topic Re: Certificate error while calling API. in SAS Programming

Certificate error while calling API.

khandelwalanmol — Tue, 22 Mar 2022 11:40:42 GMT

I have been trying to Call an API and fetch a access token. Have been dealing with certificate error. Here is the error log:

ERROR:

OpenSSL error 336134278 (0x14090086) occurred in SSL_connect/accept at line 5388, the error message is "error:14090086:SSL
routines:ssl3_get_server_certificate:certificate verify failed".
ERROR: Secure communications error status 807ff008 description "OpenSSL error 336134278 (0x14090086) occurred in SSL_connect/accept
at line 5388, the error message is "error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed"."
ERROR: Encryption run-time execution error
ERROR: Call to tcpSockContinueSSL failed.

Here is my code for the call.

options set=SSL_USE_SNI="0" set=SSL_SNI_HOSTNAME="api.bcda.cms.gov"  ;	
proc http
   		url="https://api.bcda.cms.gov/auth/token" AUTH_BASIC
   		WEBUSERNAME="&client_id."
   		WEBPASSWORD="&client_secret."
   		out=apitoken
   		method="POST";
 		
   		headers "Accept"="application/json";
	run;

Any suggestions?

Re: Certificate error while calling API.

ChrisHemedinger — Tue, 22 Mar 2022 12:33:25 GMT

Perhaps the SSLPARMS statement can help. See this topic:

The SSLPARMS statement can help specify behavior for verifying certificates. Adding the SSLREQCERT= value may help.

Something like:

sslparms "sslreqcert"="allow";

Re: Certificate error while calling API.

khandelwalanmol — Thu, 24 Mar 2022 09:39:22 GMT

Passed the ssl parm statement. Having same certificate error.

Re: Certificate error while calling API.

Sajid01 — Thu, 24 Mar 2022 14:22:59 GMT

Hello @khandelwalanmol
Apparently certificate verification has failed.
Please have a look here. https://documentation.sas.com/doc/en/pgmsascdc/9.4_3.5/secref/n183v6l7w6dphwn1giqjw725640c.htm