Comments
-
FYI, I've opened another thread for the question about the CA/intermediate certificates. I've tried re-importing the CA certificates both individually and as a part of the chain from the PFX, but the site certificate still shows up as "Not Verified". The new thread is "Let's Encrypt Certificate Chain Imported From PFX -…
-
Thank you so much, @Jaime . I will get that ticket submitted as soon as possible and make sure that the other certificates in the chain are imported. I thought they were as I remember seeing that everything "looked" correct, but maybe I missed a step or something. On a quick tangent, I'm just curious: From my testing, it…
-
UPDATE #3: Well, I THOUGHT I had it figured out. I used Postman to submit the request and got this result: { "status": { "success": false, "cli": { "mode": "top_mode", "depth": 0, "command": "configure", "configuring": false }, "info": [ { "level": "error", "code": "E_READ_ONLY",…
-
UPDATE #2: Okay, so I was finally able to get away from the 404 - Not found error with the certificates/import/cert-key-pair endpoint by URL encoding the certificate's Friendly Name and the PFX password values in the API call. However, that still fails with a 405 - Method not allowed error. I went back to my previous…
-
UPDATE: I tried with the direct/cli endpoint as the above referenced thread described. This time, I got a 405 - Method not allowed error. I made sure the FTP_HOST_NAME_OR_IP value was not URL encoded, and I tried with the CERTIFICATE-NAME and CERTIFICATE-PASSWORD both with and without surrounding quotation marks. I made…
-
FANTASTIC! 🎉 Step 2 of the process is now working! 🎉 Interesting that it's using the PUT method instead of GET but, after a bit of trial-and-error, I have the API exporting the CSR to a file using the "new" endpoint. I'm not sure if I just overlooked those API endpoints, or what. I thought I had gone through the whole…
-
You, my friend, are a rock star! 🤩🤩🤩 Hopefully the Engineering team can help figure out the issue with the export or my work will have all been for naught. The only thing I could think to do otherwise would be to try to implement an entire SSH client in my application to use the CLI to do it, but putting all of that…
-
Thank you again, @Jaime. Following the "rules" above, I was able to successfully generate the CSR from my application on the firewall. I logged into the UI and it shows up exactly as expected. Unfortunately, however, that was just the first step in the process, and I'm stuck again with another "Bad Request" to the API when…
-
Thank you so much. I figured it was something like that, but this will honestly be my first time to really dig into the certificate process, so I wasn't sure where I was failing. I've got some "interesting" logic to build in my application in order to have it construct the JSON like that but, now that I have some "rules",…