Client certificate
Aquiring a client certificate
A client certificate is required for communication with the E-Archive REST interface.
For security reasons, only certificates issues by IN Groupe for this specific purpose can be used. To get a test environment and receive a client certificate that has access to it, contact IN Groupe.
When you receive the client certificate, it is very important that you protect the private key. The private key is what identifies your system as legitimate. Accidentally exposing the private key to third parties is equivalent to exposing a password. If that happens, you must contact IN Groupe immediately.
Error responses
Result | Explanation |
|---|---|
No connection/connection refused | This is not related to the certificate |
Handshake failure | The typical cause for this is that the CA certificate chain for the server certificate is missing from the trust store, or that no client certificate is sent in the request. |
HTTP 302, redirecting to a new URL that will return 403. | The certificate does not have access to the URL specified in the request. |
Any other http error code | If the X-Archive-Response-Code is set to the same value, the response is from the backend E-Archive solution, which means that TLS access is successful. If this header is not present, then the base URL is likely wrong. |