Visa Developer Community

Hi @granular-smart ,   Can you refer the below links and see if they help in any way? https://community.developer.visa.com/t5/Connection-Security-Errors/The-request-was-aborted-Could-not-create-SSL-TLS-secure-channel/td-p/8343/page/2 https://stackoverflow.com/questions/2859790/the-request-was-aborted-could-not-create-ssl-tls-secure-channel https://community.developer.visa.com/t5/Connection-Security-Errors/NET-Core-3-1-The-credentials-supplied-to-the-package-were-not/m-p/14487/highlight/true#M1165   ... View more

Hi @granular-smart ,   Can you print all the response headers and share the values?   Sample code below try { Console.WriteLine ("Making {0} request to URL: {1}", request.Method, requestURL); HttpWebResponse httpWebResponse = (HttpWebResponse) request.GetResponse (); var responseBody = new StreamReader (httpWebResponse.GetResponseStream ()).ReadToEnd (); Console.WriteLine ("Response status: " + httpWebResponse.StatusCode); Console.WriteLine (responseBody); } catch (WebException webException) { HttpWebResponse httpWebResponse = (HttpWebResponse) webException.Response; Console.WriteLine ("Received error status code: " + httpWebResponse.StatusCode); Console.WriteLine (); Console.WriteLine ("The following headers were received in the response:"); for (int i = 0; i < httpWebResponse.Headers.Count; ++i) { Console.WriteLine ("Header Name: {0}, Value: {1}", httpWebResponse.Headers.Keys[i], httpWebResponse.Headers[i]); } } ... View more

Hi @granular-smart ,   For C# you need to generate a .p12 file (PKCS12 keystore) using your private key and certificate. You can generate it using the below openssl command openssl pkcs12 -export -out keyandcertificate.p12 -inkey key.pem -in cert.pem   The following C# code works for me.   using System; using System.IO; using System.Net; using System.Net.Http; using System.Security.Cryptography.X509Certificates; using System.Text; public class HelloWorld { public static void Main (string[] args) { string requestURL = "https://sandbox.api.visa.com/vdp/helloworld"; // TODO: put your userID from VDP here string userID = ""; // TODO: put your password here string password = ""; /** Using you private key (key.pem) and certificate (cert.pem) generate a p12 keystore using the below openssl command. openssl pkcs12 -export -out keyandcertificate.p12 -inkey key.pem -in cert.pem Add a password. Put the same password as the variable 'certificatePassword' below **/ // TODO: put path to .p12 file here (e.g. /Users/vivek/Downloads/keyandcertificate.p12) string certificatePath = ""; HttpWebRequest request = WebRequest.Create (requestURL) as HttpWebRequest; request.Accept = "application/json"; request.Headers["Authorization"] = GetBasicAuthHeader (userID, password); var certificatePassword = "1234"; var certificate = new X509Certificate2 (certificatePath, certificatePassword); request.ClientCertificates.Add (certificate); Console.WriteLine ("Making GET request to " + requestURL); HttpWebResponse httpWebResponse = (HttpWebResponse) request.GetResponse (); var responseBody = new StreamReader (httpWebResponse.GetResponseStream ()).ReadToEnd (); Console.WriteLine ("Response status: " + httpWebResponse.StatusCode); Console.WriteLine (responseBody); } private static string GetBasicAuthHeader (string userId, string password) { string authString = userId + ":" + password; var authStringBytes = Encoding.UTF8.GetBytes (authString); string authHeaderString = Convert.ToBase64String (authStringBytes); return "Basic " + authHeaderString; } }  Please try it out and let me know if you face any issues. ... View more

Hi granular-smart,   Can you log (Console.WriteLine) the response headers as well?   Refer example here - https://docs.microsoft.com/en-us/dotnet/api/system.net.httpwebresponse.headers?view=netcore-3.1   Once you log the response headers you should see a header with the name 'X-CORRELATION-ID'. If you do can you please share that header value?   Regarding the XML response in Postman - can you pass the 'Accept' header as 'application/json'.   Passing that header should return a JSON response instead of XML. ... View more

Adding some openssl commands that I find helpful   // To generate a private key (privateKey.pem) and a Certificate Signing Request (CSR) using that private key (test.csr) $ openssl req -new -keyout privateKey.pem -out test.csr // With the above command you will prompted to enter information like PEM passphrase (for private key), country code, state/province, locality, organization, common name. // If you already have all the above information (country code, locality, ... etc.) handy, the below command can be used to generate the CSR in one step. // This is useful in case you want to automate generation of you private key and CSR. // It is also helpful when generating your CSR for Certification and Production environments (Certification and Production require the additional mandatory field UID) // Below is just an example - always use a stronger password openssl req -new -keyout privateKey.pem -out test.csr -subj /emailAddress=example@visa.com/UID=c3f1a141-c31d-4a75-bfa1-8e99da135f82/CN=services.visa.com/O=Visa/OU=VDP/C=US/ST=Texas/L=Austin -passout pass:1234 // If you have multiple private key, CSR and certificate files and are not sure which private key maps to which CSR or certificate you can use the below commands openssl req -in test.csr -modulus -noout | openssl md5 openssl rsa -in privateKey.pem -modulus -noout | openssl md5 openssl x509 -in cert.pem -modulus -noout | openssl md5 // If the commands above give the same output then they are part of the same pair     ... View more

Adding some openssl commands that I find helpful   // To generate a private key (privateKey.pem) and a Certificate Signing Request (CSR) using that private key (test.csr) $ openssl req -new -keyout privateKey.pem -out test.csr // With the above command you will prompted to enter information like PEM passphrase (for private key), country code, state/province, locality, organization, common name. // If you already have all the above information (country code, locality, ... etc.) handy, the below command can be used to generate the CSR in one step. // This is useful in case you want to automate generation of you private key and CSR. // It is also helpful when generating your CSR for Certification and Production environments (Certification and Production require the additional mandatory field UID) // Below is just an example - always use a stronger password openssl req -new -keyout privateKey.pem -out test.csr -subj /emailAddress=example@visa.com/UID=c3f1a141-c31d-4a75-bfa1-8e99da135f82/CN=services.visa.com/O=Visa/OU=VDP/C=US/ST=Texas/L=Austin -passout pass:1234 // If you have multiple private key, CSR and certificate files and are not sure which private key maps to which CSR or certificate you can use the below commands openssl req -in test.csr -modulus -noout | openssl md5 openssl rsa -in privateKey.pem -modulus -noout | openssl md5 openssl x509 -in cert.pem -modulus -noout | openssl md5 // If the commands above give the same output then they are part of the same pair   ... View more

Hi Reighn,   The code seems to be working fine. The 400 response must be because of an incorrect value in the request payload. Which API are you trying with what payload?   Thanks, Vivek ... View more

Hi Reighn,   Can you share the exact request/code that you're trying to use? ... View more