You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@cloudstack.apache.org by Livio Nagy <li...@b-i.com> on 2016/08/05 14:29:27 UTC

CS 4.5.2 Load Balancer as SSL endpoint

Hi,

I'm trying to use the CS 4.5.2 Load Balancer in https mode (SSL Termination done on the LB) but I'm unable to upload the certificates.

I follow the instructions on this wiki:
https://cwiki.apache.org/confluence/display/CLOUDSTACK/SSL+Termination+Support#SSLTerminationSupport-Introduction

On the wiki it's mentioned that "The certificate,key and chain should be UTF-encoded in the URL.". So I did several tests and encoded the URL with  the "Advanced Rest Client Application" but there is nothing to do, always the same error.

The error I get back is the following:
<?xml version="1.0" encoding="UTF-8"?><uploadsslcertresponse cloud-stack-version="4.5.2"><errorcode>530</errorcode><cserrorcode>9999</cserrorcode><errortext>Error parsing certificate data Invalid Certificate format. Expected X509 certificate. Failed due to -----END CERTIFICATE not found</errortext></uploadsslcertresponse>

I also found out that a similar issue has already been reported (http://mail-archives.apache.org/mod_mbox/cloudstack-dev/201406.mbox/%3C455A123A82CFCA408AAA4404DA3D95930E098DC7@SINPEX01CL03.citrite.net%3E) but in my case encoding the URL twice didn't do the trick. I even triggered another error (Error parsing certificate data Unable to decode certificate chain).

Can someone help me on that ?

Best regards,

livio nagy

CS 4.5.2 Load Balancer as SSL endpoint

Posted by Livio Nagy <li...@b-i.com>.
Hi,

I'm trying to use the CS 4.5.2 Load Balancer in https mode (SSL Termination done on the LB) but I'm unable to upload the certificates.

I followed the instructions on this wiki:
https://cwiki.apache.org/confluence/display/CLOUDSTACK/SSL+Termination+Support#SSLTerminationSupport-Introduction

On the wiki it's mentioned that "The certificate,key and chain should be UTF-encoded in the URL.". So I did several tests and encoded the URL with  the "Advanced Rest Client Application" but there is nothing to do, I always get the same error.

The error I get back is the following:
<?xml version="1.0" encoding="UTF-8"?><uploadsslcertresponse cloud-stack-version="4.5.2"><errorcode>530</errorcode><cserrorcode>9999</cserrorcode><errortext>Error parsing certificate data Invalid Certificate format. Expected X509 certificate. Failed due to -----END CERTIFICATE not found</errortext></uploadsslcertresponse>

I also found out that a similar issue has already been reported (http://mail-archives.apache.org/mod_mbox/cloudstack-dev/201406.mbox/%3C455A123A82CFCA408AAA4404DA3D95930E098DC7@SINPEX01CL03.citrite.net%3E) but in my case encoding the URL twice didn't do the trick. I even triggered another error (Error parsing certificate data Unable to decode certificate chain).

Can someone help me on that ?

Many thanks,
Best regards,

livio nagy