I am trying to make a request with a p12 file or a pfx, but I can't get it to work. If I use PEM and KEY the code works fine. But Azure Keyvault does not support PEM and KEY. Is there an alternative that works with KEY/PEM certificates?
This is how I generated a p12/pfx file if that is the problem.
openssl pkcs12 -export -out certificate.pfx -inkey 1231181189.key -in
1231181189.pem -certfile CA.pem
Here is an example code, if I comment out cert and key the system does not work,
Error: read ECONNRESET
But if I comment out pfx and passphrase and use pem and key the connection work.
var request = require('request');
var fs = require('fs');
var path = require('path');
var certFile = __dirname + '/certs/1231181189.pem';
var keyFile = __dirname + '/certs/1231181189.key';
var options = {
method: 'POST',
url: 'https://mss.cpc.getswish.net/swish-cpcapi/api/v1/paymentrequests',
headers: { 'Content-Type': 'application/json' },
agentOptions: {
cert: fs.readFileSync(certFile),
key: fs.readFileSync(keyFile),
pfx: fs.readFileSync(__dirname + '/certs/certificate.pfx'),
passphrase: 'swish'
},
body: {
payeePaymentReference: '0123456789',
callbackUrl: 'https://example.com/api/swishcb/paymentrequests',
payerAlias: '4671234768',
payeeAlias: '1231181189',
amount: '100',
currency: 'SEK',
message: 'Kingston USB Flash Drive 8 GB'
},
json: true
};
request(options, function (error, response, body) {
if (error) throw new Error(error);
console.log(response.headers);
console.log(body);
});
node.js ssl certificate pfx
node.js ssl certificate pfx
asked Nov 19 '18 at 10:08
Krister JohanssonKrister Johansson
107421
asked Nov 19 '18 at 10:08
Krister JohanssonKrister Johansson
107421
asked Nov 19 '18 at 10:08
Krister JohanssonKrister Johansson
107421
asked Nov 19 '18 at 10:08
Krister JohanssonKrister Johansson
107421
asked Nov 19 '18 at 10:08
Krister JohanssonKrister Johansson
107421
107421
What error message do you get?
– antzshrek
Nov 27 '18 at 22:32
@antzshrek No code error, just connection fail ”ECONNREST” Its in my question 👍🏻
– Krister Johansson
Nov 27 '18 at 23:15
Your code seems ok. A pem file can contain several certificates, including the certificacion chain. Since you are not usingCA.pemin theagentOptions, could you check that the entire certification chain is really included inCA.pemor is only present in1231181189.pem?
– pedrofb
Dec 10 '18 at 12:48
@pedrofb my "Swish TLS Root CA.pem" does only have one CERTIFICATE and my "1231181189.pem" have multiple. I'm I mixing them up? Tried to add ca:CA.pem to my code but got the same error.
– Krister Johansson
Dec 10 '18 at 13:22
The PFX file should contain the entire certificate chain, from the final certificate to root CA. It could be the error cause (i do not know if-in 1231181189.pemincludes only the final certificate, but I suspect that it does). Try to copy the certificate chain of1231181189.pemintoCA.pem. PEM is a text file containing certificates with a header and a footer. Alternatively, I think you can also try exporting the P12 using openssl command-certfile 1231181189.pem
– pedrofb
Dec 10 '18 at 13:40
|
show 3 more comments
What error message do you get?
– antzshrek
Nov 27 '18 at 22:32
@antzshrek No code error, just connection fail ”ECONNREST” Its in my question 👍🏻
– Krister Johansson
Nov 27 '18 at 23:15
Your code seems ok. A pem file can contain several certificates, including the certificacion chain. Since you are not usingCA.pemin theagentOptions, could you check that the entire certification chain is really included inCA.pemor is only present in1231181189.pem?
– pedrofb
Dec 10 '18 at 12:48
@pedrofb my "Swish TLS Root CA.pem" does only have one CERTIFICATE and my "1231181189.pem" have multiple. I'm I mixing them up? Tried to add ca:CA.pem to my code but got the same error.
– Krister Johansson
Dec 10 '18 at 13:22
The PFX file should contain the entire certificate chain, from the final certificate to root CA. It could be the error cause (i do not know if-in 1231181189.pemincludes only the final certificate, but I suspect that it does). Try to copy the certificate chain of1231181189.pemintoCA.pem. PEM is a text file containing certificates with a header and a footer. Alternatively, I think you can also try exporting the P12 using openssl command-certfile 1231181189.pem
– pedrofb
Dec 10 '18 at 13:40
What error message do you get?
– antzshrek
Nov 27 '18 at 22:32
What error message do you get?
– antzshrek
Nov 27 '18 at 22:32
@antzshrek No code error, just connection fail ”ECONNREST” Its in my question 👍🏻
– Krister Johansson
Nov 27 '18 at 23:15
@antzshrek No code error, just connection fail ”ECONNREST” Its in my question 👍🏻
– Krister Johansson
Nov 27 '18 at 23:15
Your code seems ok. A pem file can contain several certificates, including the certificacion chain. Since you are not using
CA.pem in the agentOptions, could you check that the entire certification chain is really included in CA.pem or is only present in 1231181189.pem?– pedrofb
Dec 10 '18 at 12:48
Your code seems ok. A pem file can contain several certificates, including the certificacion chain. Since you are not using
CA.pem in the agentOptions, could you check that the entire certification chain is really included in CA.pem or is only present in 1231181189.pem?– pedrofb
Dec 10 '18 at 12:48
@pedrofb my "Swish TLS Root CA.pem" does only have one CERTIFICATE and my "1231181189.pem" have multiple. I'm I mixing them up? Tried to add ca:CA.pem to my code but got the same error.
– Krister Johansson
Dec 10 '18 at 13:22
@pedrofb my "Swish TLS Root CA.pem" does only have one CERTIFICATE and my "1231181189.pem" have multiple. I'm I mixing them up? Tried to add ca:CA.pem to my code but got the same error.
– Krister Johansson
Dec 10 '18 at 13:22
The PFX file should contain the entire certificate chain, from the final certificate to root CA. It could be the error cause (i do not know if
-in 1231181189.pem includes only the final certificate, but I suspect that it does). Try to copy the certificate chain of 1231181189.pem into CA.pem. PEM is a text file containing certificates with a header and a footer. Alternatively, I think you can also try exporting the P12 using openssl command -certfile 1231181189.pem– pedrofb
Dec 10 '18 at 13:40
The PFX file should contain the entire certificate chain, from the final certificate to root CA. It could be the error cause (i do not know if
-in 1231181189.pem includes only the final certificate, but I suspect that it does). Try to copy the certificate chain of 1231181189.pem into CA.pem. PEM is a text file containing certificates with a header and a footer. Alternatively, I think you can also try exporting the P12 using openssl command -certfile 1231181189.pem– pedrofb
Dec 10 '18 at 13:40
|
show 3 more comments
0
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53372322%2fp12-pfx-nodejs-request%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
draft saved
draft discarded
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53372322%2fp12-pfx-nodejs-request%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
What error message do you get?
– antzshrek
Nov 27 '18 at 22:32
@antzshrek No code error, just connection fail ”ECONNREST” Its in my question 👍🏻
– Krister Johansson
Nov 27 '18 at 23:15
Your code seems ok. A pem file can contain several certificates, including the certificacion chain. Since you are not using
CA.pemin theagentOptions, could you check that the entire certification chain is really included inCA.pemor is only present in1231181189.pem?– pedrofb
Dec 10 '18 at 12:48
@pedrofb my "Swish TLS Root CA.pem" does only have one CERTIFICATE and my "1231181189.pem" have multiple. I'm I mixing them up? Tried to add ca:CA.pem to my code but got the same error.
– Krister Johansson
Dec 10 '18 at 13:22
The PFX file should contain the entire certificate chain, from the final certificate to root CA. It could be the error cause (i do not know if
-in 1231181189.pemincludes only the final certificate, but I suspect that it does). Try to copy the certificate chain of1231181189.pemintoCA.pem. PEM is a text file containing certificates with a header and a footer. Alternatively, I think you can also try exporting the P12 using openssl command-certfile 1231181189.pem– pedrofb
Dec 10 '18 at 13:40