Open bohrasaurabh opened 1 year ago
Hi @bohrasaurabh, thank you reaching out
There error you are seeing does not match what you say. That error, as the error message suggests, during VCert 4.17.x and above, we dropped support for MD5 encryption, in which case you must select any of other two for your policies, otherwise, pickup won't work.
That said, I did a test on my own, and in deed, there's bug:
$ vcert pickup -u https:/******* -t ******* --pickup-id \path\to\test.example.com --format jks --file CERT.com --jks-alias CERT.com --key-password TestPassw0rd#123 --jks-password TestPassw0rd#123
vCert: 2023/03/16 15:34:13 Successfully connected to Trust Protection Platform
vCert: 2023/03/16 15:34:13 Failed to retrieve certificate: unable to retrieve: Unexpected status code on TPP Certificate Retrieval. Status: 400 Failed to lookup private key, error: Failed to lookup private key vault id
It does work it you remove JKS part:
$ vcert pickup -u https:/******* -t ******* --pickup-id \path\to\test.example.com
vCert: 2023/03/16 15:32:54 Successfully connected to Trust Protection Platform
vCert: 2023/03/16 15:32:54 Successfully retrieved request for \path\to\test.example.com
-----BEGIN CERTIFICATE-----
MIIH3zCCBcegAwIBAgITbQCxYPZLYx2yaw6VIwAAALFg9jANBgkqhkiG9w0BAQsF
@luispresuelVenafi - It does work without format option
PROBLEM SUMMARY I am unable to pickup the certs in any other format other than PEM. The workaround provided by Venafi team to our organization didnt work. I was told to use 4.16.x release to use any format other than PEM.
STEPS TO REPRODUCE
COMMENTS/WORKAROUNDS workaround is to use 4.16.x release