# Https ssl chain

**URL:** <https://discourse.nodered.org/t/https-ssl-chain/80278>\
**Category:** General\
**Tags:** http-request, security\
**Created:** [3 August 2023 10:19 UTC](https://discourse.nodered.org/t/https-ssl-chain/80278 "2023-08-03T10:19:43Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hasper](https://avatars.discourse-cdn.com/v4/letter/h/87869e/32.png) [@Hasper](https://discourse.nodered.org/u/Hasper)\
**Post date:** [3 August 2023 10:19 UTC](https://discourse.nodered.org/t/https-ssl-chain/80278/1 "2023-08-03T10:19:44Z")

</div>

Hi. I installed the certificate and now use the NR in https mode. However, the API I'm trying to work with requires NR to install a full chain of ssl certificates (Unable to verify the first certificate). How to install the entire certificate chain?

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [3 August 2023 16:25 UTC](https://discourse.nodered.org/t/https-ssl-chain/80278/2 "2023-08-03T16:25:51Z")

</div>

Typically, if you cannot turn off cert validation, you need to provide a cert signed by a trusted public CA. I'm assuming that your cert is a self-signed one?

---

<div class="post-metadata">

**Author:** ![Hasper](https://avatars.discourse-cdn.com/v4/letter/h/87869e/32.png) [@Hasper](https://discourse.nodered.org/u/Hasper)\
**Post date:** [3 August 2023 21:24 UTC](https://discourse.nodered.org/t/https-ssl-chain/80278/3 "2023-08-03T21:24:00Z")

</div>

The fact is that NR accepts data from a third - party system and I cannot influence it and force it to request data ignoring certificate verification . I have a full-fledged certificate with all the necessary chains, but I do not know how to install them NR

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [4 August 2023 18:58 UTC](https://discourse.nodered.org/t/https-ssl-chain/80278/4 "2023-08-04T18:58:32Z")

</div>

You would need to look into how Node.js handles certs. I suspect that it simply relies on OS capabilities.

OS's each have their own ways of managing certificate trust and you would need to load their trusted root into your OS's root cert store.

---

<div class="post-metadata">

**Author:** ![Hasper](https://avatars.discourse-cdn.com/v4/letter/h/87869e/32.png) [@Hasper](https://discourse.nodered.org/u/Hasper)\
**Post date:** [4 August 2023 19:02 UTC](https://discourse.nodered.org/t/https-ssl-chain/80278/5 "2023-08-04T19:02:48Z")

</div>

it doesn't depend on the operating system at all. NR raises its web server, which responds to https requests, if a web browser is simple enough, then some systems need a complete chain so that the https connection meets the specification completely.

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [4 August 2023 19:12 UTC](https://discourse.nodered.org/t/https-ssl-chain/80278/6 "2023-08-04T19:12:32Z")

</div>

OK, you haven't really explained what is going on then. You need to explain more about the data flows because it isn't clear.

---

<div class="post-metadata">

**Author:** ![Hasper](https://avatars.discourse-cdn.com/v4/letter/h/87869e/32.png) [@Hasper](https://discourse.nodered.org/u/Hasper)\
**Post date:** [4 August 2023 19:16 UTC](https://discourse.nodered.org/t/https-ssl-chain/80278/7 "2023-08-04T19:16:45Z")

</div>

yes, everything is simple from the side of NR there is an http in service that accepts post \get requests from a third-party service that meticulously checks https and determines the node NR as unreliable because it does not comply with the https specification and gives only a certificate without a full chain of certificates.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [3 October 2023 19:17 UTC](https://discourse.nodered.org/t/https-ssl-chain/80278/8 "2023-10-03T19:17:03Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.