@@ -14,6 +14,7 @@
 import com.axway.apim.lib.error.ErrorCode;
 import com.axway.apim.lib.utils.Utils;
 import com.axway.apim.lib.utils.rest.*;
+import com.fasterxml.jackson.core.type.TypeReference;
 import com.fasterxml.jackson.databind.JsonNode;
 import com.fasterxml.jackson.databind.ObjectMapper;
 import org.apache.commons.io.IOUtils;
@@ -251,7 +252,7 @@ public void switchOrgAndRole(User user, String targetOrgName) {
         if (organizationsIdToName == null)
             return;
 
-        for (Map.Entry<String,String> entry : organizationsIdToName.entrySet()) {
+        for (Map.Entry<String, String> entry : organizationsIdToName.entrySet()) {
             String orgName = entry.getValue();
             if (orgName.equals(targetOrgName)) {
                 String role = user.getOrgs2Role().get(entry.getKey());
@@ -598,6 +599,28 @@ public static String getCertInfo(InputStream certificate, String password, CaCer
         }
     }
 
+
+    public List<CaCert> getCertInfoFromUrl(String url) throws AppException {
+        try {
+            URI uri = new URIBuilder(cmd.getAPIManagerURL()).setPath(cmd.getApiBasepath() + "/certinfoFromUrl").build();
+            List<NameValuePair> params = new ArrayList<>();
+            params.add(new BasicNameValuePair("url", url));
+            params.add(new BasicNameValuePair("inbound", "true"));
+            POSTRequest postRequest = new POSTRequest(new UrlEncodedFormEntity(params), uri);
+            try (CloseableHttpResponse httpResponse = (CloseableHttpResponse) postRequest.execute()) {
+                int statusCode = httpResponse.getStatusLine().getStatusCode();
+                if (statusCode != 200) {
+                    String response = EntityUtils.toString(httpResponse.getEntity());
+                    throw new AppException("API-Manager failed to read certificate information from URL. Got response: '" + response + "'", ErrorCode.API_MANAGER_COMMUNICATION);
+                }
+                return mapper.readValue(httpResponse.getEntity().getContent(), new TypeReference<>() {
+                });
+            }
+        } catch (Exception e) {
+            throw new AppException("API-Manager failed to read certificate information from file.", ErrorCode.API_MANAGER_COMMUNICATION, e);
+        }
+    }
+
     /**
      * Helper method to translate a Base64 encoded format
      * as it's needed by the API-Manager.
 
@@ -17,6 +17,7 @@
 import java.io.IOException;
 import java.io.InputStream;
 import java.util.HashMap;
+import java.util.List;
 import java.util.Map;
 
 public class APIManagerAdapterTest extends WiremockWrapper {
@@ -279,4 +280,13 @@ public void getCertInfo() {
             Assert.fail("fail to process certificate");
         }
     }
+
+
+
+    @Test
+    public void getCertInfoFromUrl() throws Exception {
+        List<CaCert> caCerts = apiManagerAdapter.getCertInfoFromUrl("https://petstore3.swagger.io");
+        Assert.assertNotNull(caCerts);
+        Assert.assertEquals(3, caCerts.size());
+    }
 }
@@ -0,0 +1,53 @@
+[
+  {
+    "certBlob": "MIIFuzCCBKOgAwIBAgIQDA/hD1fRPCrIcxmhdMuzVDANBgkqhkiG9w0BAQsFADA8MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24gUlNBIDIwNDggTTA0MB4XDTI1MTAyOTAwMDAwMFoXDTI2MTEyNzIzNTk1OVowFzEVMBMGA1UEAwwMKi5zd2FnZ2VyLmlvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy7sIxWIu1MSwu27YshvPWHTb1gmdgTqpSkAlqr1QMcr4kLdMtExIXFqYju47YkAWbwDD36OvNouvCsGqmpdZKBKhM/i5SEa0OEt9+qPSOo+CUC2dOC7MbXfsQJWNehg0S5+FodRwz6pccI9myrSUYulknGk65n5K4lGsUTdfRWOCswY5n6Vjh0tjvSaCATK17QT9iuJTgdoAnTIqUE71OHGXTKwun3nb9YNHQjY4S0vXbdIOloJlz+A93g7BaPfHesl/UzHZj5mlqi1dkQhstBTFjYVGU1mN4e5q2qGUpWkZJoBYaeB5ZqgaVvcok2xdAFrsi6Fm3Qwxd8W1qr8NwIDAQABo4IC3DCCAtgwHwYDVR0jBBgwFoAUH1KSYVaCVH+BZtgdPQqqMlyH3QgwHQYDVR0OBBYEFIsAMEqntVhlqbMBhcV+N69QsnOwMBcGA1UdEQQQMA6CDCouc3dhZ2dlci5pbzATBgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wNC5hbWF6b250cnVzdC5jb20vcjJtMDQuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDQuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTA0LmFtYXpvbnRydXN0LmNvbS9yMm0wNC5jZXIwDAYDVR0TAQH/BAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHYA2AlVO5RPev/IFhlvlE+Fq7D4/F6HVSYPFdEucrtFSxQAAAGaLZFbVwAABAMARzBFAiEAmfmelNXwYNyuWML8BFZWTu/lKBgFoApP0ctfrWRe5cwCICokXEIFmu1v9MBDDzZOpAU5AHmDSjvJcdhqvfApqxALAHcAwjF+V0UZo0XufzjespBB68fCIVoiv3/Vta12mtkOUs0AAAGaLZFbUQAABAMASDBGAiEA0Sc5UyEftg1ZzKRP/qfhZYlvFccze/B41zSywFE662oCIQDSaWymxHRhru8sL8ysM6NTReDzeBNtwtgW3xsgIq3crgB2AJROQ4f67MHvgfMZJCaoGGUBx9NfOAIBP3JnfVU3LhnYAAABmi2RW2QAAAQDAEcwRQIhAOXIUorOhb7Tk4BuWLv02Ob5/b3/mZ8BsGhJg9PaO5odAiBY8PXxWeBHajPu1ELPEnijyuxYdNE7aPpjwsiX5FuiBTANBgkqhkiG9w0BAQsFAAOCAQEAvXb8w2dc5DSNQ7zpRDKB1DEqiOAXfL9X8mnQfrTuPZ+oGuzsEow/SRMsTZw1XhuMPaakMT06fXrCbuc7VUZTMzYg/svTfAyDuPEXr1PM3LnXFPnJxB0r6rQP0AGUV4Khbo4YfgRZEa+y3N7tQ+LcykoY8A3AImVzskVZzKtDWMABZj60I2LLozbKjvqTsMJ+Vj1BQbIacNtIax4mSHc3u9uVTr5kmtU5WDyXFTRrDqh2vAcMFHkE6I7sm8OZXiP2QOBECCgeJlbms9ewdq5imOuOQ8O59eHyWHrYhc7N7bWV3VVnVIvuDF27Rtjc9RTpAc9h4QxlhxqSDiWqkZjhVA==",
+    "name": "CN=*.swagger.io",
+    "alias": "CN=*.swagger.io",
+    "subject": "CN=*.swagger.io",
+    "issuer": "CN=Amazon RSA 2048 M04, O=Amazon, C=US",
+    "version": 3,
+    "notValidBefore": 1761696000000,
+    "notValidAfter": 1795823999000,
+    "signatureAlgorithm": "RSA (2048 bits)",
+    "sha1Fingerprint": "5B:7A:AA:6A:8A:7D:EF:24:5A:57:B5:FD:E5:C2:A8:C9:B4:2B:44:41",
+    "md5Fingerprint": "65:5F:EF:A7:64:CB:1A:C7:02:4D:3E:BE:3A:CF:BD:F0",
+    "expired": false,
+    "notYetValid": false,
+    "inbound": true,
+    "outbound": false
+  },
+  {
+    "certBlob": "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",
+    "name": "CN=Amazon RSA 2048 M04, O=Amazon, C=US",
+    "alias": "CN=Amazon RSA 2048 M04, O=Amazon, C=US",
+    "subject": "CN=Amazon RSA 2048 M04, O=Amazon, C=US",
+    "issuer": "CN=Amazon Root CA 1, O=Amazon, C=US",
+    "version": 3,
+    "notValidBefore": 1661293595000,
+    "notValidAfter": 1913754395000,
+    "signatureAlgorithm": "RSA (2048 bits)",
+    "sha1Fingerprint": "E7:B8:B5:A6:74:3C:E1:B2:F1:7B:04:1D:E5:95:58:A4:14:72:D7:0C",
+    "md5Fingerprint": "E3:96:1B:FA:69:BF:76:E3:CC:56:BD:CB:F8:B8:99:78",
+    "expired": false,
+    "notYetValid": false,
+    "inbound": true,
+    "outbound": false
+  },
+  {
+    "certBlob": "MIIEkjCCA3qgAwIBAgITBn+USionzfP6wq4rAfkI7rnExjANBgkqhkiG9w0BAQsFADCBmDELMAkGA1UEBhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxJTAjBgNVBAoTHFN0YXJmaWVsZCBUZWNobm9sb2dpZXMsIEluYy4xOzA5BgNVBAMTMlN0YXJmaWVsZCBTZXJ2aWNlcyBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTE1MDUyNTEyMDAwMFoXDTM3MTIzMTAxMDAwMFowOTELMAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJvb3QgQ0EgMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJ4gHHKeNXjca9HgFB0fW7Y14h29Jlo91ghYPl0hAEvrAIthtOgQ3pOsqTQNroBvo3bSMgHFzZM9O6II8c+6zf1tRn4SWiw3te5djgdYZ6k/oI2peVKVuRF4fn9tBb6dNqcmzU5L/qwIFAGbHrQgLKm+a/sRxmPUDgH3KKHOVj4utWp+UhnMJbulHheb4mjUcAwhmahRWa6VOujw5H5SNz/0egwLX0tdHA114gk957EWW67c4cX8jJGKLhD+rcdqsq08p8kDi1L93FcXmn/6pUCyziKrlA4b9v7LWIbxcceVOF34GfID5yHI9Y/QCB/IIDEgEw+OyQmjgSubJrIqg0CAwEAAaOCATEwggEtMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMB0GA1UdDgQWBBSEGMyFNOy8DJSULghZnMeyEE4KCDAfBgNVHSMEGDAWgBScXwDfqgHXMCs4iKK4bUqc8hGRgzB4BggrBgEFBQcBAQRsMGowLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLnJvb3RnMi5hbWF6b250cnVzdC5jb20wOAYIKwYBBQUHMAKGLGh0dHA6Ly9jcnQucm9vdGcyLmFtYXpvbnRydXN0LmNvbS9yb290ZzIuY2VyMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6Ly9jcmwucm9vdGcyLmFtYXpvbnRydXN0LmNvbS9yb290ZzIuY3JsMBEGA1UdIAQKMAgwBgYEVR0gADANBgkqhkiG9w0BAQsFAAOCAQEAYjdCXLwQtT6LLOkMm2xF4gcAevnFWAu5CIw+7bMlPLVvUOTNNWqnkzSWMiGpSESrnO09tKpzbeR/FoCJbM8oAxiDR3mjEH4wW6w7sGDgd9QIpuEdfF7Au/maeyKdpwAJfqxGF4PcnCZXmTA5YpaP7dreqsXMGz7KQ2hsVxa81Q4gLv7/wmpdLqBKbRRYh5TmOTFffHPLkIhqhBGWJ6bt2YFGpn6jcgAKUj6DiAdjd4lpFw85hdKrCEVN0FE6/V1dN2RMfjCyVSRCnTawXZwXgWHxyvkQAiSr6w10kY17RSlQOYiypok1JR4UakcjMS9cmvqtmg5iUaQqqcT5NJ0hGA==",
+    "name": "CN=Amazon Root CA 1, O=Amazon, C=US",
+    "alias": "CN=Amazon Root CA 1, O=Amazon, C=US",
+    "subject": "CN=Amazon Root CA 1, O=Amazon, C=US",
+    "issuer": "CN=Starfield Services Root Certificate Authority - G2, O=\"Starfield Technologies, Inc.\", L=Scottsdale, ST=Arizona, C=US",
+    "version": 3,
+    "notValidBefore": 1432555200000,
+    "notValidAfter": 2145834000000,
+    "signatureAlgorithm": "RSA (2048 bits)",
+    "sha1Fingerprint": "06:B2:59:27:C4:2A:72:16:31:C1:EF:D9:43:1E:64:8F:A6:2E:1E:39",
+    "md5Fingerprint": "E8:65:A2:2A:AE:52:4D:26:86:9A:F0:44:8D:6F:D8:96",
+    "expired": false,
+    "notYetValid": false,
+    "inbound": true,
+    "outbound": false
+  }
+]
@@ -0,0 +1,13 @@
+{
+  "request": {
+    "method": "POST",
+    "urlPathPattern": "/api/portal/v1.4/certinfoFromUrl"
+  },
+  "response": {
+    "status": 200,
+    "bodyFileName": "certinfoFromUrl.json",
+    "headers": {
+      "Content-Type": "application/json"
+    }
+  }
+}
@@ -2,6 +2,7 @@
 
 import com.axway.apim.adapter.apis.APIManagerAPIMethodAdapter;
 import com.axway.apim.api.model.APIMethod;
+import com.axway.apim.api.model.CaCert;
 import com.axway.apim.api.model.ServiceProfile;
 import com.axway.apim.apiimport.DesiredAPI;
 import com.axway.apim.apiimport.lib.params.APIImportParams;
@@ -79,6 +80,11 @@ public String execute(APIChangeState changes, boolean reCreation) throws AppExce
                     ServiceProfile serviceProfile = serviceProfiles.get("_default");
                     LOG.info("Updating API backendBasePath with value : {}", backendBasePath);
                     serviceProfile.setBasePath(backendBasePath);
+                    if(EnvironmentProperties.OVERRIDE_CERTIFICATES) {
+                        //Ignore certificates downloaded from backend and use it from backendbasepath Issue #565.
+                        List<CaCert> caCerts = apiManagerAdapter.getCertInfoFromUrl(backendBasePath);
+                        createdAPI.setCaCerts(caCerts);
+                    }
                 }
             }
             if(desiredAPI.getAuthenticationProfiles() != null) {