Client CA certificate configuration: Request

To get the client CA certificate configuration, send the following request:

GET https://<IA_IP_address>:<port_number>/config/v1/auth/x509/client/ca

Required headers:

Cookie: px=<token>
X-Username: <user>
X-Role: <role>

Options

IA_IP_address—The IP address of the NDR appliance running the NDR API.
port_number—The port number of the NDR appliance running the NDR API.
token—This token authenticates the session. By default, the session times out after 24 hours.
user—The user ID.
role—The user's role.

Example

GET https://xxx.xxx.xxx.xxx:443/config/v1/auth/x509/client/ca

Required headers:

Cookie: px=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
X-Username: wheel
X-Role: wheel

Client CA certificate configuration: Response

HTTP/1.1 [Response Code] [Response Message]				
Server: [Server]
Date: [Date]					
Content-Type: application/x-pem-file
Content-Disposition: inline; filename="ca.crt"
-----BEGIN CERTIFICATE-----
<cert>
-----END CERTIFICATE-----

Response fields

Response code—A standard HTTP response code.
- 200—Request successful; the configuration was successful.
Response message—A standard HTTP response message.
- OK—Request successful; the configuration was successful.
Server—The server being used.
Date—Standard HTML date format.
Content type—The response format.

Example

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 16 Aug 2019 11:15:22 GMT
Content-Type: application/x-pem-file
Content-Disposition: inline; filename="ca.crt"
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

cURL code sample: Client CA certificate configuration

curl -k --cookie "px=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" 
-H "X-Username: wheel" -H "X-Role: wheel" 
https://xxx.xxx.xxx.xxx:443/config/v1/auth/x509/client/ca

This cURL sample includes the following options:

-k—This option explicitly allows cURL to perform insecure SSL connections and transfers, which allows you to test your SSL connection without installing a CA certificate.
--cookie "px=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"—This option specifies the authentication token for this session.
-H "X-Username: wheel"—User name.
-H "X-Role: wheel"—User role.
https://xxx.xxx.xxx.xxx:443/config/v1/auth/x509/client/ca—The certificate request URL. Replace xxx.xxx.xxx.xxx with the IP address of your NDR appliance.

Results

This example retrieves the client CA certificate configuration.