Tuesday, April 7, 2020

Getting wrong fromat csr from switch

Hi all,

I want to rollout locally signed certificates to my switches (ArubaOS-S / f.e. 2540) via their API. It all works fine so far, but the API seems to return me wrong CSR.

I can look into the CLI and get the correct CSR, so the API call for creating the CSR is correct, it's just the wrong value returned.

Maybe I need to decode it or something? The return value is named ' certificate_detail_base64_encoded '. I tried importing the CSR to xca but it doesn't recognize the format. Also, the API returns me a long one-liner, no linebreaks.

Here is what I get from the API:

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 

Here is what the same CSR looks like in the CLI:

-----BEGIN CERTIFICATE REQUEST----- MIIBozCCAQwCAQAwYzEUMBIGA1UEAxMLU3dpdGNoXzI1NDAxCzAJBgNVBAsTAklUM Q4wDAYDVQQKEwVBaXJJVDEUMBIGA1UEBxMLTGFuZ2VuaGFnZW4xCzAJBgNVBAgTAk RFMQswCQYDVQQGEwJERTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAl4HEeK2 9N5UXaoS4X566HUqF/e4BwhfKAuhwRWpeb+nEzsbC8pPUrnzPDYGMJkAcyz/mshF2 qjmf+S7vkHomScZ7po5Hun9FYKLhiugSIoRfNywx+zemWkd8xllUcJKpAiHKbJdoD UK5qKHXAunyJ3XjXQ3Fl8YkbeBj/KlB9OUCAwEAAaAAMA0GCSqGSIb3DQEBBQUAA4 GBAA2OnkU447m/gurAJ7G5ryHk6+z9SydghRqSO8A1pEa9L9iILdcbioiQem4LQY7 Qdv0jYwzwJB8Jzpa0NMkHloIG+yVYWG7vrNIdLIUomx2IeAwNJAYPnQ7ZYrnkvm09 YUEQ+UV1GKvWTzgokwuc0Wbr1xqyQXb9UM4iaDuzj4RK -----END CERTIFICATE REQUEST----- 

Any ideas?



No comments:

Post a Comment