topic Re: How to avoid SSL error while using https API call using filename url or proc http procedure? in SAS Programming

How to avoid SSL error while using https API call using filename url or proc http procedure?

Rama_V — Tue, 12 Dec 2017 00:30:01 GMT

Hi All,

I am using SAS9.4 M0 version, trying to get data using api call.

filename test url "https://webaddress-dev/api/users/username-ab123"
user='login' pass=password;

data test_achive;
infile testlength=len lrecl=32767;
input line $varying32767. len;
run;

filename resp "C:\Users\rkv897\Documents\test.xml";

proc http
method="GET"
url="https://webaddress-dev/api/users/username-ab123"
out=resp
WEBPASSWORD="password"
WEBUSERNAME="login";

run;

ERROR: SSL Error: Invalid subject name in partner's certificate. Subject name must match
machine name.

In both cases, I am able getting same SSL error. I can get the information in xml format when I enter the same address on the web browser, I do have to override the certificate error.

I have exported the certificate into base64 encoding and converted into .jks file using below command in command prompt.

d:\SAS\Applications\SASPrivateJavaRuntimeEnvironment\9.4\jre\bin>keytool -importcert -file "C:\Users\dcb123\Documents\webcertificate.cer" -keystore "C:\Users\dcb123\Documents\keystorefile.jks" -alias "anything"

I found some information about proc https connection

http://support.sas.com/documentation/cdl/en/proc/61895/HTML/default/viewer.htm#a003286920.html

Using Hypertext Transfer Protocol Secure (HTTPS)

"C:\Program Files\SAS\SASFoundation\9.2\sas.exe" -CONFIG
"C:\Program Files\SAS\SASFoundation\9.2\nls\en\SASV9.CFG"
-jreoptions (- Djavax.net.ssl.trustStore=C:\Documents and
Settings\mydir\.keystore
-Djavax.net.ssl.trustStorePassword=trustpassword)

Added the keystorefile.jks as keystore location and password I entered while running the command in the configuration file SASv9.CFG .

Still, I got same error.

I got some information from this link too but it doesn't work for SAS9.4 M0.

http://documentation.sas.com/?docsetId=secref&docsetTarget=n12033intelplatform00install.htm&docsetVersion=9.4&locale=ja

Could anyone please help with this?

Thanks,

Rama

Re: How to avoid SSL error while using https API call using filename url or proc http procedure?

Kurt_Bremser — Tue, 12 Dec 2017 08:08:53 GMT

Looks like the certificate on the server is bad (has a different hostname). Talk to the responsible sysadmin.

Re: How to avoid SSL error while using https API call using filename url or proc http procedure?

Rama_V — Wed, 13 Dec 2017 23:45:27 GMT

Thanks @Kurt_Bremser

I was not using the host name the certificate was issued too. As I entered the domain in the api call , there was no error. I can get the data using proc http.

https://webaddress-dev.domainname.com/api/users/username-ab123

"Everything looks fine" For some of the data I have to solve Multi byte character issue when reading the xml file.

Re: How to avoid SSL error while using https API call using filename url or proc http procedure?

getright — Thu, 05 Apr 2018 17:24:04 GMT

Maybe just use http:// instead of https:// can work

Re: How to avoid SSL error while using https API call using filename url or proc http procedure?

Rama_V — Thu, 05 Apr 2018 23:02:25 GMT

Thank you, but the issue has been resolved.