Overwriting or adding LTM SSL Traffic cert and key using iControlREST

mpelekhUnfortunately no solution for explicitly uploading the cert/key as they changed the behavior from v13 to v14+ via https://cdn.f5.com/product/bugtracker/ID535122.html.

That being said, we kept with our previous existing logic of simply uploading the .pfx instead of the cert/key seperately.

# Export the the x509CeritificateColllection with the passphrase; we will use this to upload it to the F5 appliance
$x509Certificate2CollectionByteArray = $x509Certificate2Collection.Export('Pkcs12', $securePassword)

$contentRange = "0-{0}/{1}" -f ($x509Certificate2CollectionByteArray.Length - 1), $x509Certificate2CollectionByteArray.Length

$f5CertHeaders = @{ 'Authorization' = "Basic $f5Base64Auth"
  'Content-Length'                  = $x509Certificate2CollectionByteArray.Length
  'Content-Range'                   = $contentRange
}

# Upload the certificate as a PFX to the appliance, this drops it in /var/config/rest/downloads/
Write-Verbose "Uploading '$F5CertificateName.pfx'"
$uploadResponse = Invoke-RestMethod -Uri "https://$F5Appliance/mgmt/shared/file-transfer/uploads/$F5CertificateName.pfx" -Method POST -Body $x509Certificate2CollectionByteArray -Headers $f5CertHeaders -ContentType "application/octet-stream" -ErrorAction Stop
      
$certBody = [ordered]@{"command" = "install"
  "from-local-file"              = $uploadResponse.localFilePath
  "passphrase"                   = $securePassword
} | ConvertTo-Json

# Install the certificate by loading it from the file we just uploaded
Write-Verbose "Importing certificate '$F5CertificateName.pfx'"
$importResponse = Invoke-RestMethod -Uri "https://$F5Appliance/mgmt/tm/sys/crypto/pkcs12/$F5CertificateName" -Method POST -Body $certBody -Headers $f5AuthHeader -ContentType 'application/json' -ErrorAction Stop

$importResponse | Select-Object -Property * -ExcludeProperty 'passphrase' | Write-Verbose

Write-Verbose "Successfully certificate '$F5CertificateName.pfx'"

# Delete the file we uploaded above since it's no longer needed on the appliance
$deleteBody = [ordered]@{"command" = "run"
  "utilCmdArgs"                    = " -c `"rm -f $($uploadResponse.localFilePath)`""
} | ConvertTo-Json -Compress

Write-Verbose "Deleting .pfx from appliance with $($deleteBody)"
$deleteResponse = Invoke-RestMethod -Uri "https://$F5Appliance/mgmt/tm/util/bash" -Method POST -Body $deleteBody -Headers $f5AuthHeader -ContentType 'application/json' -ErrorAction Stop
$deleteResponse | Select-Object -Property * | Write-Verbose