Netsuite | Go-Daddy Certificate Authority Verification

Introduction

This guide demonstrates how to check and verify the Go-Daddy trusted third party certificate authorities used by the customer on Netsuite Suitescript API

Pre-requisites

One must have basic knowledge of the following:

• Suitescripting
• Certificate Authority
• SSL

Overview

In cryptography, a certificate authority or certification authority (CA) is an entity that issues digital certificates for use by other parties. It is an example of a trusted third party. CAs are characteristic of many public key infrastructure (PKI) schemes.

The list of supported third-party certificate authority in Netsuite is documented here:

Netsuite Help Guide > SuiteFlex (Customization, Scripting, and Web Services) > SuiteScript > SuiteScript API > SuiteScript Functions > Application Navigation APIs > nlapiRequestURL(url, postdata, headers, callback)

Go-Daddy has two flavors of supported CA included in the list:

Go-Daddy ValiCert Legacy Certificate Chain

• valicert_class2_root.cer
• gd-class2-root.cer

NOTE: The list may not be limited on the help guide as of the time of writing.

Steps on verifying if the Go-Daddy CA is supported in Netsuite

1. Go to the URL of the site that you are using. Example: https://somewebsite.com/
2. Look for the ‘padlock’ icon in the browser; this is an indication that it is a secure connection.

1. Click the ‘padlock’ icon. It will open a new window with the certificate authority information. Click the ‘Certification information’ button

NOTE: This is a Google Chrome browser, the CA information presentation is different from Firefox, IE and Safari but all the essentials details are included regardless of browser type.

1. In this example, it shows that it is a ‘Go Daddy Class 2 Certification Authority’.
2. Go to the Go Daddy URL where the certificate chain is listed: https://certs.godaddy.com/anonymous/repository.seam#root_der

Verification

To verify if the Certificate Authority is supported in Netsuite test it using nlapiRequestURL API:

var url = "http://google.com";
var response = nlapiRequestURL(url);
var code = response.getCode();
//code value should be 200