# \#ssl

**URL:** https://community.postman.com/tag/ssl/48.md

[Latest](https://community.postman.com/latest.md) · [Categories](https://community.postman.com/categories.md) · [Tags](https://community.postman.com/tags.md)

---

## [Environment variables not picked up by ClI](https://community.postman.com/t/environment-variables-not-picked-up-by-cli/89867)

<div class="topic-metadata">

**Author:** [@adam-cimoch-d8f487b0](https://community.postman.com/u/adam-cimoch-d8f487b0)\
**Replies:** 2\
**Last updated:** [April 14, 2026, 11:46am UTC](https://community.postman.com/t/environment-variables-not-picked-up-by-cli/89867 "2026-04-14T11:46:42Z")

</div>

I tried to run a Postman collection via CLI. From what I found on internet CLI works only with collections in workspace that are pushed to postman cloud, not locally? Am I correct? (Resolved) I had my environment variab…

---

## [Postman Desktop reports Self signed certificate in certificate chain, web does not](https://community.postman.com/t/postman-desktop-reports-self-signed-certificate-in-certificate-chain-web-does-not/82537)

<div class="topic-metadata">

**Author:** [@markwindle](https://community.postman.com/u/markwindle)\
**Replies:** 0\
**Last updated:** [July 18, 2025, 8:48am UTC](https://community.postman.com/t/postman-desktop-reports-self-signed-certificate-in-certificate-chain-web-does-not/82537 "2025-07-18T08:48:33Z")

</div>

I fully appreciate this could an issue on my understanding as I by no means an SSL certificate expert, I know enough to request, generate and apply them. Recently I had to update one, but since that point the desktop ve…

---

## [Add Client Certs in Vs code postman plugin](https://community.postman.com/t/add-client-certs-in-vs-code-postman-plugin/79798)

<div class="topic-metadata">

**Author:** [@thunderblue](https://community.postman.com/u/thunderblue)\
**Replies:** 2\
**Last updated:** [July 11, 2025, 6:08am UTC](https://community.postman.com/t/add-client-certs-in-vs-code-postman-plugin/79798 "2025-07-11T06:08:15Z")

</div>

How do I add ssl client certs in vscode postman plugin ?

---

## [Multiple SSL certificates with the same HOST](https://community.postman.com/t/multiple-ssl-certificates-with-the-same-host/6832)

<div class="topic-metadata">

**Author:** [@jagfarrell](https://community.postman.com/u/jagfarrell)\
**Replies:** 5\
**Last updated:** [November 27, 2024, 11:54am UTC](https://community.postman.com/t/multiple-ssl-certificates-with-the-same-host/6832 "2024-11-27T11:54:55Z")

</div>

Please search for related topics, and then read through the guidelines before creating a new issue. Describe the bug I have added multiple SSL certificates but all have the same Host. I need a way to specify the certif…

---

## [Postman VS cURL different mTLS result](https://community.postman.com/t/postman-vs-curl-different-mtls-result/56443)

<div class="topic-metadata">

**Author:** [@frcake](https://community.postman.com/u/frcake)\
**Replies:** 2\
**Last updated:** [January 11, 2024, 1:39pm UTC](https://community.postman.com/t/postman-vs-curl-different-mtls-result/56443 "2024-01-11T13:39:48Z")

</div>

I have a certificate which I normally use with my ruby application to connect to APIs that need mTLS. I have added a new API to my application but my ruby app fails to establish the mTLS correctly. When I try from Postm…

---

## [Custom documentation domain showing SSL error](https://community.postman.com/t/custom-documentation-domain-showing-ssl-error/39226)

<div class="topic-metadata">

**Author:** [@partner-solutions-lo](https://community.postman.com/u/partner-solutions-lo)\
**Replies:** 5\
**Last updated:** [September 19, 2022, 10:31am UTC](https://community.postman.com/t/custom-documentation-domain-showing-ssl-error/39226 "2022-09-19T10:31:33Z")

</div>

https://prod-global-saas-postman.loconav.com/ is our custom domain. It started showing SSL error from today. Can we get some help here.

---

## [SSL Error when getting remote page](https://community.postman.com/t/ssl-error-when-getting-remote-page/38480)

<div class="topic-metadata">

**Author:** [@gsykes537](https://community.postman.com/u/gsykes537)\
**Replies:** 0\
**Last updated:** [August 23, 2022, 9:13pm UTC](https://community.postman.com/t/ssl-error-when-getting-remote-page/38480 "2022-08-23T21:13:49Z")

</div>

Hi everyone, I’m trying to use postman to get the page https://services.leeds.gov.uk/RoadSurfaceDamage/ but when I’m getting the error \`unable to verify the first certificate. If I disable SSL checking, it works fine, a…

---

## [Control TLS extension SNI server name](https://community.postman.com/t/control-tls-extension-sni-server-name/37342)

<div class="topic-metadata">

**Author:** [@axelitus](https://community.postman.com/u/axelitus)\
**Replies:** 0\
**Last updated:** [July 20, 2022, 2:15am UTC](https://community.postman.com/t/control-tls-extension-sni-server-name/37342 "2022-07-20T02:15:13Z")

</div>

Is there a way to control the SNI server name sent in the TLS Client Hello? References: What is SNI? How TLS server name indication works | Cloudflare What is Server Name Indication (SNI)? (globalsign.com) I want to …

---

## [Laragon + Laravel: "cURL error 60: SSL certificate problem: self signed certificate"](https://community.postman.com/t/laragon-laravel-curl-error-60-ssl-certificate-problem-self-signed-certificate/33401)

<div class="topic-metadata">

**Author:** [@muhammadhassan93](https://community.postman.com/u/muhammadhassan93)\
**Replies:** 4\
**Last updated:** [March 11, 2022, 12:17pm UTC](https://community.postman.com/t/laragon-laravel-curl-error-60-ssl-certificate-problem-self-signed-certificate/33401 "2022-03-11T12:17:44Z")

</div>

Let me explain my problem as I am using Laragon for my local environment and turned on SSL in it. Also I am using Postman v9.14.12. My project is on Laravel 5.7 and I am trying to use my created APIs from Postman. Every…

---

## [Getting SSL Socket connection error for all calls with Rest Assured in Eclipse, same calls works fine in Postman](https://community.postman.com/t/getting-ssl-socket-connection-error-for-all-calls-with-rest-assured-in-eclipse-same-calls-works-fine-in-postman/33353)

<div class="topic-metadata">

**Author:** [@nirmalayadav](https://community.postman.com/u/nirmalayadav)\
**Replies:** 0\
**Last updated:** [March 9, 2022, 9:56pm UTC](https://community.postman.com/t/getting-ssl-socket-connection-error-for-all-calls-with-rest-assured-in-eclipse-same-calls-works-fine-in-postman/33353 "2022-03-09T21:56:57Z")

</div>

Sample API call:- RestAssured.config=RestAssured.config().sslConfig(new SSLConfig().relaxedHTTPSValidation(“SSL”)); RestAssured.given().auth().basic("", “”) .when() .get("") .then() .assertThat() .statusCode(HttpS…

---

## [Defining if the requested server has ssl certificate](https://community.postman.com/t/defining-if-the-requested-server-has-ssl-certificate/31541)

<div class="topic-metadata">

**Author:** [@material-candidate-1](https://community.postman.com/u/material-candidate-1)\
**Replies:** 0\
**Last updated:** [January 13, 2022, 8:45pm UTC](https://community.postman.com/t/defining-if-the-requested-server-has-ssl-certificate/31541 "2022-01-13T20:45:26Z")

</div>

How can I get the ssl certificate status capturing tls attributes of the network logs or Postman Sandbox libraries? Hello Postman Community, I have an issue when writing the tests for Postman collection, one of the serv…

---

## [Postman trusts a certificate with CN different from the host name in the URL](https://community.postman.com/t/postman-trusts-a-certificate-with-cn-different-from-the-host-name-in-the-url/31527)

<div class="topic-metadata">

**Author:** [@vineshsy](https://community.postman.com/u/vineshsy)\
**Replies:** 0\
**Last updated:** [January 13, 2022, 2:35pm UTC](https://community.postman.com/t/postman-trusts-a-certificate-with-cn-different-from-the-host-name-in-the-url/31527 "2022-01-13T14:35:56Z")

</div>

My question: The request which I am trying to execute is a presigned URL of an AWS S3 PUT request. The host name in this pre-signed URL (\<customdomain\>.com) points to the original host name of the presigned URL (\<bucke…

---

## [Cipher Suites Used in Postman](https://community.postman.com/t/cipher-suites-used-in-postman/29202)

<div class="topic-metadata">

**Author:** [@franklinm](https://community.postman.com/u/franklinm)\
**Replies:** 0\
**Last updated:** [October 28, 2021, 5:42pm UTC](https://community.postman.com/t/cipher-suites-used-in-postman/29202 "2021-10-28T17:42:00Z")

</div>

I am unable to find a list of cipher suites used by Postman. An HTTPS web server that I setup is logging “Unable to initialize SSL connection. Unauthorized access was denied or security settings have expired. Exception …

---

## [How to capture https traffic to local server?](https://community.postman.com/t/how-to-capture-https-traffic-to-local-server/28961)

<div class="topic-metadata">

**Author:** [@artemad](https://community.postman.com/u/artemad)\
**Replies:** 0\
**Last updated:** [October 21, 2021, 1:49pm UTC](https://community.postman.com/t/how-to-capture-https-traffic-to-local-server/28961 "2021-10-21T13:49:54Z")

</div>

I have a local server for testing purposes on 127.0.0.1 with certificate from Let’s Encrypt. Also I add a domain name in my hosts file: 127.0.0.1 local.myserver.com Now I want to capture traffic from my desktop app to…

---

## [Loading Enterprise CA certificates into Postman](https://community.postman.com/t/loading-enterprise-ca-certificates-into-postman/28134)

<div class="topic-metadata">

**Author:** [@supply-pilot-8198032](https://community.postman.com/u/supply-pilot-8198032)\
**Replies:** 0\
**Last updated:** [September 24, 2021, 8:16pm UTC](https://community.postman.com/t/loading-enterprise-ca-certificates-into-postman/28134 "2021-09-24T20:16:20Z")

</div>

I’m trying to use Postman (v9.0.3) to connect to some internal web services over HTTPS/SSL that are secured with a certificate created by our enterprise certificate authority. The client system is AD domain joined, and h…

---

## [Certificate not generating. OpenSSL installed, restarted application](https://community.postman.com/t/certificate-not-generating-openssl-installed-restarted-application/27724)

<div class="topic-metadata">

**Author:** [@suchasaltylemon](https://community.postman.com/u/suchasaltylemon)\
**Replies:** 3\
**Last updated:** [September 16, 2021, 5:29am UTC](https://community.postman.com/t/certificate-not-generating-openssl-installed-restarted-application/27724 "2021-09-16T05:29:06Z")

</div>

I am trying to read HTTPS requests through the proxy rather than the interceptor. To my understanding, after installing OpenSSL and restarting the application, Postman should be generating its own cert, but it is not gen…

---

## [SSL Error: Unable to verify the first certificate](https://community.postman.com/t/ssl-error-unable-to-verify-the-first-certificate/25849)

<div class="topic-metadata">

**Author:** [@mdepouwmc](https://community.postman.com/u/mdepouwmc)\
**Replies:** 0\
**Last updated:** [July 17, 2021, 5:21am UTC](https://community.postman.com/t/ssl-error-unable-to-verify-the-first-certificate/25849 "2021-07-17T05:21:07Z")

</div>

My question: I have a locally trusted certificate but postman is unable to verify it, why not? :thinking: Details (like screenshots): from chrome: I’ve already tried: googling & reading

---

## [Configuring CA certificate is not working](https://community.postman.com/t/configuring-ca-certificate-is-not-working/20688)

<div class="topic-metadata">

**Author:** [@gokula.p.krishnan](https://community.postman.com/u/gokula.p.krishnan)\
**Replies:** 0\
**Last updated:** [February 23, 2021, 3:07am UTC](https://community.postman.com/t/configuring-ca-certificate-is-not-working/20688 "2021-02-23T03:07:48Z")

</div>

Having issues in configuring mutual SSL using CA certificate in Postman. Steps I did generated root certificate generated ca certificate signed using the root certificate generated server and client certificates, and …

---

## [Unable to verify first certificate](https://community.postman.com/t/unable-to-verify-first-certificate/16866)

<div class="topic-metadata">

**Author:** [@IHaveAName](https://community.postman.com/u/IHaveAName)\
**Replies:** 0\
**Last updated:** [October 18, 2020, 4:04am UTC](https://community.postman.com/t/unable-to-verify-first-certificate/16866 "2020-10-18T04:04:53Z")

</div>

Just installed latest version of Postman on a new laptop. I’m running into something I’ve never encountered before. I’m getting “Unable to verify the first certicate” when sending a request to my api running on localho…

---

## [What does SSL Handshake Cache mean in Postman?](https://community.postman.com/t/what-does-ssl-handshake-cache-mean-in-postman/16133)

<div class="topic-metadata">

**Author:** [@krismath](https://community.postman.com/u/krismath)\
**Replies:** 0\
**Last updated:** [September 22, 2020, 7:00pm UTC](https://community.postman.com/t/what-does-ssl-handshake-cache-mean-in-postman/16133 "2020-09-22T19:00:40Z")

</div>

I see this waterfall graph when doing an HTTPS request to some server: It says “SSL Handshake - Cache”. What does it mean by that? Does caching refer to TLS session resumption as defined in RFC5077, or is it some oth…

---

## [For SSL handshake time, does postman measure all the internal HTTPS requests?](https://community.postman.com/t/for-ssl-handshake-time-does-postman-measure-all-the-internal-https-requests/16111)

<div class="topic-metadata">

**Author:** [@krismath](https://community.postman.com/u/krismath)\
**Replies:** 1\
**Last updated:** [September 22, 2020, 3:43pm UTC](https://community.postman.com/t/for-ssl-handshake-time-does-postman-measure-all-the-internal-https-requests/16111 "2020-09-22T15:43:59Z")

</div>

Say I have 1 HTTPS service called A. A internally calls another HTTPS service B. I call service A with Postman. Postman reports the measured time for SSL handshake. Does this measured SSL handshake time includes the SSL …

---

## [SSL hanshake error](https://community.postman.com/t/ssl-hanshake-error/13009)

<div class="topic-metadata">

**Author:** [@ZAJDAN](https://community.postman.com/u/ZAJDAN)\
**Replies:** 1\
**Last updated:** [June 1, 2020, 12:22pm UTC](https://community.postman.com/t/ssl-hanshake-error/13009 "2020-06-01T12:22:52Z")

</div>

before update everything worked fine and after today update to 7.25.1 I am not able send JSON login to my page. Could not get response Error: write EPROTO 1920407800:error:100000f0:SSL routines:OPENSSL\_internal:UNSUPPO…

---

## [List of Trusted Certificate Authorities?](https://community.postman.com/t/list-of-trusted-certificate-authorities/1692)

<div class="topic-metadata">

**Author:** [@mattdodge](https://community.postman.com/u/mattdodge)\
**Replies:** 1\
**Last updated:** [August 9, 2019, 3:54pm UTC](https://community.postman.com/t/list-of-trusted-certificate-authorities/1692 "2019-08-09T15:54:36Z")

</div>

I am wondering if there is a published list of certificates that are trusted by default in the Desktop Postman client. I have a wildcard certificate that is signed by the DigiCert Global Root CA and requests in Postman a…

---

## [SSL Certificate - password in plain text](https://community.postman.com/t/ssl-certificate-password-in-plain-text/4666)

<div class="topic-metadata">

**Author:** [@jagfarrell](https://community.postman.com/u/jagfarrell)\
**Replies:** 0\
**Last updated:** [March 22, 2019, 10:02am UTC](https://community.postman.com/t/ssl-certificate-password-in-plain-text/4666 "2019-03-22T10:02:55Z")

</div>

Can you make the SSL certificate information more secure - hide the SSL password, don’t show it in plain text.

---

## [How to import ssl certificate to postman native windows application?](https://community.postman.com/t/how-to-import-ssl-certificate-to-postman-native-windows-application/3945)

<div class="topic-metadata">

**Author:** [@bhargav87](https://community.postman.com/u/bhargav87)\
**Replies:** 0\
**Last updated:** [January 30, 2019, 4:59am UTC](https://community.postman.com/t/how-to-import-ssl-certificate-to-postman-native-windows-application/3945 "2019-01-30T04:59:26Z")

</div>

Team, people, how to import server ssl certificate to postman native windows application? Here, I am not referring “Postman” as chrome extension application. I am taking about the Postman native windows application. Ho…

---

## [SSL certificate matching does not seem to work](https://community.postman.com/t/ssl-certificate-matching-does-not-seem-to-work/2974)

<div class="topic-metadata">

**Author:** [@flambard](https://community.postman.com/u/flambard)\
**Replies:** 1\
**Last updated:** [October 17, 2018, 2:09pm UTC](https://community.postman.com/t/ssl-certificate-matching-does-not-seem-to-work/2974 "2018-10-17T14:09:14Z")

</div>

Hi, Can anyone shet some light on how I can debug the matching of certificates configured in Postman? Problem: I’m trying to connect to a REST service using a SSL client certificate. I configured it in the settings ta…

---

## [Local CA root cert not honored?](https://community.postman.com/t/local-ca-root-cert-not-honored/1395)

<div class="topic-metadata">

**Author:** [@ndotb](https://community.postman.com/u/ndotb)\
**Replies:** 1\
**Last updated:** [May 7, 2018, 9:49am UTC](https://community.postman.com/t/local-ca-root-cert-not-honored/1395 "2018-05-07T09:49:21Z")

</div>

I just switched from the chrome app to native (Windows 10) and it seems that Postman doesn’t honor root certificates that are stored in “Local Computer\\Trusted Root Certification Authorities\\Certificates” or the “Current…

---

## [Local environments set up with self-signed certificates causing issues when used in OAuth 2 requests](https://community.postman.com/t/local-environments-set-up-with-self-signed-certificates-causing-issues-when-used-in-oauth-2-requests/209)

<div class="topic-metadata">

**Author:** [@musaid](https://community.postman.com/u/musaid)\
**Replies:** 2\
**Last updated:** [December 10, 2017, 10:20am UTC](https://community.postman.com/t/local-environments-set-up-with-self-signed-certificates-causing-issues-when-used-in-oauth-2-requests/209 "2017-12-10T10:20:47Z")

</div>

I have a team of developers working on a medium sized application. We have live, staging and development environments set up. Live and staging uses public domains with purchased certificates, and dev instances use self-s…
