Problem with SSL Certificate in PostMan

Dear All,

I have an issue for all of you, maybe you have resolved months ago but I can't find any topic with these keywords.

I have followed all the instructions inside the OAUTH 2.0 authentication issue with ION API and now I can get the Token and make API Request on my XI Server.

But I can't validate the SSL HTTPS Certificate in PostMan (CRT and KEY files).

If I set OFF the SSL Certification --> I can see the response.

But this setting is not safe for a Production Release.

Please let me know if there is any tutorial or PDF that explain how to Export & Import the CRT and KEY HTTPS Certificate Files.

Find more posts tagged with

ION API Gateway

Accepted answers

Legacy Contributor

Hi Sun:

Postman may be a stand alone app. But still it will have some certificate store where client certs can be uploaded. So essentially my previous suggestion is still valid. Or put in other words the question becomes, how can I import certificates into the Postman app.

Have you tried Postman -> Settings -> Certificates -> Add Certificates and import your self signed cert there?

All comments

Legacy Contributor

Hello Sun:

Correct me if I am wrong, but this seems a generic SSL problem which is unrelated to IONAPI gateway.

You have hosted the service using a self-signed certificate and your client is having a problem trusting that certificate.

So either you host your service using a verisign signed certificate (in which case your client will be happy) Or you have to import the certificate into your client's certificate store.

For java based applications, this needs to be done into the certificate store of JVM that you use.. In JDK there are enough tools/ APIs to do this. So you could google how to import this.

Another option would be to mark all certificates from your internal domain to be trusted on your key store.

If there is an InforOS or IONAPI gateway specific question you have, please feel free to ask further.

Best Regards

Vignesh

Legacy Contributor

Hi Vignesh,

thank you for the reply.

For the Certificate: it's a self-signed certificate in our domain CDMGROUP and it's auto-confirmed by the a .CER File that we Import as "Trust Authorities".

For Internet Explorer, Chrome & Firefox we have chosen to mark all certificates from our CDMGROUP domain as trusted, importing our key store (our Windows 10 is automatically set up).

But this isn't the way that Postman grant & trust the SSL Certificate.

If you need to do some test, you can grab all the Certificates for PostMan using Digicert Certificate Utility, download it and run from the Windows Server.

I have tested all the ways and Google It several times, but I didn't find any solution for 2018.

Keep in mind that Postman was a Chrome Web App.

Now it's a Standalone App, so it doesn't inherit the Trusted Certificates from Chrome.

Anyway, we don't have any problem of Untrusted Certificate in the Browser, so maybe I will still Turn Off SSL Protection on Postman and continue to debugging in the console.

If someone has a solution, please share with us

Legacy Contributor

Hi Sun:

Have you tried Postman -> Settings -> Certificates -> Add Certificates and import your self signed cert there?

Legacy Contributor

Hi Vignesh,

yeah, I have followed all your tips & also the tips from Postman's blog.

https://github.com/postmanlabs/postman-app-support/issues/4038

Seems like Self Signed SSL Certificate are deprecated or not authorized. This is a strict scenario, maybe they're following new Google's 2018 rules for HTTPS. I think so...

So anyway, thank you Vignesh for the quick brainstorming. Now I know we should sett OFF the SSL Protection in Postman for debugging ION API :P

Copyright © 2025 Infor. All rights reserved.