POST request using guzzle6 with pfx-certificate

Question

Is it possible to create a POST request using guzzle6 which has .pfx-certificate attached to it?

The documention only mentions pem-format: http://docs.guzzlephp.org/en/stable/request-options.html#cert

Just convert the [`.pfx` file to `.pem`](https://stackoverflow.com/questions/15413646/converting-pfx-to-pem-using-openssl). — Alexey Shokov, Dec 05 '17 at 18:41
I tried this but using pem format didn't work out in my context. Apparently there are some problems with mac os x and pem certificate https://stackoverflow.com/questions/40712352/curl-error-58-ssl-cant-load-the-certificate-and-its-private-key-osstat — jjei, Dec 14 '17 at 08:48

score 2 · Accepted Answer · answered Dec 14 '17 at 08:55

2

Although the documentation at http://docs.guzzlephp.org/en/stable/request-options.html#cert doesn't mention it, it seems to be possible to also use pfx-format with guzzle.

answered Dec 14 '17 at 08:55

jjei

1,180
3
13
21

i tried using the .p12 [personal information exchange] file and it does not work. – Jignesh Rawal Apr 26 '18 at 10:08

score 0 · Answer 2 · answered Oct 05 '21 at 23:12

PFX certificates are used for "mutual authentications", that means, the PFX is generated with your local private key and the remote public cert.

To generate a PFX key you run:

openssl pkcs12 -inkey your_privkey.pem -in remote_pub.cert -export -out mixed.pfx

To make a request using the PFX cert, you can:

$api = new \GuzzleHttp\Client([
    'base_uri' => $baseUrl,
    'cert'     => 'path/to/mixed.pfx',
    'curl'     => [CURLOPT_SSLCERTTYPE => 'P12'], // to define it's a PFX key
]);

score 0 · Answer 3 · edited Jun 16 '22 at 13:31

this will work in drupal 8 too

use GuzzleHttp\Client;

 // Base URI is used with relative requests

$client = new Client([
   
        'base_uri' => 'https://www.google.com',
        'cert'     => 'pathtopfxflie/nameof.pfx',
        'curl'     => [CURLOPT_SSLCERTTYPE => 'P12']]);
$response = $client->request('METHOD', 'api path',['headers' => ['Employer' => 100]]);

//get status code using $response->getStatusCode();

$body = $response->getBody();
$arr_body = json_decode($body);

POST request using guzzle6 with pfx-certificate

3 Answers3