Agile Central - Connector: Using private certificate with connectors

Document ID : KB000117580
Last Modified Date : 16/10/2018
Show Technical Document Details
Introduction:
In general, it's least problematic to use public signed certificates with your on-premise websites.  Privately signed certificates may not be supported in all connectors.  Some Python connectors will allow privately signed certificates provided you have the entire certificate chain and are able to set environment variables pointing to the PEM file.
Question:
How can I use privately signed certificates with my Python based connector?
Answer:

In order to use a privately signed certificate with our connector you will need to ensure that you have the entire certificate chain provided by your IT department.  This usually includes a root certificate, an intermediate certificate and the site certificate.  These all need to be in PEM format.  To verify the format, you can open the certificate in a text editor.  If the file shows binary characters, it is probably DER/Binary.  A PEM format file will look like this:

-----BEGIN CERTIFICATE-----
MIIIKzCCBxOgAwIBAgIQAWy2JrsXwwWl2RL4O3rVMjANBgkqhkiG9w0BAQsFADB1
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk
7YycxPCZrY8FO5fD1AZnUMfyvV3nBYwD6lfC2wtxhVZuiXDkBHXYhuCr8yB1a0JO
tuX9UowXE0GMhJ7Zh3l2vgh/ihRgS2z2WkVuZCcc7A==
-----END CERTIFICATE-----



In order to convert from another format to PEM, you can use a tool like this: https://www.sslshopper.com/ssl-converter.html

Once you have the PEM files for your private certificate, you will also need to get the Agile Central certificates.  These have been provided in PEM format for your convenience in the "Additional Information" section below.

Combine all the PEM files, along with the Agile Central certificate chain into a single file.  See the Agile Central certificate chain for an example of how this is done.  Save this file in a convenient location on the server where your connector is installed.

The final step is setting an environmental variable as follows:

REQUESTS_CA_BUNDLE=/path/to/your/certificate/bundle.pem
Additional Information:
CA Agile Central Certificate Chain

Copy everything below this line
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIIKzCCBxOgAwIBAgIQAWy2JrsXwwWl2RL4O3rVMjANBgkqhkiG9w0BAQsFADB1
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk
IFZhbGlkYXRpb24gU2VydmVyIENBMB4XDTE3MDYyNzAwMDAwMFoXDTE5MDcyMjEy
MDAwMFowgfUxHTAbBgNVBA8MFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYB
BAGCNzwCAQMTAlVTMRkwFwYLKwYBBAGCNzwCAQITCERlbGF3YXJlMRAwDgYDVQQF
EwczNDEzNjY4MQswCQYDVQQGEwJVUzERMA8GA1UECBMIQ29sb3JhZG8xEDAOBgNV
BAcTB0JvdWxkZXIxKDAmBgNVBAoTH1JhbGx5IFNvZnR3YXJlIERldmVsb3BtZW50
IENvcnAxGDAWBgNVBAsTD0NBIFRlY2hub2xvZ2llczEcMBoGA1UEAxMTcmFsbHkx
LnJhbGx5ZGV2LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKPA
FtGBCNxh4Zq0o8KAxsIj5I5ga1469d84HotlntvUnXy18iDevNgAEmG3MIab3TlB
F1xWF03gJHazy5BVX3KFPfOXkLMKm4+LTMfWzmsdNyvdOEvoNSpl9NhAV9wC/dlO
Q6VX3kD/KIr6Zx3IQDJ4ELsRm4TzRjVuKUHkoNdTUZ8/vntMBdid6SloBo1esJuB
8j2JYK+dzRNg0DO960kh2YHfB4Z5WMqYLI+e0/+Dvm4WqFe2WG3mc164OaeNiV0R
Advi3BYpZal7grzExGjueuUFPI4N/oHXRT6B7iTGduyXZsk9l3vGaeDjG5n3qT8Z
Ia+qiO6/0DfkZNo4i28CAwEAAaOCBDQwggQwMB8GA1UdIwQYMBaAFD3TUKXWoK3u
80pgCmXTIdT4+NYPMB0GA1UdDgQWBBQn+JF5sldn+3bnCgSUH02PrJbl9zBpBgNV
HREEYjBgghNyYWxseTEucmFsbHlkZXYuY29tghB1czEucmFsbHlkZXYuY29tghxy
ZWFsdGltZS5yYWxseTEucmFsbHlkZXYuY29tghlyZWFsdGltZS51czEucmFsbHlk
ZXYuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMuZGlnaWNlcnQuY29t
L3NoYTItZXYtc2VydmVyLWcyLmNybDA0oDKgMIYuaHR0cDovL2NybDQuZGlnaWNl
cnQuY29tL3NoYTItZXYtc2VydmVyLWcyLmNybDBLBgNVHSAERDBCMDcGCWCGSAGG
/WwCATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BT
MAcGBWeBDAEBMIGIBggrBgEFBQcBAQR8MHowJAYIKwYBBQUHMAGGGGh0dHA6Ly9v
Y3NwLmRpZ2ljZXJ0LmNvbTBSBggrBgEFBQcwAoZGaHR0cDovL2NhY2VydHMuZGln
aWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkV4dGVuZGVkVmFsaWRhdGlvblNlcnZlckNB
LmNydDAMBgNVHRMBAf8EAjAAMIIB9QYKKwYBBAHWeQIEAgSCAeUEggHhAd8AdgCk
uQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAVzrNunCAAAEAwBHMEUC
IQDU6yTdF/meRfbttkXv1Cn1CpE0yYfM+6SM5MElTDbNqwIgTliZ4s7Cfg85qVQa
SaBwBcLYVOxvg0dHziyKC+++wfEAdgBWFAaaL9fC7NP14b1Esj7HRna5vJkRXMDv
lJhV1onQ3QAAAVzrNuqBAAAEAwBHMEUCIQCTBu0BsE+pUALTEpJ79MuNctlpW5pb
VzSzMCxiFWN3NQIgQJ14wkXOAEbg6VvaL6FwoIpA+eMNWDnOzCRUeFGlO54AdQDu
S723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAVzrNuy5AAAEAwBGMEQC
IHXS9+PwRUD9jxvL1ol84KKwmKNOcBFxiACBCyD4adP7AiBvidG3G1/cDKuszGfl
5Acrf4aXMa6Qvx/LgStzYGjyhAB2ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCW
ZDaOHtGFAAABXOs26okAAAQDAEcwRQIhAIY/xGf3151/ZyMHNYqJRba3rU/+5Czj
agBchCYqN+u2AiACunXCIbsZNcktvyoorGpMsYFmTfJxzPrrtBUrKVEj4jANBgkq
hkiG9w0BAQsFAAOCAQEAJKmFbnmrhTx32Xsdz8PReue7Dxp/1NTORqt7RQawavM5
PAmTmu8DCF4uxpLz5xbPxCuxPsOlnQWF7U6FlDQF9rNw1tjXIxnnVUf22G+KCoHs
WtYQyUDWe7syD7udc1YtjDctJc9zbtD8a6eCwufnKvvaqk6qh99DuKFzoobQmHF+
GOXv1c5KLQ57Ppuy0Hc1EkJmtCLDGpDU086N1wj5dTzewo7zlEQFujGkL0NYi8Nd
7YycxPCZrY8FO5fD1AZnUMfyvV3nBYwD6lfC2wtxhVZuiXDkBHXYhuCr8yB1a0JO
tuX9UowXE0GMhJ7Zh3l2vgh/ihRgS2z2WkVuZCcc7A==
-----END CERTIFICATE-----