Import ssl certicate bundle through iControl as user with Certificate Manager role

[romio28]

We have to import and upgrade Certificate bundle with rest:

curl -sk -u "user:passss" -H "Content-Type: application/json" -X POST https://10.10.10.10/mgmt/tm/sys/crypto/cert -d '{"command":"install","name":"testbundle","from-local-file":"bundlefile.crt"}'

But we get this error:

{"code":400,"message":"Unable to copy (/var/service/restjavad/bundlefile.crt) into tempfile (/var/system/tmp/tmsh/znUvEk/bundlefile.crt), No such file or directory","errorStack":[],"apiError":26214401}

How to resolve this error?

[Leslie_Hubertus]

Hi @romio28  - did you take a look at this (about halfway down the page)? https://techdocs.f5.com/en-us/bigip-14-1-0/big-ip-system-ssl-administration-14-1-0/ssl-certificate-m... 

[Leslie_Hubertus]

Hi @romio28  - did the techdoc I linked above help you with your issue?

[romio28 · Accepted solution]

Hi @Leslie_Hubertus , yes it solve the issue,  I think it's the best practice to automate bundle update, the only negative point is the update interval but we can force it with Icontrol:

curl -i -sk -u "user:pass" -H "Content-Type: application/json" -X PATCH https://10.10.10.10/mgmt/tm/sys/crypto/ca-bundle-manager/~Common~BM_url -d '{ "updateNow": "yes" }'

Thanks,