Javascript code of https request for client certificate authentication. | Community
Skip to main content
parveshp7822672
parveshp7822672
Level 3
September 9, 2019

Javascript code of https request for client certificate authentication.

  • September 9, 2019
  • 2 replies
  • 21105 views

Hello Everyone,

We need to set up a connection between adobe campaign and ESB(Enterprise service bus). Adobe Campaign( Client ) will call webservices of ESB (Server) to transfer data from Adobe Campaign to ESB.

But ESB supports client certificate authentication.
I am looking for JavaScript code of https request with a client certificate.

I checked the code of many connectors in Adobe Campaign they are using http request with username and password.
I checked on google but did not find it. Everywhere there is code of Node.js for this type of connection.

Please let me know if you have any questions.

Thanks in advance.

    This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

    2 replies

    Jean-Serge_Biro
    Jean-Serge_Biro
    Level 10
    September 12, 2019

    Hi Parveshp,

    Please may you elaborate a bit?

    Is the ESB service that requires certificate authentication based on TLS (SSL) (most probably) or IPsec or something else?


    I guess it is SSL authentication method that you need.

    So, is the protocol SOAP or RESTful web service?

    Moreover, do you know how to manage openssl tool on the server ? and so do you have access to the server directly (On Premise) or is it On Cloud hosting so you must use the openssl tool of ACC On Cloud ?

    Also ask if the ESB service key is RSA 1024 or 2048 bits.

    Regarding the Javascript, nothing to do there, only use https protocol for the httpRequest.


    For testing purpose, you can use curl tool if you are On Premise hosting and you have access to the server for installing this tool.

    Regards
    J-Serge

      parveshp7822672
      parveshp7822672Author
      Level 3
      September 12, 2019

      Hello Jean,

      Thanks for checking it.

      1. TLS(SSL) certificate authentication.

      2. It has not been decided which type of service ESB team will provide Adobe campaign. It can be SOAP or RESRful.

      3. OpenSSL is installed on Adobe application server(Window 2016).  Adobe campaign server team gave me client certificate, that I shared with the ESB server team(Linux server)team.

      4. There is an on-premise instance.

      As per my understanding, I do not need to mention something special in javascript code. I just need to use the following code to call service. Mutual SSL handshake between client and server will be done automatically.

      var req = new HttpClientRequest("https://www.somewhere.com/")

      req.header["Content-Type"] = "text/xml; charset=utf-8"

      req.method = "SEARCH"

      req.body = "<xml>any content</xml>"

      req.execute();

      Thanks.

      Parvesh Parmar.

      Jean-Serge_Biro
      Jean-Serge_Biro
      Level 10
      September 12, 2019

      If it is SOAP (less probable by now REST is far more popular) please use HttpSoapConnection() function instead of HttpClientRequest.

      Please check the method, you define it as SEARCH but usually it is POST (or sometimes GET but less convenient and secured).

      So it is your network admin team that have managed the private key, and the public key to share between ESB and ACC, ok fine for you.

      Then ask them to do a simple test for example with curl if they have the library installed, to check if authentication is fine outside the ACC.

      I suggest you to use an xtk:option entry (Administration>Platform>Options) that you read in your code with getOption() so you can set different keys for differents environment (production, dev, QA) without changing your JS code for leveraging the key.

        DimaKudryavtsev
        DimaKudryavtsev
        Level 3
        September 12, 2019

        Hi

        It is not possible to set SSL key inside the campaign js code as far as I know. The maximum, that I was able to do is HMAC authorization.

        That is if the server is not accessible via HTTPS request and SSL can not be managed by the operation system, of course.

        I can recommend to build a simple Java or node.js app that will act as a proxy, install it on the same machine and expose some local port. Connect to the proxy via HTTP or HTTPS and let it handle the secure connection to your ESB.

        We used to run NGINX with reverse SSL tunnel for that purpose to encrypt SMS communication over SMPP until developed our own connector over HTTPS to the REST endpoint.

          Terms & ConditionsAccessibility statement

          Loading footer...