Getting 404 while making API requests and desired results in browser.

aaP_rellikso

Hi. I'm trying to send request via API and getting 404 nginx error though there is no nginx, this panel uses Apache.
On the other site when I'm sending the same request in browser to panel URL it returns a valid result.

Installed software list.

Example:

curl -k -H "Content-Type: application/json" -D '{"domains":["aapanel2test.xxxxxxxxxxxxxxxxxxxxx.com.ua"],"auth_type":"http","auth_to":19,"auto_wildcard":0,"id":19}' https://127.0.0.1:30337/acme?action=apply_cert_api
<html>
<head><title>404 Not Found</title></head>
<body>
<center><h1>404 Not Found</h1></center>
<hr><center>nginx</center>
</body>
</html>

Browser:

https://aapanel2.mydomain.com:30337/acme?action=apply_cert_api
{
"domains":["aapanel2test.mydomain.com"],
"auth_type":"http",
"auth_to":19,
"auto_wildcard":0,
"id":19
}

Response:
{
"cert": "-----BEGIN CERTIFICATE-----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\n9KAwSh/bzgekxS4dsQM1ZWKF8qUcHGR8uH5Y0RC+3Xzd2fu/cn8z\n-----END CERTIFICATE-----\n",
"root": "\n-----BEGIN CERTIFICATE-----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\nuYkQ4omYCTX5ohy+knMjdOmdH9c7SpqEWBDC86fiNex+O0XOMEZSa8DA\n-----END CERTIFICATE-----\n",
"cert_timeout": 1741700755,
"private_key": "-----BEGIN PRIVATE KEY-----\nMIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQCZq8IzU8RXrTzw\nOLev7CWnWiVWs4TQA7SES6QdsfBepCH2fSu80DA1arC4PZdVbWrJLltatkliNt73\nAJOBHG5Za/w5rPhK848CVRZ1AKcYPmKzMtxPh1N0qxjlFk9nTkjLd/UVF3VaFgL8\n5vYOlDNsPNmTbnwuPbdL2RYeLHOfyOKl4w9+jljYibvzlGuZl55l30LD+vGff8nN\nju5UQyKBresk8PvAb7uDmIqqETHkLwO9oGjGgvO+hZAfjUBfpMi1Qc6B22IR2LiZ\ntG4DxPP8lBGM87wiF5P4EniqkNiCeBd/N6Ejbg9xVAD+Yxzo6RWBx/AsNkW/05z8\nMC4MoEcZAgMBAAECggEAAoHC7aWtj60ZsAUK2RW6AQaHUqhjz6Vp09ksjJf3JwIY\nND5TQPWn/a0XhC/sCLab3fuRvbN40793qHGj1mC9e5u3fgTgeY+K2xPChabcsvhs\nkYYQQkNfxQjYA3+3TKUCKsCSmNUcwtsWUiQd6ju4cYj2FzG/mJ0E4RnB4rzgp3//\n1pHp2sea5Jpk6Q0RLu9KIq4X27uc0OAMAbg3wRRI5ImAx2PyzlMU3L/9wSrFr09t\nINduVqpmutzwbqahGCVbdtm2lucoPBH0kfHt4nWDHICNQ6PtcjTSMD2QXZoh/Ubp\nC/XrElP+hBuNP2v0tSf+ZU7Sl7wjvqqxJPpQQY4F0QKBgQDVLNGGehgqFl02UB/W\nPLHQmYJrmfdqqqFebOi0TVpdM+kXujO/pqxarj7vX4w+qTrUA0K+31AXVkDwvB0H\ney0Bl8twdrjtLJnHmSvEiQepsKIpQPwJ1eYRkHGxhmYshRdyWBZMT7vijXR7iY/P\nRfLKs/+8M+cf76exWmUcGwAWyQKBgQC4isHgfU2GYGkKEQIhh4ai6hbaQjwlHW2j\nQTpU5M76FbumshH7eVwhoSfM4PnlaY9NvpoUyyffEVZ7B9WwhUyAR0sZ+4Lr2Mds\nV3vNdA9BImQ9bzXXren/3GNsgBXRZSwg436WtLtIIgYMF6lHcaW8Qozu9xYS+Ro3\nb8I24V3F0QKBgAgg7GBnWXKJZcaDaaNerx0YLWvy9AdCOGMEXh85798r8pBwDjcZ\noOrYSBgSmaNuCos5EJt8om4xYMqNMcIuRToRUrWYIVcR409EHPIik4M59AUEsFej\nq2EyE9PEHzNFY+59Q2Rnie+Km012omAx958ZHABOLlr+ZXOS0dYvhWJZAoGABkjz\ngWnDEiiGa0lZATtUYogGbziCQ+FUspKuIeYJBotm8K5v3lirwplyeY/P8vg9YTB0\nnvCsUvSMNXR22qQvjs7ex+vA8bdYU2BHXx/sxRMextjaxJWvun8PA8r480C22Afn\nb8qH9lTyT8cehMhiFJ9PnXPc1JiXQ/wSaTwTrYECgYAgTVjzocgJ37n38l2HkvqD\n4lcJYrUstH37UbvzjYp2NYqJeL47OapQW0pKl7c3Pq22TOralN9ggMmORXKnE8db\ndpyhjtPbflXzfk9FMdulIFz+DabdbIJyffwuhBRms7q1Nq0hC9AgYF1i/jjqIGLq\nvCpdlC/1IT/Yua0qTIhV6A==\n-----END PRIVATE KEY-----\n",
"domains": [
"aapanel2test.mydomain.com"
],
"save_path": "vhost/letsencrypt/aapanel2test.mydomain.com",
"status": true,
"msg": "Application successful!"
}

aaPanel_Kern

aaP_rellikso curl -k -H "Content-Type: application/json" -D '{"domains":["aapanel2test.xxxxxxxxxxxxxxxxxxxxx.com.ua"],"auth_type":"http","auth_to":19,"auto_wildcard":0,"id":19}' https://127.0.0.1:30337/acme?action=apply_cert_api

Hello, is the problem solved? Is "Host: domain_name" missing?

aaP_rellikso

aaPanel_Kern
curl -k -H "Content-Type: application/json" -H "Host: aapanel2test.mydomain.com" -D '{"domains":["aapanel2test.mydomain.com"],"auth_type":"http","auth_to":19,"auto_wildcard":0,"id":19}' https://127.0.0.1:30337/acme?action=apply_cert_api
<html>
<head><title>404 Not Found</title></head>
<body>
<center><h1>404 Not Found</h1></center>
<hr><center>nginx</center>
</body>
</html>

These are ccomplete headers set for browser request:
{
"Request Headers (1.690 kB)": {
"headers": [
{
"name": "Accept",
"value": "/"
},
{
"name": "Accept-Encoding",
"value": "gzip, deflate, br, zstd"
},
{
"name": "Accept-Language",
"value": "en-US,en;q=0.8,ru-RU;q=0.5,ru;q=0.3"
},
{
"name": "Cache-Control",
"value": "no-cache"
},
{
"name": "Connection",
"value": "keep-alive"
},
{
"name": "Content-Length",
"value": "38"
},
{
"name": "Content-Type",
"value": "application/x-www-form-urlencoded; charset=UTF-8"
},
{
"name": "Cookie",
"value": "_ga_58SGF8SP12=GS1.1.1733978926.156.0.1733978926.0.0.0; _ga=GA1.1.1156063346.1724936581; __stripe_mid=609f843b-5238-4cda-b4ae-4035704c708c157dfc; 3c2d376d266d7428b628ce4cdf006fdf=c854fde0-1959-4716-9289-c72461e2b083.nz-P4NMXtTOya49Vvk5xrtYUQ6k; 51f4169401e6cbd7d3d6e888a28165c0=8950c1b9-847c-4460-a523-bcd6e2b5e28e.xg4D2_pASgzEpY16mvyyKjNpmYc; 931331d78b3e22b13eb000452b99457a=82bac8dd-769a-4564-935f-a87016fd86fd.jlL8LFKGEmLCHVzWxryLVW926kI; ba7f725bea2f96d3635f4d86697a4cd4=995e757d-837c-46f2-91b6-652fa716d774.j6k6AnBK2NSjUt5hqI9rxWORkCM; d21b6ce6dfd9ee93f81a22770e32585e=bb7176d0-027f-44a1-a04b-b3fee4c3df2a.hy8x1mtGNYbdQkQ_WEcWWTq5J30; 3f5175c04c7177db3a9ba0be48eb839d=d55fad5e-0868-47c4-a108-c43a235acd07.Dp9HmhSRUkYE3K2URVjGZl-xL6I; 12797904c427224d5669eaa530262576=71e26cdc-5f5b-487b-a76a-73a72a687d2a.9yrxU87IdPpkvpagepjScHRSxTI; 7367b75db585a9a4d24e146166998d91=8c49c414-adab-4a0a-b168-377830d33ac8.dj8bYikaOQ0ewrreJAhzHgKYjSU; config-tab=allConfig; serial_no="
},
{
"name": "Host",
"value": "aapanel2.mydomain.com:30337"
},
{
"name": "Origin",
"value": "https://aapanel2.mydomain.com:30337"
},
{
"name": "Pragma",
"value": "no-cache"
},
{
"name": "Priority",
"value": "u=0"
},
{
"name": "Referer",
"value": "https://aapanel2.mydomain.com:30337/site/php"
},
{
"name": "Sec-Fetch-Dest",
"value": "empty"
},
{
"name": "Sec-Fetch-Mode",
"value": "cors"
},
{
"name": "Sec-Fetch-Site",
"value": "same-origin"
},
{
"name": "TE",
"value": "trailers"
},
{
"name": "User-Agent",
"value": "Mozilla/5.0 (X11; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0"
},
{
"name": "x-http-token",
"value": "JOg5iR4VDboB5rVaS8QgLWvYFs5uiErjJ9RdhNsK3QrufuaW"
},
{
"name": "X-Requested-With",
"value": "XMLHttpRequest"
}
]
}
}

aaPanel_Kern

Hi, try using -d instead of -D to send data
Also check the website’s logs to see if there are any records of your access

aaP_rellikso

root@vmi2136821:~# curl -k -H "Content-Type: application/json" -H "Host: aapanel2test.mydomain.com" -d '{"domains":["aapanel2test.mydomain.com"],"auth_type":"http","auth_to":19,"auto_wildcard":0,"id":19,"siteName":"aapanel2test.mydomain.com"}' https://127.0.0.1:30337/acme?action=apply_cert_api
<html>
<head><title>404 Not Found</title></head>
<body>
<center><h1>404 Not Found</h1></center>
<hr><center>nginx</center>
</body>
</html>root@vmi2136821:~# curl -k -H "Content-Type: application/json" -d '{"domains":["aapanel2test.mydomain.com"],"auth_type":"http","auth_to":19,"auto_wildcard":0,"id":19,"siteName":"aapanel2test.mydomain.com"}' https://127.0.0.1:30337/acme?action=apply_cert_api
<html>
<head><title>404 Not Found</title></head>
<body>
<center><h1>404 Not Found</h1></center>
<hr><center>nginx</center>
</body>
</html>root@vmi2136821:~# curl -k -H "Content-Type: application/json" -H "Host: aapanel2test.mydomain.com" -d '{"domains":["aapanel2test.mydomain.com"],"auth_type":"http","auth_to":19,"auto_wildcard":0,"id":19}' https://127.0.0.1:30337/acme?action=apply_cert_api
<html>
<head><title>404 Not Found</title></head>
<body>
<center><h1>404 Not Found</h1></center>
<hr><center>nginx</center>
</body>
root@vmi2136821:~# curl -k -H "Content-Type: application/json" -d '{"domains":["aapanel2test.mydomain.com"],"auth_type":"http","auth_to":19,"auto_wildcard":0,"id":19}' https://127.0.0.1:30337/acme?action=apply_cert_api
<html>
<head><title>404 Not Found</title></head>
<body>
<center><h1>404 Not Found</h1></center>
<hr><center>nginx</center>
</body>
</html>

aaPanel_Kern

Are there any logs for the website you visited? Whether the website has an SSL certificate set up

aaP_rellikso

aaPanel_Kern
I have something like this:

[2024-12-12 07:34:10,842][INFO] - - - - [2024-12-12 07:34:10] "POST /site?action=get_auto_restart_rph HTTP/1.0" 200 286 0.024305 [2024-12-12 07:34:10,945][INFO] - - - - [2024-12-12 07:34:10] "POST /site?action=auto_restart_rph HTTP/1.0" 200 236 0.023325 [2024-12-12 07:34:12,056][INFO] - - - - [2024-12-12 07:34:12] "POST /ajax?action=get_lines HTTP/1.0" 200 236 0.032666 [2024-12-12 07:34:13,136][INFO] - - - - [2024-12-12 07:34:13] "POST /ajax?action=get_lines HTTP/1.0" 200 414 0.014144 [2024-12-12 07:34:14,249][INFO] - - - - [2024-12-12 07:34:14] "POST /ajax?action=get_lines HTTP/1.0" 200 443 0.032816 [2024-12-12 07:34:14,710][INFO] - - - - [2024-12-12 07:34:14] "POST /acme?action=apply_cert_api HTTP/1.0" 200 4246 3.667434 [2024-12-12 07:34:15,332][INFO] - - - - [2024-12-12 07:34:15] "POST /ajax?action=get_lines HTTP/1.0" 200 490 0.016243 [2024-12-12 07:34:15,555][INFO] - - - - [2024-12-12 07:34:15] "POST /site?action=SetSSL HTTP/1.0" 200 236 0.744967 [2024-12-12 07:34:15,671][INFO] - - - - [2024-12-12 07:34:15] "POST /site?action=GetSSL HTTP/1.0" 200 4387 0.018001 [2024-12-12 07:38:16,503][INFO] - - - - [2024-12-12 07:38:16] "GET /acme?action=apply_cert_api HTTP/1.0" 404 315 0.007941 [2024-12-12 07:39:05,049][INFO] - - - - [2024-12-12 07:39:05] "GET /acme?action=apply_cert_api HTTP/1.0" 404 315 0.003294 [2024-12-12 07:55:28,645][INFO] - - - - [2024-12-12 07:55:28] "POST /acme?action=apply_cert_api HTTP/1.0" 404 315 0.012352 [2024-12-12 07:56:02,100][INFO] - - - - [2024-12-12 07:56:02] "POST /acme?action=apply_cert_api HTTP/1.0" 404 315 0.005940 [2024-12-12 07:56:35,561][INFO] - - - - [2024-12-12 07:56:35] "POST /acme?action=apply_cert_api HTTP/1.0" 404 315 0.027156 [2024-12-12 07:57:03,069][INFO] - - - - [2024-12-12 07:57:03] "POST /acme?action=apply_cert_api HTTP/1.0" 404 315 0.004238
Lines containing status 200 - attempt to add cert via panel? 404 - via API...

aaPanel_Kern

Hello, are you visiting aapanel? You must log in to use it normally.

aaP_rellikso

aaPanel_Kern did you loose initial question?...
I'm absolutely normally using aaPanel in browser.
Most of API requests are also successful, but some of them returns 404 via API. Why it happens like this?...

Another weird thing is that I'm getting nginx 404 page though thjere is no nginx, only Apache installed on this server.

aaP_rellikso

aaPanel_Kern also what do you mean as login?...
I'm using sgnature alghorithm and code as described here: https://www.aapanel.com/Document/api.pdf...

Most of queries are successful except ones related to getting SSL certs...

aaPanel_Kern

It is recommended that you read the source code and browser developer mode for help

aaP_rellikso

aaPanel_Kern I'm doing exactly this. Are you really unable to clarify the situation?...

aaP_rellikso

aaPanel_Kern so will I get any useful answer?...

aaPanel_Kern

Yes, help is only available through source code

aaP_rellikso

aaPanel_Kern what exactly source code are you talking about?... aaPanel web page?...
Ive already provided above browser request URL, sent POST data and headers... Also I've provided code link from aaPanel API documentation: there a no any additional headers settings...

aaPanel_Kern

The source code of aaPanel. If you have problems using the api, it is recommended that you use the interface of aapanel directly.

aaP_rellikso

aaPanel_Kern Tried to send aaaPanel source code example, but it's forbidden.

aaP_rellikso

aaPanel_Kern Here's what I've researched:
Part 1.
https://aapanel3.mydomain.com:28635/acme?action=renew_cert

Request headers are::
{
"Request Headers (1.784 kB)": {
"headers": [
{
"name": "Accept",
"value": "/"
},
{
"name": "Accept-Encoding",
"value": "gzip, deflate, br, zstd"
},
{
"name": "Accept-Language",
"value": "en-US,en;q=0.8,ru-RU;q=0.5,ru;q=0.3"
},
{
"name": "Connection",
"value": "keep-alive"
},
{
"name": "Content-Length",
"value": "38"
},
{
"name": "Content-Type",
"value": "application/x-www-form-urlencoded; charset=UTF-8"
},
{
"name": "Cookie",
"value": "_ga_58SGF8SP12=GS1.1.1734333058.165.1.1734333060.0.0.0; _ga=GA1.1.1156063346.1724936581; __stripe_mid=ff257663-75d2-4b47-bf82-750a12f066974c6f01; 9f0c075eabd9bf2b499bfbe0c81227c8=fbc34276-d43c-4e06-a0b3-439a495fd6b2.kl5VPQp3vkXtDkjXq8WCZfyjN8Q; b372100ef0896042414a82ae4e327186=361f1e61-ead8-47d2-a1eb-80e7997cef5c.kGhk1IiPNzNB8fdnZEI8l7Tx2SA; 902bcef9996aae9333a0739619d17d57=8a6a2088-f04d-44cc-8408-877a14120553.M3o-3W2KSpC1ppataChWI9QLdKk; a7090fa3336110673036f99c1212077a=7821d158-4bef-489b-bb36-e9b279632cad.TCp_r3g3ZjkPW9MQxd2QerySJ0M; a589eff78a05cd737d78ecceaa100cb8=cadebc16-318d-4c74-9240-a445ddea33dd.W-MjXXXDcYUOuiY_ivWZGW9hjo4; 8638079df0a7f4f8df371ad872fe35d2=68fdbd15-75bb-4620-941f-9ac626564c31.KIovENQzZL0AJPYhlMH7Iiex1A8; c56be6bdb8a8c858d86bfd47f3845461=3d0498cb-6c11-4ea0-a6ae-0e5a8716ddd5.RI5ONtasjq14vQxRupOupXkdPfM; ab79740d0f61d049bcf93900ab3f89d2=8a941632-c3de-4ee1-8e2b-3166b43db16b.sg5Y_4i1d1-eYbv_0xdG0VMogYE; commandInputViewUUID=eX52rZ5CAb7G7j8; config-tab=allConfig; serial_no=; 058ac08e509a5aff11435181bbea54b0=ebd0a4bd-777e-40b3-806a-839115cc0b0b.H9tKggZYB7xLho1D3WlgM5QsntM"
},
{
"name": "Host",
"value": "aapanel3.mydomain.com:28635"
},
{
"name": "Origin",
"value": "https://aapanel3.mydomain.com:28635"
},
{
"name": "Priority",
"value": "u=0"
},
{
"name": "Referer",
"value": "https://aapanel3.mydomain.com:28635/site/php"
},
{
"name": "Sec-Fetch-Dest",
"value": "empty"
},
{
"name": "Sec-Fetch-Mode",
"value": "cors"
},
{
"name": "Sec-Fetch-Site",
"value": "same-origin"
},
{
"name": "TE",
"value": "trailers"
},
{
"name": "User-Agent",
"value": "Mozilla/5.0 (X11; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0"
},
{
"name": "x-http-token",
"value": "83MCMP47OpGDlJledyH3EuHQ8txHFdqLKRZljuOmloIl7gdk"
},
{
"name": "X-Requested-With",
"value": "XMLHttpRequest"
}
]
}
}

POST data:
{
"index": "7b0e034195d54e855767ecee8c04f84c"
}

Response:
{
"cert": "<cert_content>",
"root": "root_content",
"cert_timeout": 1742106952,
"private_key": "<private_key_content>",
"domains": [
"mydomain.com",
"*.mydomain.com"
],
"save_path": "vhost/letsencrypt/mydomain.com",
"status": true,
"msg": "Renewed successfully!"
}

aaP_rellikso

aaPanel_Kern Part 2.

Don't assume I really need any of https://aapanel3.mydomain.com:28635/ajax?action=get_lines

And then:
https://aapanel3.mydomain.com:28635/site?action=SetSSL

Request headers are:
{
"Request Headers (1.779 kB)": {
"headers": [
{
"name": "Accept",
"value": "/"
},
{
"name": "Accept-Encoding",
"value": "gzip, deflate, br, zstd"
},
{
"name": "Accept-Language",
"value": "en-US,en;q=0.8,ru-RU;q=0.5,ru;q=0.3"
},
{
"name": "Connection",
"value": "keep-alive"
},
{
"name": "Content-Length",
"value": "5760"
},
{
"name": "Content-Type",
"value": "application/x-www-form-urlencoded; charset=UTF-8"
},
{
"name": "Cookie",
"value": "serial_no=; _ga_58SGF8SP12=GS1.1.1734333058.165.1.1734333060.0.0.0; _ga=GA1.1.1156063346.1724936581; __stripe_mid=ff257663-75d2-4b47-bf82-750a12f066974c6f01; 9f0c075eabd9bf2b499bfbe0c81227c8=fbc34276-d43c-4e06-a0b3-439a495fd6b2.kl5VPQp3vkXtDkjXq8WCZfyjN8Q; b372100ef0896042414a82ae4e327186=361f1e61-ead8-47d2-a1eb-80e7997cef5c.kGhk1IiPNzNB8fdnZEI8l7Tx2SA; 902bcef9996aae9333a0739619d17d57=8a6a2088-f04d-44cc-8408-877a14120553.M3o-3W2KSpC1ppataChWI9QLdKk; a7090fa3336110673036f99c1212077a=7821d158-4bef-489b-bb36-e9b279632cad.TCp_r3g3ZjkPW9MQxd2QerySJ0M; a589eff78a05cd737d78ecceaa100cb8=cadebc16-318d-4c74-9240-a445ddea33dd.W-MjXXXDcYUOuiY_ivWZGW9hjo4; 8638079df0a7f4f8df371ad872fe35d2=68fdbd15-75bb-4620-941f-9ac626564c31.KIovENQzZL0AJPYhlMH7Iiex1A8; c56be6bdb8a8c858d86bfd47f3845461=3d0498cb-6c11-4ea0-a6ae-0e5a8716ddd5.RI5ONtasjq14vQxRupOupXkdPfM; ab79740d0f61d049bcf93900ab3f89d2=8a941632-c3de-4ee1-8e2b-3166b43db16b.sg5Y_4i1d1-eYbv_0xdG0VMogYE; commandInputViewUUID=eX52rZ5CAb7G7j8; config-tab=allConfig; serial_no=; 058ac08e509a5aff11435181bbea54b0=ebd0a4bd-777e-40b3-806a-839115cc0b0b.H9tKggZYB7xLho1D3WlgM5QsntM"
},
{
"name": "Host",
"value": "aapanel3.mydomain.com:28635"
},
{
"name": "Origin",
"value": "https://aapanel3.mydomain.com:28635"
},
{
"name": "Referer",
"value": "https://aapanel3.mydomain.com:28635/site/php"
},
{
"name": "Sec-Fetch-Dest",
"value": "empty"
},
{
"name": "Sec-Fetch-Mode",
"value": "cors"
},
{
"name": "Sec-Fetch-Site",
"value": "same-origin"
},
{
"name": "TE",
"value": "trailers"
},
{
"name": "User-Agent",
"value": "Mozilla/5.0 (X11; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0"
},
{
"name": "x-http-token",
"value": "83MCMP47OpGDlJledyH3EuHQ8txHFdqLKRZljuOmloIl7gdk"
},
{
"name": "X-Requested-With",
"value": "XMLHttpRequest"
}
]
}
}

POST data:

{
"type": "1",
"siteName": "node3.mydomain.com",
"key": "<key_content>"
}

Response data:

{
"status": true,
"msg": "Certificate saved!"
}

What else do I have to research?...

One more time: issue is that if request is sent via aaPanel using domain name it returns desired response but if request is sent via API to 127.0.0.1 it returns 404... I didn't try to send any additional headers as it doesn't mention in API docs but I'm sending exactly identical POST data to exactly identical URL having the only difference - domain name via internal IP...

aaP_rellikso

aaPanel_Kern what else do I have to research?...