search

F5Networks / f5-ansible

Imperative Ansible modules for F5 BIG-IP products
GNU General Public License v3.0
376 stars 229 forks source link

bigip_ssl_certificate module true_names option does not apply to the issuer_cert #2407

Open davkwong opened 4 months ago

davkwong commented 4 months ago

I'm running the bigip_ssl_certificate module and despite setting true_names to 'true', I get this error:

TASK [f5-bigip-certkey : Import SSL Certificate] ***** fatal: [dfwl1-wxpd-lb10a.webex.com]: FAILED! => {"changed": false, "msg": "b'{\"code\":400,\"message\":\"0107134a:3: File object by name (/Common/HydrantID_IdenTrust_Chain.pem.crt) is missing.\",\"errorStack\":[],\"apiError\":3}'"} fatal: [dfwl1-wxpd-lb10b.webex.com]: FAILED! => {"changed": false, "msg": "b'{\"code\":400,\"message\":\"0107134a:3: File object by name (/Common/HydrantID_IdenTrust_Chain.pem.crt) is missing.\",\"errorStack\":[],\"apiError\":3}'"}

It seems to work as expected for the certificate name, but not for the issuer_cert. As you can see above, it's expecting a file named 'HydrantID_IdenTrust_Chain.pem.crt' when the actual name is 'HydrantID_IdenTrust_Chain.pem'

pgouband commented 4 months ago

Hi @davkwong,

Thanks for reporting. Added to the backlog and internal tracking ID for this request is: INFRAANO-1557.