Thanks Sadhu. That was the first thing i tried before researching how to do it. Still same error.
One thing, i haven't set up db encryption, could that affect this? Erik Den onsdag 1. april 2015 skrev Suresh Sadhu <suresh.sa...@citrix.com> følgende: > HI Erik, > > It seems while uploading the server certificate through UI, you might > have provided the url encoded value in the server certificate .. that is > the reason you have seeing this exception.[I just reproduce your issue by > providing encoded value in the UI wizard ] > > You no need to perform url encode while uploading the certificate from UI > because internally CS will do for you while uploading the certificate from > UI. > you have to encode keys only when you are uploading the keys using > API.(i.e for uploading root and intermediate through API ) > > Steps: > 1.first upload root/intermediate certificate through api by providing > encoded values( refer this link to encode keys > http://www.url-encode-decode.com/) > . > 2.for server certificate -go to UI -provide Server certificate, PKCS#8 > Private Key and domain name [Here don't encode the certificates because CS > will do it for u internally.] > > > It seems my blog misses this information will update it now( > http://sadhusuresh.blogspot.in/2015/01/t-hings-you-should-consider-while.html > ) . thank you. > > > If you still see the issues, please provide the full logs . > > > Regards > sadhu > > > > > > > > > > > > > -----Original Message----- > From: Erik Weber [mailto:terbol...@gmail.com <javascript:;>] > Sent: 01 April 2015 03:35 > To: us...@cloudstack.apache.org <javascript:;> > Cc: dev > Subject: Re: Unable to upload customer certificate > > On Tue, Mar 31, 2015 at 11:52 PM, Erik Weber <terbol...@gmail.com > <javascript:;>> wrote: > > > On Tue, Mar 31, 2015 at 2:57 PM, Suresh Sadhu > > <suresh.sa...@citrix.com <javascript:;>> > > wrote: > > > >> HI, > >> > >> Code not changed recently and try uploading the > >> keys(root,intermediate) using api which was mentioned by you (Guide > followed: > >> > >> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Procedure+to+R > >> eplace+realhostip.com+with+Your+Own+Domain+Name) > >> and server certifictate through UI. > >> > >> > > This is beginning to drive me mad. > > > > - I have converted the original PEM key to PKCS#8 (twice according to > > docs). > > - I've tried both with pythons urllib.quote to encode, as well as > > using advanced rest client in chrome. > > - I've verified with openssl that the key matches the cert (and to be > > frank, we're using this in a lot of other places, including another > > cloudstack install...) > > > > > Heck, that got me thinking that I could copy the keystore table, and so I > did, but it still fails.... with the exact same error message as previously. > > -- > Erik >
