Forum Discussion

martijnbrands_3's avatar
martijnbrands_3
Icon for Nimbostratus rankNimbostratus
Mar 01, 2019

REST API create CSR fails wiht key's with password/passphrase

Step 1 generate Key with bash command through REST API: mgmt/tm/util/bash

 

 {
    "command":"run",
    "utilCmdArgs":"-c 'openssl genrsa -aes256 -passout pass:B465d/4O/E29qYmIQGVzHA== -out /var/config/rest/downloads/testkey_with_password.key 2048'"
 }
`

 

Step 2 Install key on loadbalancer

mgmt/tm/sys/crypto/key

 

`{
"command":"install",
"name":"testkey_with_password",
"from-local-file":"/var/config/rest/downloads/testkey_with_password.key"
}
`

 

Step 3 Create CSR

mgmt/tm/sys/crypto/csr

 

` {
        "name": "test.domain.nl123.csr",
        "city": "UT",
        "commonName": "www.example.com",
        "country": "NL",
        "emailAddress": "martijn.brands@domain.nl",
        "organization": "org",
        "ou": "Networks",
        "state": "UT",
        "key": "testkey_with_password.key"
        }
`

 

Now I get an Error:

 

`{
"code": 400,
"message": "Key management library returned bad status: -7, error:0906406D:PEM routines:PEM_def_callback:problems getting password",
"errorStack": [],
"apiError": 26214401
}

 

Does somebody know what is going on here. We run software version

BIG-IP 12.1.3.2 Build 0.0.4 Point Release 2