Team, I am using the N/https module to make a get ...
# integrations
a
Team, I am using the N/https module to make a get call to an external REST API from NetSuite. Authentication is based on a token, so I just pass an Authentication header with the token. It works fine from Postman, but when I do a test from NetSuite I get this error: “SSS_INVALID_HOST_CERT: An untrusted, unsupported, or invalid certificate was found for this host”. The server I am trying to reach is hosed on AWS and seems to support TLS 1.2. Any suggestions?
b
id try usin g a ssl certificate testing tool like https://www.ssllabs.com/ssltest/
suitescript is pretty strict about having a valid certificate chain
a
yes, tried on that URL and I got an “A” rating
which should be okay, right?
b
i think so
you would be looking for anything under chain issues
a
the only thing I think is not good, is that DNS CAA is No
b
test results should also give information about signature algorithms and the root ca so that you can compare them to netsuite's supported list
a
yes, the certificate is Amazon Root CA 1, and I think that is on the list
b
looks like the root is in there
the root has an sha256 fingerprint of 8ecde6884f3d87b1125ba31ac3fcb13d7016de7f57cc904fe1cb97c6ae98196e
a
right, so that should be okay
b
looks okay too
id get started on that netsuite support case
a
okay, thank you
b
you may want to try getting a different subdomain, _ has security issues associated with it
a
hi, the issue indeed was with the _
we have tried with a - in the URL and works fine
I have reported it to NetSuite though and they will create a bug for it
thanks a lot for your help