nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

security certificate install

ChrisV1

hello , following the procedure in the documentation for installing a certificate to a cluster, the certificate appears to be installed when running the code, but when checking on the storage for the certificate it is in fact not installed https://library.netapp.com/ecmdocs/ECMLP2858435/html/resources/security_certificate.html#netapp_ontap.resources.security_certificate.SecurityCertificate.post as you can see the running code is the same as in the documentation: from netapp_ontap import HostConnection from netapp_ontap.resources import SecurityCertificate from netapp_ontap import NetAppResponse from netapp_ontap.error import NetAppRestError from netapp_ontap.resources import svm with HostConnection(host="xxxxx" , username="xxxxx", password="xxxxx",verify=False): resource = SecurityCertificate() resource.type = 'server_ca' resource.scope = 'cluster' resource.public_certificate = ( '-----BEGIN CERTIFICATE-----' 'xxxxxxxxxxxxxcertxxxxxxxxxx' '-----END CERTIFICATE-----' ) resource.post#(hydrate=True)

Find more posts tagged with

Accepted answers

RobertBlackhart

Thanks for providing that. So the issue is that there is a formatting problem with your certificate which is what the server responded with. That's why after the call it's not present on the cluster.

It looks like your certificate string is missing line breaks encoded in the string. Try adding a \n to the end of each line of the string.

All comments

RobertBlackhart

This example script might help you: https://github.com/NetApp/ontap-rest-python/blob/master/examples/python_client_library/cert_auth.py

It goes through a complete workflow of creating, installing, and using certificate authentication.

ChrisV1

Hi, sorry but it doesnt, what i need is just installing a server_ca cert, which is described in the official documentation in the link i provided and the code that is ran is identical with the one from documentation ,unfortunately is not working and the certificate is not created on the storage

RobertBlackhart

"not working" is not giving me enough information to give more specific help.

You might want to enable debug logging on your script so that you can verify the HTTP request and responses that are sent/received. There might be additional information there that will help you. Here are details about how to do that: https://library.netapp.com/ecmdocs/ECMLP2879970/html/index.html#log_all_api_calls-flag

ChrisV1

Thanks for the reply. At this point I tend to believe that the procedure in the documentation is just wrong and that is just not the way you install a server_ca certificate on the cluster as the logging and debugging options you mentioned do not make any output with that script. While trying them into a different script they work and do make logging output.

Also , to be clear, im mentioning again, this is not my script , is the script from netapp documentation , copy paste, just replaced the info in the connection part and the certificated.

import logging
from netapp_ontap import HostConnection, utils, config
from netapp_ontap.resources import SecurityCertificate
from netapp_ontap.resource import Resource, ResourceSchema, ImpreciseDateTime, Size
from netapp_ontap import NetAppResponse
from netapp_ontap.error import NetAppRestError
from netapp_ontap.resources import svm
import pprint

logging.basicConfig(level=logging.DEBUG)
config.CONNECTION = HostConnection('', username='', password='', verify=False)
utils.LOG_ALL_API_CALLS = 1
resource = SecurityCertificate()
resource.type = 'server_ca'
resource.public_certificate = (
'-----BEGIN CERTIFICATE-----'

'-----END CERTIFICATE-----'
)
resource.post#(hydrate=True)