PDF download can not do when going through API-Gateway.

Products

• CA API Gateway
• API SECURITY
• CA API Gateway Precision API Monitoring Module for API Gateway (Layer 7)
• CA API Gateway Enterprise Service Manager (Layer 7)
• STARTER PACK-7
• CA Microgateway

Issue/Introduction

PDF download can not do when going through API-Gateway.

 Download failed with the following message
”Failure-Network error”

 

This issue occurs when you make a Gateway request over HTTPS.
It does not occur with HTTP.
Also, the problme only occurs in chrome.
It does not occur in other browsers (firefox, IE).

 

Reproduction procedure
1. Create Publish Web API. 2. Add Route via HTTP(S)  assertion.
     Set pdf on web server to URL
　    (http://{Webserver}/test.pdf)
2. Call the above services over HTTPS from Chrome.
　  (https://{Gatway host}:8443/{target service})
3. The PDF will be displayed. Click the download button in Chrome.
result:
 Download failed with the following message
”Failure-Network error”

Environment

Release : All versions

Component : API GATEWAY

Resolution

It's not an issue of gateway, it's an issue of the certificate and Chrome. Chrome has high requirements on the certificates.

Chrome need certificates with Subject Alternate Names.
But the Gateway is not capable of generating Certificate Signing Requests that support subject alternate names.
This is an enhancement request

Work around:
1. On your computer, open Chrome.
2. At the top right, click More   Settings.
3. At the bottom, click Advanced.
4. Under "Privacy and security," click Site settings.
5. Near the bottom, click PDF documents.
6. Turn on Download PDF files instead of automatically opening them in Chrome.

The PDF page is not displayed, but you can download it.