I am attempting to prove the XML-RPC API can be used in our organisation. I am having trouble with getting the necessary certificates set up.

In the API user screen, does it matter which certificate is entered for the XML-RPC API access? Is the .pfx ok, or does it need to be a public .cer?

I have my client making a successful connection to the server via SSL but when I submit the query (pmp.password.retrieve) it returns no data in the result - just an empty string, content length = 0.

The logs and network logs provide no extra detail? Is there some verbose logging I can turn on?

Thanks

BB