oci certs-mgmt certificate update-certificate-by-importing-config-details
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 669
- Forks
- 236
- Avg merge
- 1m
- Merged PRs (30d)
- 4
Description
HI All,
I am facing an error below, while I try to renew the certificate from oci cli command line, where as the same files works perfectly from front end.
PS C:\demo_cert\output> oci certs-mgmt certificate update-certificate-by-importing-config-details --certificate-id ocid1.certificate.oc1.ca-toronto-1.xxxxxxxtemp --certificate-pem C:\demo_cert\output\certificate.pem --private-key-pem C:\demo_cert\output\privatekey.pem --cert-chain-pem C:\demo_cert\output\certificatechain.pem --debug
DEBUG:oci_cli.cli_metrics: 2025-04-14 19:43:41.220344: Metrics is not enabled
Windows-10-10.0.19041
System name: Windows
System release : 10
System version: 10.0.19041
env OCI_PYTHON_SDK_NO_SERVICE_IMPORTS is set
DEBUG:oci_cli.cli_util:Config File: dict_keys(['log_requests', 'additional_user_agent', 'pass_phrase', 'user', 'fingerprint', 'key_file', 'tenancy', 'region'])
DEBUG:oci_cli.cli_util:region: Environment Variable or Parameter
DEBUG:oci.base_client.1705935646096:Endpoint: https://certificatesmanagement.ca-toronto-1.oci.oraclecloud.com/20210224
INFO:oci.base_client.1705935646096: 2025-04-14 19:43:44.537449: Request: PUT https://certificatesmanagement.ca-toronto-1.oci.oraclecloud.com/20210224/certificates/ocid1.certificate.oc1.ca-toronto-1.tempocid
Not using Expect header...
send: b'PUT /20210224/certificates/ocid1.certificate.oc1.ca-toronto-1.tempocid HTTP/1.1\r\nuser-agent: Oracle-PythonSDK/2.149.1 (python 3.8.5; AMD64-Windows) Oracle-PythonCLI/3.54.0\r\naccept-encoding: gzip, deflate\r\naccept: application/json\r\nconnection: keep-alive\r\ncontent-type: application/json\r\nopc-request-id: 8BD5FAAD5AC14D8E960DC5E985ABAD23\r\nopc-client-retries: true\r\nopc-client-info: Oracle-PythonSDK/2.149.1\r\nContent-Length: 230\r\ndate: Mon, 14 Apr 2025 19:43:44 GMT\r\nhost: certificatesmanagement.ca-toronto-1.oci.oraclecloud.com\r\nx-content-sha256: pmzMz+asas+MS5MQhv17E9tl9DXL0=\r\nauthorization: Signature algorithm="rsa-sha256",headers="date (request-target) host content-length content-type x-content-sha256",keyId="odaaasa",version="1"\r\n\r\n{"certificateConfig": {"certChainPem": "C:\\demo_cert\\output\\certificatechain.pem", "privateKeyPem": "C:\\demo_cert\\output\\privatekey.pem", "certificatePem": "C:\\demo_cert\\output\\certificate.pem", "configType": "IMPORTED"}}'
reply: 'HTTP/1.1 400 Bad Request\r\n'
header: Date: Mon, 14 Apr 2025 19:43:54 GMT
header: opc-request-id: 8BD5FAAD5AC14D8E960DC5E985ABAD23/2199326332907AD01D9D529310D2F5CE/FD67EA081D8D18D027CA096330EE0C1C
header: Strict-Transport-Security: max-age=31536000; includeSubDomains
header: Vary: Origin
header: Content-Type: application/json
header: X-Content-Type-Options: nosniff
header: Content-Length: 92
DEBUG:oci.base_client.1705935646096: 2025-04-14 19:43:45.072425: time elapsed for request 8BD5FAAD5AC14D8E960DC5E985ABAD23: 0.44788540000000054
DEBUG:oci.base_client.1705935646096: 2025-04-14 19:43:45.076258: Response status: 400
DEBUG:oci.base_client.1705935646096: 2025-04-14 19:43:45.078655: python SDK time elapsed for deserializing: 1.0099999999901854e-05
Traceback (most recent call last):
File "C:\Users\opc\cli-local-3\Lib\site-packages\cx_Freeze\initscripts_startup_.py", line 124, in run
File "C:\Users\opc\cli-local-3\Lib\site-packages\cx_Freeze\initscripts\console.py", line 16, in run
File "src\oci_cli\cli.py", line 13, in
File "C:\Users\opc\cli-local-3\lib\site-packages\click\core.py", line 1128, in call
File "C:\Users\opc\cli-local-3\lib\site-packages\click\core.py", line 1053, in main
File "C:\Users\opc\cli-local-3\lib\site-packages\click\core.py", line 1659, in invoke
File "C:\Users\opc\cli-local-3\lib\site-packages\click\core.py", line 1659, in invoke
File "C:\Users\opc\cli-local-3\lib\site-packages\click\core.py", line 1659, in invoke
File "C:\Users\opc\cli-local-3\lib\site-packages\click\core.py", line 1395, in invoke
File "C:\Users\opc\cli-local-3\lib\site-packages\click\core.py", line 754, in invoke
File "C:\Users\opc\cli-local-3\lib\site-packages\click\decorators.py", line 26, in new_func
File "src\oci_cli\json_skeleton_utils.py", line 78, in wrapped_call
File "src\oci_cli\cli_util.py", line 926, in wrapped_call
File "C:\Users\opc\oci-cli-master\services\certificates_management\src\oci_cli_certificates_management\certificatesmanagement_cli_extended.py", line 431, in update_certificate_update_certificate_by_importing_config_details_extended
File "C:\Users\opc\cli-local-3\lib\site-packages\click\core.py", line 754, in invoke
File "C:\Users\opc\cli-local-3\lib\site-packages\click\decorators.py", line 26, in new_func
File "src\oci_cli\json_skeleton_utils.py", line 78, in wrapped_call
File "src\oci_cli\cli_util.py", line 926, in wrapped_call
File "C:\Users\opc\oci-cli-master\services\certificates_management\src\oci_cli_certificates_management\generated\certificatesmanagement_cli.py", line 2029, in update_certificate_update_certificate_by_importing_config_details
File "C:\Users\opc\cli-local-3\lib\site-packages\oci\certificates_management\certificates_management_client.py", line 3790, in update_certificate
File "C:\Users\opc\cli-local-3\lib\site-packages\oci\retry\retry.py", line 308, in make_retrying_call
File "C:\Users\opc\cli-local-3\lib\site-packages\oci\base_client.py", line 529, in call_api
File "C:\Users\opc\cli-local-3\lib\site-packages\circuitbreaker.py", line 146, in wrapper
File "C:\Users\opc\cli-local-3\lib\site-packages\circuitbreaker.py", line 188, in call
File "C:\Users\opc\cli-local-3\lib\site-packages\oci\base_client.py", line 721, in request
File "C:\Users\opc\cli-local-3\lib\site-packages\oci\base_client.py", line 886, in raise_service_error
oci.exceptions.ServiceError: {'target_service': 'certificates_management', 'status': 400, 'code': 'InvalidParameter', 'opc-request-id': '8sdfssd', 'message': 'PEM File Certificate has incorrect format', 'operation_name': 'update_certificate', 'timestamp': '2025-04-14T19:43:45.076258+00:00', 'client_version': 'Oracle-PythonSDK/2.149.1', 'request_endpoint': 'PUT https://certificatesmanagement.ca-toronto-1.oci.oraclecloud.com/20210224/certificates/ocid1.certificate.oc1.ca-toronto-1.xxxxxxxxxxxxxxx', 'logging_tips': 'To get more info on the failing request, refer to https://docs.oracle.com/en-us/iaas/tools/python/latest/logging.html for ways to log the request/response details.', 'troubleshooting_tips': "See https://docs.oracle.com/iaas/Content/API/References/apierrors.htm#apierrors_400__400_invalidparameter for more information about resolving this error. Also see https://docs.oracle.com/iaas/api/#/en/certificatesmgmt/20210224/Certificate/UpdateCertificate for details on this operation's requirements. If you are unable to resolve this certificates_management issue, please contact Oracle support and provide them this full error message."}
PS C:\demo_cert\output> oci --version
3.54.0
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with services/certificates_management/src/oci_cli_certificates_management/certificatesmanagement_cli_extended.py and the generated update_certificate_update_certificate_by_importing_config_details command, then reproduce the Windows CLI request shown in the issue. Compare the request payload with the certificate update operation requirements; done means the command handles the reported certificate input without the 400 format error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- api, cli, cloud
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100