Forum Discussion
martijnbrands_3
Nimbostratus
Mar 01, 2019REST API create CSR fails wiht key's with password/passphrase
Step 1 generate Key with bash command through REST API: mgmt/tm/util/bash
{
"command":"run",
"utilCmdArgs":"-c 'openssl genrsa -aes256 -passout pass:B465d/4O/E29qYmIQGVzHA== -out /var/config/rest/downloads/testkey_with_password.key 2048'"
}
`
Step 2 Install key on loadbalancer
mgmt/tm/sys/crypto/key
`{
"command":"install",
"name":"testkey_with_password",
"from-local-file":"/var/config/rest/downloads/testkey_with_password.key"
}
`
Step 3 Create CSR
mgmt/tm/sys/crypto/csr
` {
"name": "test.domain.nl123.csr",
"city": "UT",
"commonName": "www.example.com",
"country": "NL",
"emailAddress": "martijn.brands@domain.nl",
"organization": "org",
"ou": "Networks",
"state": "UT",
"key": "testkey_with_password.key"
}
`
Now I get an Error:
`{
"code": 400,
"message": "Key management library returned bad status: -7, error:0906406D:PEM routines:PEM_def_callback:problems getting password",
"errorStack": [],
"apiError": 26214401
}
Does somebody know what is going on here. We run software version
BIG-IP 12.1.3.2 Build 0.0.4 Point Release 2
- PeteWhite
Employee
Try "key": "/Common/testkey_with_password.key" or suchlike
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects