Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Providing additionally trusted CA certificate to newman

See original GitHub issue

Hi there,

I am using newman 4.5.5 (and love it - great work!) on Mac, installed via brew.

In newman, there are useful options for providing SSL client certificate and key files when running a collection against a https API, that verifies client certificates. However, there is no option to privide a trusted CA certificate.

This causes issues when testing APIs, that use a self signed server certificate, that thus cannot be verified by newman.

I know, that the --insecure option can be used to disable certificate verification, but in my opinion, this defeats the purpose - newman should be able to verify the server certificate even though it is self signed.

Is there a specific reason, why this functionality is not implemented so far? I had a quick look in the newman code and to mee, it seems, that the extra CA could be passed to the postman-runtime in lib/run/index.js, when the runner.run() function is called. There, the requester options can be set. According to postman-runtime, an extra CA can be provided here.

what do you think? Might this be feasible, or do you perfer to use the --insecure flag?

Cheers Julian

Issue Analytics

State:
Created 4 years ago
Reactions:2
Comments:5 (1 by maintainers)

Top GitHub Comments

8reactions

codenirvanacommented, Feb 24, 2020

--ssl-extra-ca-certs option is added in Newman v4.6.0 🎉

2reactions

JulesRenzcommented, Jan 15, 2020

Hello folks, I have implemented the feature in PR #2208. Your support for this PR is much apprecated.

Cheers Julian

Top Results From Across the Web

How to send ssl cert in newman request - Stack Overflow

I have a collection that executes that GET request, and it works just fine on Postman (after configuring the certs in the UI),...

Newman-One of the ways for API Integration testing

Incase you do have CA certs, then you can provide them using the `— ssl-extra-ca-certs` and the path to the file, that holds...

I am having trouble adding client certificates - Postman

Go to Settings > Certificates and add the correct client certificate file (PEM for CA certificates, CRT, KEY, or PFX for self-signed ...

Keywords - newman - npm

Start using newman in your project by running `npm i newman`. There are 156 other projects in the npm registry using newman.

newman run <collection> - Fig.io

--ssl-extra-ca-certs <path>, Specify additionally trusted CA certificates (PEM). --cookie-jar <path>, Specify the path to a custom cookie jar (serialized ...