Layer7 API Management

Hi guys I am trying to publish an rest web api through policy manager but I am getting error,

Step 1,

Step 2,

Step 3,

Step 4

I even tried ports 8080,9443 they do not work.

This is my sample API data https://apibaas-trial.apigee.net/siddharth1/sandbox/tests 

Where am I going wrong?

I have setup the gateway in VM Ware following the doc provided by CA.

I couldn't edit my question, so posting a comment.

I have checked Gateway Audit events, I tried with httpbin api, same error,

Problem routing to https://httpbin.org/ip. Error msg: Unable to obtain HTTP response from https://httpbin.org/ip: Certificate not verified. Caused by: Certificate [cn=*.httpbin.org,ou=essentialssl wildcard,ou=domain control validated] path validation and/or revocation checking failed

Hey guys any help with this would be greatly helpful. 

Hello siddharth-b,

The KB article here includes the answer of your problem,

https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.TEC0000001152.html 

"To resolve this issue:

1. Verify the certificate of the intermediary and/or root certificate authority is saved in the Manage Certificates dialog.
2. Ensure the above certificate is trusted for signing client certificates and the certificate for a root CA is configured to act as a trust anchor."

Regards,

Mark

Hi Mark,

I have done that but I am still getting same error. IS there any video tutorial which explains this?

I even tried with a locally deployed REST API. I get the same error.

Hi siddharth-b,

Is the certificate an intermediate certificate? If yes, you need to import all the certificates of the certificate path, and set the root certificate as Trust Anchor. And replace the certificate chain as the document below,

https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.TEC0000001122.html 

Regards,

Mark

Hi Siddarth,

   The certificates import not done properly or you didn't enabled the properties of external certificate. If you see your browser it is 'not secure' it means some properties are not enabled.

You have to import below certificate and then enable the properties of that certificate.

https://apibaas-trial.apigee.net

Please check on that.

Regards

Rajasekhar

Hey Rajasekhar, thanks for the reply. I will try that.

Meanwhile I have also deployed an REST Service locally using Tomcat. I get the same error What certificate do I need for that?

Hi Siddharth,

    Can you please provide screenshots with the details.

Hi,

Currently we are running with OTK3.2 and we are planning to upgrade our OTK to 3.6. As part of this we already have upgraded gateway to 9.2. Now my question is, after upgrading existing OTK DB "Do we have to uninstall existing OTK3.2 solution kit completely from Manage Solution Kits and install OTK3.6 solution kit? or can we install OTK3.6 with different instance modifier with out uninstalling OTK3.2?"

Thanks,

Saleem

Hi sheiks,

You should install the 3.6 solution kit with an instance modifier and merge any customizations from 3.2 to 3.6 before uninstalling the 3.2 solution kit. If you have additional questions you may want to move this to a new thread as it is a bit unrelated to the question posed here initially.

More details can be found here: Upgrade and Uninstall - CA API Management OAuth Toolkit - 3.6 - CA Technologies Documentation 

Regards,

Joe