Pure-Storage-Ansible / FlashArray-Collection

Ansible Collection for Pure Storage FlashArray
GNU General Public License v3.0
19 stars 21 forks source link

support for certificates >3000 characters #545

Closed mhueske closed 4 months ago

mhueske commented 4 months ago

purefa_certs supports only up to 3000 characters for certificate files while importing. We generate certificates with a 4096 bit key on our CA and therefore the length of the generated certificate exceeds 3000 characters. This module does not allow to import those certificates while the FlashArray WebUI accepts and imports exactly the same certificates without having any issues. So please check if there is any option to change this behaviour. Thanks.

sdodsley commented 4 months ago

Unfortunatlry this limit is imposed by the Python SDK and beyond that the API endpoint for certificates in Purity. This has been raised with our internal FlashArray engineering teams. When they produce a fix we will roll this into the Asible Collection. It might be worth raising this with you Pure Storage account team so that they are aware of the 3000 character limit and can add weight to engineering to resolve this.

mhueske commented 4 months ago

Thank you for your feedback and the explaination. I will get in contact with the account team as suggested.

sdodsley commented 4 months ago

@mhueske i have solved this issue. There will be a patch to fix this shortly.

mhueske commented 4 months ago

Great, thanks. I can confirm the issue is resolved with this commit :+1: