#na_ontap_security_certificates add intermediate_certificates fails

1 messages · Page 1 of 1 (latest)

muted sage
#

Hi guys,
We are installing new certificates for the cluster SVM and the data SVMs.
We try to use the parameter intermediate_certificates to add our CA chain, and it fails with the following error:

Error creating or installing certificate: {'message': 'Error "unable to get local issuer certificate" while verifying the certificate chain at depth 0.', 'code': '52559977', 'target': 'intermediate_certificates'}"

The certificates are stored in an ansible vault file and our code looks like:

  when: work_item.type == 'cluster'
  netapp.ontap.na_ontap_security_certificates:
    https: true
    validate_certs: false
    state: present
    common_name: "{{ work_item.svm }}"
    name: "PKI_{{ work_item.svm }}"
    type: server
    public_certificate: "{{ lookup('file', cert_path + '/' + work_item.svm + '_signed.pem') }}"
    private_key: "{{ lookup('file', cert_path + '/' + work_item.svm + '_key.pem') }}"
    intermediate_certificates: [ "{{ certs.global_ca }}", "{{ certs.cloud_ca }}" ]
    hostname: "{{ netapp_cluster }}"
    username: "netapp-ansible"
    password: "{{ pwd_definition.ansible_usr }}"
  ignore_errors: true```

We tried differnt things already, put the certificate directly in the playbook, different orders, but we always end up with this error.

Collection:
netapp.ontap                             23.3.0

Any idea?

Regards
Matthias
remote furnace
#

@muted sage Please check the intermediate certificate sequence and file format, this error usually occurs when the certificates are not passed as list or if order is not correct.
intermediat_certificates: ["-----BEGIN CERTIFICATE-----\nIntermediate certificate1\n-----END CERTIFICATE-----",
"-----BEGIN CERTIFICATE-----\nIntermediate certificate2\n-----END CERTIFICATE-----",
"-----BEGIN CERTIFICATE-----\nRoot certificate\n-----END CERTIFICATE-----"]