AJAX Toolkit Developer Guide

AJAX Toolkit Developer Guide
When to Use the AJAX Toolkit
Working with the AJAX Toolkit
API Calls and the AJAX Toolkit
SOAP Header Options with the AJAX Toolkit
Error Handling with the AJAX Toolkit
Advanced Topics
QueryResultIterator
Differences in Escaping Reserved Characters
Working with Base64 Binary Encoded Strings
Timeout Parameter for Asynchronous Calls
AJAX Proxy
remoteFunction Syntax and Parameters
Download the Salesforce Client Certificate
Glossary
PDF

Newer Version Available

This content describes an older version of this product. View Latest

Download the Salesforce Client Certificate

Your application (endpoint) server’s SSL/TLS might be configured to require client certificates (two-way SSL/TLS) to validate the identity of the Salesforce server when it takes the role of client to your server. If this is the case, you can download the Salesforce client certificate from the Salesforce API page.
  1. From Setup, enter API in the Quick Find box, then select API.
  2. On the API WSDL page, click Manage API Client Certificate.
  3. On the Certificate and Key Management page, in the API Client Certificate section, click the API Client Certificate.
  4. On the Certificates page, click Download Certificate. The .crt file is saved in the download location specified in your browser.

    Import the downloaded certificate into your application server, and configure your application server to request the client certificate. The application server then checks that the certificate used in the SSL/TLS handshake matches the one you downloaded.

Your application (endpoint) server must send intermediate certificates in the certificate chain, and the certificate chain must be in the correct order. The correct order is:

  1. Server certificate
  2. Intermediate certificate that signed the server certificate if the server certificate wasn’t signed directly by a root certificate
  3. Intermediate certificate that signed the certificate in step 2
  4. Any remaining intermediate certificates

Don’t include the root certificate authority certificate. The root certificate isn’t sent by your server. Salesforce already has its own list of trusted certificates on file, and a certificate in the chain must be signed by one of those root certificate authority certificates.

Note