For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Philip_L's avatar
Philip_L
Icon for Nimbostratus rankNimbostratus
Apr 04, 2012

Management.KeyCertificate.pkcs12_import_from_file() File Location?

Hello, When using Management.KeyCertificate.pkcs12_import_from_file() Im having trouble figuring out where to place the files. The wiki says /config/ssl/ is used if no directory is specified however no matter what I put in I get an error saying file does not exist. If I add a local directory it tells me it cannot have the ":" (Im using c in windows). Any one have some suggestions?
dev
devops
iControl

7 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Apr 04, 2012
    Hi Philip,

     

     

    I think you want to specify a directory on the client you're running the iControl script on--not BIG-IP.

     

     

    Aaron
  • Philip_L's avatar
    Philip_L
    Icon for Nimbostratus rankNimbostratus
    Apr 04, 2012
    Thats what I thought. However when I use a local file say c:\ssl\cert.pfx if fails telling me the following:

     

    Exception: Common::OperationFailed

     

    primary_error_code : -17 (0xFFFFFFEF)

     

    secondary_error_code : 0

     

    error_string : Invalid filename. Filenames may only contain the following characters: [A-Za-z][0-9].-_/
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Apr 04, 2012
    Can you try one of these:

     

     

    c:\\ssl\\cert.pfx

     

    c:/ssl/cert.pfx

     

     

    Aaron

     

  • Philip_L's avatar
    Philip_L
    Icon for Nimbostratus rankNimbostratus
    Apr 05, 2012
    Tried

     

     

    file_names[0] = @"C:\SSLInfo\Certs\chut.pfx";

     

    file_names[0] = @"C:/SSLInfo/Certs/chut.pfx";

     

    file_names[0] = "C:\\SSLInfo\\Certs\\chut.pfx";

     

     

    All fail

     

     

    here is my code

     

     

                NetworkCredential creds = new NetworkCredential();
            creds.UserName = username;
            creds.Password = password;
            String[] ids = new string[24];
            ids[0] = "test";
            String[] file_names = new string[100];
            file_names[0] = "C:\\SSLInfo\\Certs\\chut.pfx";
            String[] passwords = new string[24];
            passwords[0] = "pass";
            Management.KeyCertificate.iControl.ManagementKeyCertificate iControl = new Management.KeyCertificate.iControl.ManagementKeyCertificate();
            iControl.Url = "https://bigip/iControl/iControlPortal.cgi";
            iControl.Credentials = creds;
            iControl.pkcs12_import_from_file(Management.KeyCertificate.iControl.ManagementKeyCertificateManagementModeType.MANAGEMENT_MODE_WEBSERVER, ids, file_names, passwords, false);
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Apr 05, 2012
    Per this post, it should be with a forward slash instead of one or more backslashes:

     

     

    https://devcentral.f5.com/Community/GroupDetails/tabid/1082223/asg/51/aft/1178926/showtab/groupforums/Default.aspx

     

     

    file_names[0] = "C:/SSLInfo/Certs/chut.pfx";

     

     

    Aaron

     

  • Philip_L's avatar
    Philip_L
    Icon for Nimbostratus rankNimbostratus
    Apr 05, 2012
    Per that post and your reccomendation I tried that (see begining of my last post) and it failed with:

     

     

    Exception: Common::OperationFailed

     

    primary_error_code : -17 (0xFFFFFFEF)

     

    secondary_error_code : 0

     

    error_string : Invalid filename. Filenames may only contain the following characters: [A-Za-z][0-9].-_/

     

     

     

    here is the code I ran:

     

     

                 NetworkCredential creds = new NetworkCredential();
            creds.UserName = "username";
            creds.Password = "password";
            String[] ids = new string[24];
            ids[0] = "test";
            String[] file_names = new string[100];
            file_names[0] = "C:/SSLInfo/Certs/chut.pfx";
            String[] passwords = new string[24];
            passwords[0] = "pass";
            Management.KeyCertificate.iControl.ManagementKeyCertificate iControl = new Management.KeyCertificate.iControl.ManagementKeyCertificate();
            iControl.Url = "https://bigip/iControl/iControlPortal.cgi";
            iControl.Credentials = creds;
            iControl.pkcs12_import_from_file(Management.KeyCertificate.iControl.ManagementKeyCertificateManagementModeType.MANAGEMENT_MODE_WEBSERVER, ids, file_names, passwords, false);
  • Philip_L's avatar
    Philip_L
    Icon for Nimbostratus rankNimbostratus
    Apr 05, 2012
    I switched the string to /tmp/chut.pfx and uploaded the cert to the ltm and the script completed. However, nothing showed up so it looks like the script completed without error but did not actually do anything.