funny_mentor15A8

Participant

Question

API for Updloading Two Way SSL Cert for Webhook Validation

Forum|Forum|4 years ago
September 23, 2021
1 reply
704 views

Hi,

Are there any APIs that allow us the securely transfer and update two way client certificates used for webhook validation? I have a requirement to auto rotate all certificates our service uses at a regular interval, including the client certificate we use for webhook validation. I want to ensure that the certificate is also automatically updated in our partner account when that rotation occurs.

Thanks.

This topic has been closed for replies.

Adobe Employee

No there isn't. You can only upload the cert manually via the Sign webportal.

funny_mentor15A8Author

Participant

Thanks Simon.

Do you know if there are any plans for this or any alternative validation schemes that do not require a client certificate?

Thanks.

Adobe Employee

The best practices around securing webhooks are listed here

https://www.adobe.io/apis/documentcloud/sign/docs.html#!adobedocs/adobe-sign/master/webhooks.md#securing-webhooks

I don't foresee any changes on the short term and i can't speak about longer terms as I have no knowledge on that.