Disable SSL Certificate Validation for Partner API (Advanced Pack HTTP Request)

[sapyantuk]

Hello Everyone,

We are integrating several partner APIs into EspoCRM using the Advanced Pack (HTTP Request / Workflow) feature.

Some of our partner APIs currently have an expired SSL certificate.

When we test these APIs in Postman, they work properly (since Postman allows disabling SSL verification). However, when we try to call the same API from EspoCRM, the request fails.

We suspect this is happening due to SSL certificate validation on the EspoCRM server side.

Our questions:

1. Does EspoCRM (Advanced Pack HTTP Request) enforce strict SSL certificate validation?
2. Is there any way to disable SSL verification for specific HTTP requests?
3. If not available from the UI, is there any configuration or code-level setting where we can disable certificate validation?

We understand disabling SSL verification is not recommended for production, but we need a temporary workaround until the partner updates their certificate.

Additionally, if there is currently no option available to disable certificate validation, we would like to request this as a feature request. It would be very helpful if EspoCRM could allow disabling SSL certificate validation for specific workflows or HTTP requests.

Thank you.

[sapyantuk]

In some cases, we are receiving an HTTP response code 302 (Found / Redirect), but the API still returns the expected data in the response body.

How should we properly handle such cases in EspoCRM?

Is there a recommended way to process APIs that return a 302 status code but still include valid response data?

[yuri]

Hi,

It has been raised multiple times of the forum. There's no such configuration in Espo. You should configure (disable) it on your server, not in the application.

[yuri]

You can also disable certificate check in CURL settings globally.

[sapyantuk]

In Server ?
i am Using Ubuntu and Cyberpanel. How can i do that?