Forum Discussion

MauroNunes's avatar
MauroNunes
Icon for Altostratus rankAltostratus
Nov 22, 2019

How retrieve CSR (format PEM) via REST v14.0.0.1

Hi everyone, It's that possible get the CSR via REST? With SOAP "certificate_request_export_to_pem" it's possible get the CSR from F5.   With REST, we can only check the contents and the locat...
BIG-IP
devops
iControlREST
security
  • jaikumar_f5's avatar
    jaikumar_f5
    Nov 28, 2019

    Sorry for the delay. You can import any files with the below option, It will land in

    /var/config/rest/downloads location

    curl -kv -u admin:admin -X POST -H "Content-Type: application/octet-stream" -H "Content-Range: 0-1023/1024" --data-binary "@testupload.crt" https://hostname/mgmt/shared/file-transfer/uploads/testupload.crt

    For more details, you can articles - https://devcentral.f5.com/s/articles/demystifying-icontrol-rest-part-5-transferring-files

    Hope it helps/

jaikumar_f5's avatar
jaikumar_f5
Icon for MVP rankMVP

There is no native rest call to get this from my understanding,,, you can instead call the tmsh command and run it,

curl -sk -u 'username:password' -H "Content-Type: application/json" -X POST https://hostname/mgmt/tm/util/bash -d "{\"command\":\"run\",\"utilCmdArgs\":\"-c 'tmsh list sys crypto csr example.csr'\"}"

Hope this helps.

MauroNunes's avatar
MauroNunes
Icon for Altostratus rankAltostratus
Nov 25, 2019

Thank you very much jaikumar_f5 :)

 

It helps.

  • jaikumar_f5's avatar
    jaikumar_f5
    Icon for MVP rankMVP
    Nov 28, 2019

    Sorry for the delay. You can import any files with the below option, It will land in

    /var/config/rest/downloads location

    curl -kv -u admin:admin -X POST -H "Content-Type: application/octet-stream" -H "Content-Range: 0-1023/1024" --data-binary "@testupload.crt" https://hostname/mgmt/shared/file-transfer/uploads/testupload.crt

    For more details, you can articles - https://devcentral.f5.com/s/articles/demystifying-icontrol-rest-part-5-transferring-files

    Hope it helps/

  • jaikumar_f5's avatar
    jaikumar_f5
    Icon for MVP rankMVP
    Nov 25, 2019

    You can mark the answer as solution provided if it really helps.

  • MauroNunes's avatar
    MauroNunes
    Icon for Altostratus rankAltostratus
    Nov 25, 2019

    Now I've another question. There is some rest call to make the Import CER (also in PEM format)?

  • MauroNunes's avatar
    MauroNunes
    Icon for Altostratus rankAltostratus
    Dec 05, 2019

    Now I've another issue, regarding with files after ulpload.

    As I'm running in a cluster environment when I try make the install of the CRT sometimes I receive the NOT FOUND, because isn't sync and the other server is responding.

    Did you know some way to sync the files, or the SYNC Group will solve these?

    Anyway, if there are some native rest to make the install on the device, but I can't found anything related with send signed certificate push to member server.