A REST Routing Address needs to authenticate using a client certificate/private key pair, but pasting the key into a Keystore and referencing it via `ssl:KeyStoreId`/`ssl:KeyStorePwd` in Additional Headers fails with an SSL socket factory error.

All FAQ questions / Integrations and APIs

Answer

Rather than importing the raw private key directly, bundle the private key and certificate together into a single PKCS12 keystore file first (for example, using OpenSSL's pkcs12 -export command against the key and certificate, protected with a password), then import that .p12 file through the Keystores page in IFS. In the Routing Address's additional headers, reference it with ssl:KeyStoreId=<name> and ssl:KeyStoreType=PKCS12 — this combined-bundle approach is what the keystore import actually expects, rather than a bare key file.

Documentation-based answer. Confirm the product and release before applying it. This answer has not been verified in an IFS environment.

← Browse Integrations and APIs questions