Powershell Invoke-RestMethod using self-signed certificates and basic authentication - any examples?

Question

I play with the RESTful API and with the Firefox RESTClient plugin everything is fine. I can easily request the API.

However, when I try to connect the same API call in powershell, it does not work!

I tried the following code from various other posts that should eliminate certificate issues, but I still can't get this to work:

# This nugget should help me to get around any self-signed certificate issues I believe $netAssembly =[Reflection.Assembly]::GetAssembly([System.Net.Configuration.SettingsSection]) if($netAssembly) { $bindingFlags = [Reflection.BindingFlags] "Static,GetProperty,NonPublic" $settingsType = $netAssembly.GetType("System.Net.Configuration.SettingsSectionInternal") $instance = $settingsType.InvokeMember("Section", $bindingFlags, $null, $null, @()) if($instance) { $bindingFlags = "NonPublic","Instance" $useUnsafeHeaderParsingField = $settingsType.GetField("useUnsafeHeaderParsing", $bindingFlags) if($useUnsafeHeaderParsingField) { $useUnsafeHeaderParsingField.SetValue($instance, $true) } } } [System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true} $headers = @{"AUTHORIZATION"="Basic YWRtaW46Y2xvdWQ="} # I exported this certificate from the web browser $cert=New-Object System.Security.Cryptography.X509Certificates.X509Certificate2("HPCSA.crt") Invoke-RestMethod -Uri https://192.168.5.3:8444/csa/rest/login/CSA-Provider/admin -Certificate $cert -Headers $headers -Method Get` 

I cannot replicate this using Powershell V3 Invoke-RestMethod, and wondered if anyone could share sample code to access an HTTPS server that has a self-signed certificate, and also use basic authorization.

Error message:

 PS C:\Users\landg> C:\Users\landg\Documents\Scripts\CSA API\CSA_API_DEMO_take2.ps1 Invoke-RestMethod : Unable to connect to the remote server At C:\Users\landg\Documents\Scripts\CSA API\CSA_API_DEMO_take2.ps1:31 char:1 + Invoke-RestMethod -Uri https://192.168.5.3:8444/csa/rest/login/CSA-Provider/admi ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : InvalidOperation: (System.Net.HttpWebRequest:HttpWebRequest) [Invoke-RestMethod], WebException + FullyQualifiedErrorId : WebCmdletWebResponseException,Microsoft.PowerShell.Commands.InvokeRestMethodCommand 

Answer 1

Source of my decision

Using this, I ended up on the actual server ... now with an HTTP 500 error, but this error is for another day.

Here is my “working” snippet:

  add-type @" using System.Net; using System.Security.Cryptography.X509Certificates; public class IDontCarePolicy : ICertificatePolicy { public IDontCarePolicy() {} public bool CheckValidationResult( ServicePoint sPoint, X509Certificate cert, WebRequest wRequest, int certProb) { return true; } } "@ [System.Net.ServicePointManager]::CertificatePolicy = new-object IDontCarePolicy Invoke-RestMethod -Uri https://192.168.5.3:8444/csa/rest/login/CSA-Provider/admin -Headers @{"AUTHORIZATION"="Basic YWRtaW46Y2xvdWQ="} -Method Get 

Hope this helps some of the few frustrating hours :)

Answer 2

 [System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true}