topic Re: Postman SSL certificate issues in reserved IOS XE lab in DevNet Sandbox

Postman SSL certificate issues in reserved IOS XE lab

Betelgeuse — Tue, 14 Nov 2023 03:33:57 GMT

I am trying to use restconf to interact with my cat 8kv I can ssh into the device restconf is enabled I ensured the developer user had full privileged access. When running the api call "https://10.10.20.48:443/restconf/data/ietf-interfaces:interfaces" I get a 401 unauthorized and the raw data says access-denied. Digging into the logs I see I am getting an authorization error associated with the self signed cert. authorizationError: "DEPTH_ZERO_SELF_SIGNED_CERT". I have also verified thoroughly that I have SSL certificate validation turned off in postman. What am I doing wrong here?

Re: Postman SSL certificate issues in reserved IOS XE lab

bigevilbeard — Tue, 14 Nov 2023 10:03:23 GMT

@Betelgeuse seems to be that your client doesn't trust the switch's self-signed cert i think. What happens when you run curl with the k flag? (The -k or --insecure flag in curl tells it to skip SSL certificate validation)

curl -k https://10.10.20.48/restconf/data/ietf-interfaces:interfaces

Make sure RESTCONF is enabled globally on the device with restconf and that HTTPS transport is enabled with transport https. I have also read in other Postman threads, restarting the runner (restarted whole Postman) could also help.

Hope this helps.

Re: Postman SSL certificate issues in reserved IOS XE lab

Betelgeuse — Wed, 15 Nov 2023 02:23:55 GMT

This worked, now I just have to figure out why it wont work in postman, I've tried restarting my computer, different linux vm's, from my host network.

curl -k https://10.10.20.48/restconf/data/ietf-interfaces:interfaces \
> --user developer:C1sco12345

Re: Postman SSL certificate issues in reserved IOS XE lab

bigevilbeard — Wed, 15 Nov 2023 07:39:53 GMT

@Betelgeuse are you running a VM from your local machine with the anyconnect client on this to the sandbox? This is known to cause issues. Try the same using the always on XE sandbox and Postman, there are two to use in the catalog.

Re: Postman SSL certificate issues in reserved IOS XE lab

Betelgeuse — Thu, 16 Nov 2023 02:44:13 GMT

@bigevilbeardI am using openconnect vpn from my ubuntu20.04.3 vm which is hosted on my local machine. I did try it with anyconnect from my host and it did work.