Forum Discussion

Patrik_Jonsson's avatar
Oct 03, 2016

iControl soap

Hi!

Trying to import a key/certificate with the iControl SOAP powershell snapin, but I get these errors:

Exception calling "key_import_from_pem_v2" with "6" argument(s): "Exception caught in Management::urn:iControl:Management/KeyCertificate::key_import_from_pem_v2()
Exception: Common::OperationFailed
    primary_error_code   : -14 (0xFFFFFFF2)
    secondary_error_code : 0
    error_string         : Keys do not match"
At C:\Scripts\LetsencryptQA\letsencrypt1.1.ps1:418 char:90
+ ... rt_from_pem_v2($ManagementModetype, @($KeyName), @($StringPem), $Secu ...
+                                                        ~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [], MethodInvocationException
    + FullyQualifiedErrorId : SoapHeaderException

    And for the certificate

        Exception calling "certificate_import_from_pem" with "4" argument(s): "Exception caught in Management::urn:iControl:Management/KeyCertificate::certificate_import_from_pem()
Exception: Common::OperationFailed
    primary_error_code   : -14 (0xFFFFFFF2)
    secondary_error_code : 0
    error_string         : Keys do not match"
At C:\Scripts\LetsencryptQA\letsencrypt1.1.ps1:441 char:103
+ ... om_pem($ManagementModetype, @($CertificateName), @($StringPem), $true ...
+                                                        ~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [], MethodInvocationException
    + FullyQualifiedErrorId : SoapHeaderException
`


**Importing the key with another name works though**, which would indicate that the key exists somewhere. 

However:

`list sys file ssl-key | grep name
Nothing
list sys file ssl-cert | grep name
Nothing
ls -alR | grep name
Nothing

And nothing in the GUI certificate list under any partition.

I have also:

  • Done a mcpd reload and restarted the device.
  • Manually imported the certificate and key in the Web UI (works, but then I can t reproduce the error)

Any clever ideas?

/Patrik

3 Replies