Forum Discussion

Grant_Joy_24163's avatar
Grant_Joy_24163
Icon for Altostratus rankAltostratus
Sep 29, 2016

Cert Invalid Parameter

I am getting a 

400
response from the 
/mgmt/tm/sys/crypto/cert
endpoint.

The body I am passing is: 

{"command":"install","name":"testdomain","from-local-file":"/var/config/rest/downloads/testdomain.key"}
. The file exists and if I remove the file, I get an error that the file could not be copied, so I think this actually is copying this file.

The response body is: 

Key management library returned bad status: -4, Invalid Parameter
.

Any help would be really appreciated. I am following the instruction here, but I am using token auth: https://devcentral.f5.com/questions/upload-ssl-keys-certs-via-icontrol-rest-api

This could be related to the issue I am having with uploading files, I opened a question here: https://devcentral.f5.com/questions/unable-to-upload-file-through-icontrol-rest-interface-49232

application delivery
BIG-IP
devops
iControl
iControlREST
rest
upload
  • Grant_Joy_24163's avatar
    Grant_Joy_24163
    Oct 12, 2016

    I believe this was a permission issue. I believe that the user I was trying failed. I ended up abandoning token auth and used a different user with basic auth and this started working.

     

  • Grant_Joy_24163's avatar
    Grant_Joy_24163
    Icon for Altostratus rankAltostratus
    Oct 12, 2016

    I believe this was a permission issue. I believe that the user I was trying failed. I ended up abandoning token auth and used a different user with basic auth and this started working.

     

  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Oct 12, 2016

    I'm not sure what version you are on, but I had problems with the sys/crypto methods. Try using the /sys/file/ssl-key and /sys/file/ssl-cert methods instead.

     

  • Grant_Joy_24163's avatar
    Grant_Joy_24163
    Icon for Altostratus rankAltostratus
    Oct 14, 2016

    This has been tested on 12 and 12.1. It seems to work fine without token auth (see my other comment). I can try your recommended method instead though and see what happens.

     

  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Oct 14, 2016

    i'll test with tacacs on Monday and let you know as well. Away from office today.