Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Import pkcs12 bundle - fails with 'Unable to fetch value. Unable to extract pkcs12 contents. Details: Failed decrypting cloud credentials' #880

Open
ajgerace opened this issue Sep 27, 2024 · 0 comments
Labels
bug Something isn't working untriaged Issue needs to be reviewed for validity

Comments

@ajgerace
Copy link

Environment

  • Application Services Version: 3.45.0
  • BIG-IP Version: 17.1.1.3

Summary

Attempting to pull pkcs12 bundle from a repo. The declaration fails with a status 500. Unable to fetch value. Unable to extract pkcs12 contents.

Steps To Reproduce

Steps to reproduce the behavior:

  1. Submit the following declaration:
{
    "pkcs": {
        "class": "Tenant",
        "certs": {
            "class": "Application",
            "template": "shared",
            "pkcs-bundle": {
                "class": "Certificate",
                "passphrase": {
                    "ciphertext": "cGFzc3dvcmQ=",
                    "protected": "eyJhbGciOiJkaXIiLCJlbmMiOiJub25lIn0",
                    "ignoreChanges": true  
                },
                "pkcs12": {
                    "url": "https://<url>/certificateStore/src/branch/master/<domain>-02dec24-password.p12"              

                }
            }
        }
    },
    "class": "ADC",
    "label": "Common/Shared Declaration",
    "schemaVersion": "3.45.0",
    "updateMode": "selective"
}
  1. Observe the following error response:
{
    "code": 500,
    "declarationFullId": "",
    "message": "Unable to fetch value. Unable to extract pkcs12 contents. Details: Failed decrypting cloud credentials: POST http://admin:XXXXXX@localhost:8100/mgmt/shared/service-discovery/encryption response=404 body={\"code\":404,\"message\":\"\",\"referer\":\"Unknown\",\"errorStack\":[]}"
}

Expected Behavior

I would expect the pkcs bundle to be imported.

Actual Behavior

receive an error ""Unable to fetch value. Unable to extract pkcs12 contents. Details: Failed decrypting cloud credentials"

output in restnoded.log:
Fri, 27 Sep 2024 15:07:13 GMT - severe: [RestOperationDispatcher] 'shared/service-discovery/encryption' not found.
Fri, 27 Sep 2024 15:07:13 GMT - severe: [ErrorHandlingModule] RestOperation failed: "/shared/service-discovery/encryption". {"code":404,"message":"","referer":"Unknown","originalRequestBod
y":"{"action":"decrypt","data":"$M$ES$32alth0vrA4av0MtvS7h0Q=="}","errorStack":[]}
Fri, 27 Sep 2024 15:07:13 GMT - severe: [appsvcs] {"message":"Unable to fetch value. Unable to extract pkcs12 contents. Details: Failed decrypting cloud credentials: POST http://admin:XXXX
XX@localhost:8100/mgmt/shared/service-discovery/encryption response=404 body={"code":404,"message":"","referer":"Unknown","errorStack":[]}","level":"error"}
Fri, 27 Sep 2024 15:07:13 GMT - warning: [appsvcs] {"message":"unable to digest declaration. Error: Unable to fetch value. Unable to extract pkcs12 contents. Details: Failed decrypting clo
ud credentials: POST http://admin:XXXXXX@localhost:8100/mgmt/shared/service-discovery/encryption response=404 body={"code":404,"message":"","referer":"Unknown","errorStack":[]}
","level":"warning"}

@ajgerace ajgerace added bug Something isn't working untriaged Issue needs to be reviewed for validity labels Sep 27, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working untriaged Issue needs to be reviewed for validity
Projects
None yet
Development

No branches or pull requests

1 participant