topic Re: Error when performing a GET API PostmanxISE - Self signed certific in Network Access Control

Error when performing a GET API PostmanxISE - Self signed certificate

Jalmeida — Sun, 07 Apr 2024 15:03:46 GMT

Guys,
I hope you are well.

I need help understanding where I'm going wrong in my API lab.
I went to ISE, enabled ERS, and created the admin user and to access the API.

I followed all the authorization parameters and headers, however, I am receiving the error "Self signed certificate in certificate chain".

I followed the instructions, went to Postman, and pointed to the certificate, and I still get error 400. Has anyone ever encountered this error? Could you please help me understand how to solve it?

Re: Error when performing a GET API PostmanxISE - Self signed certific

Greg Gibbs — Sun, 07 Apr 2024 23:28:59 GMT

You would either need to add the certificate files (including the private key) for the self-signed certificate or disable the certificate verification.

See this Postman document for more info.

Re: Error when performing a GET API PostmanxISE - Self signed certific

Jalmeida — Mon, 08 Apr 2024 16:33:08 GMT

Hello @Greg Gibbs

Thank you for the return. I uploaded a new certificate, I already added the path, and even though it doesn't report an error with https access, Postman continues to report the "Self signed certificate in certificate chain" problem. When I disable ssl it doesn't work

Re: Error when performing a GET API PostmanxISE - Self signed certific

Greg Gibbs — Mon, 08 Apr 2024 23:02:11 GMT

In the Postman documentation for the Certificates settings, it states "To connect to an API that uses Mutual TLS (mTLS)..."

AFAIK, the ISE API does not support mTLS. There is some support for certificate-based API authentication from ISE 3.3, but I don't believe that is using mTLS.

In my lab, SSL Certificate Verification is turned off in both the global General settings as well as at the API call level and it works with no issues.

You can also find some example Postman collections for ISE here:
https://github.com/1homas/ise-postman-collections

Re: Error when performing a GET API PostmanxISE - Self signed certific

Jalmeida — Mon, 08 Apr 2024 23:32:11 GMT

Thank you for your feedback master. I'll read this article calmly, but the problem really is with postman.

I did it via curl and it worked.

I did it using Python with IDLE and it also worked, that is, it is a parameter in postman.

Anyway, thank you very much, it helped me a lot.