You are using FileMaker or other clients and have problems with the SSL certificate when accessing the ITscope.com API?<\/p>\n\n\n\n
On older systems or systems that have not been updated since 2021, the Let’s Encrypt root certificate may be missing or an older, expired Let’s Encrypt root may be installed. The problem is described here: https:\/\/letsencrypt.org\/docs\/dst-root-ca-x3-expiration-september-2021\/<\/a> <\/p>\n\n\n\n Depending on the client used, you must therefore update the root certificates so that our server certificates are recognised as valid. Instead of the expired Let’s Encrypt ‘DST Root CA X3’, the newer ‘ISRG Root X1’ must be installed. https:\/\/community.letsencrypt.org\/t\/help-thread-for-dst-root-ca-x3-expiration-september-2021\/149190<\/a><\/p>\n\n\n\n Here are two examples for older Debian systems:<\/p>\n\n\n\n https:\/\/blog.rac.me.uk\/2016\/05\/04 <\/a> <\/p>\n\n\n\n The MBS plug-in for Filemaker does not come with root certificates by default (“Also you need a cacert.pem file with certificates”). More information on the pluginn: http:\/\/www.mbsplugins.de\/archive\/2013-01-31\/SSL_Security_with_CURL\/monkeybreadsoftware_blog_archive<\/a><\/p>\n\n\n\n <\/p>\n\n\n\n The root certificate is required if you want to access our services from a third-party system and your system does not yet recognise the root certificate. Under ISRG Root X1, you can download the root certificate relevant to us by clicking on the corresponding link in various formats, for example as a “.pem”, “.der” or simply as a “.txt” file.<\/p>\n","protected":false},"excerpt":{"rendered":" You are using FileMaker or other clients and have problems with the SSL certificate when accessing the ITscope.com API? What must be configured so that API retrievals work without errors …<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"footnotes":""},"kbtopic":[263],"kbtag":[],"class_list":["post-9433","kb","type-kb","status-publish","hentry","kbtopic-itscope-export-api-en"],"_links":{"self":[{"href":"https:\/\/guide.itscope.com\/en\/wp-json\/wp\/v2\/kb\/9433","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/guide.itscope.com\/en\/wp-json\/wp\/v2\/kb"}],"about":[{"href":"https:\/\/guide.itscope.com\/en\/wp-json\/wp\/v2\/types\/kb"}],"author":[{"embeddable":true,"href":"https:\/\/guide.itscope.com\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/guide.itscope.com\/en\/wp-json\/wp\/v2\/comments?post=9433"}],"version-history":[{"count":5,"href":"https:\/\/guide.itscope.com\/en\/wp-json\/wp\/v2\/kb\/9433\/revisions"}],"predecessor-version":[{"id":15665,"href":"https:\/\/guide.itscope.com\/en\/wp-json\/wp\/v2\/kb\/9433\/revisions\/15665"}],"wp:attachment":[{"href":"https:\/\/guide.itscope.com\/en\/wp-json\/wp\/v2\/media?parent=9433"}],"wp:term":[{"taxonomy":"kbtopic","embeddable":true,"href":"https:\/\/guide.itscope.com\/en\/wp-json\/wp\/v2\/kbtopic?post=9433"},{"taxonomy":"kbtag","embeddable":true,"href":"https:\/\/guide.itscope.com\/en\/wp-json\/wp\/v2\/kbtag?post=9433"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
(In detail: “(1) all clients of your API must trust ISRG Root X1 (not just DST Root CA X3), and (2) if clients of your API are using OpenSSL, they must use version 1.1.0 or later<\/a>. In OpenSSL 1.0.x, a quirk in certificate verification means that even clients that trust ISRG Root X1 will fail when presented with the Android-compatible certificate chain we are recommending by default.”)<\/p>\n\n\n\n
Here is a thread with collected information on the update of various systems:<\/p>\n\n\n\n
https:\/\/stackoverflow.com\/questions\/69408776\/how-to-force-older-debian-to-forget-about-dst-root-ca-x3-expiration-and-use-isrg<\/a><\/p>\n\n\n\nWhat must be configured so that API retrievals with Filemaker work without errors?<\/h2>\n\n\n\n
As a result, CURL does not find a root certificate for the Let’s Encrypt certificate from our servers and recognises our certificate as self-signed.
For this reason, you can download the certificate bundle from the following website and set the corresponding option in the plug-in: http:\/\/curl.haxx.se\/docs\/caextract.html<\/a><\/p>\n\n\n\nWhere can you find the Let\u2019s Encrypt Root-Certificate?<\/h2>\n\n\n\n
You can download the root certificate from the Let’s Encrypt website:
https:\/\/letsencrypt.org\/certificates\/#root-certificates<\/a><\/p>\n\n\n\n