Hi Fabrice, Don't worry, it has nothing to do with the internal format of those certificates. It's been a recent breakage and will be fixed in 16.2.2. In the meantime, you can find a workaround (well, you already nailed it: the CLI command that failed is just a wrapper around the "ceph config-key set" command), as well as the details and the PR here: the fix: https://tracker.ceph.com/issues/50519 Kind Regards, Ernesto On Tue, May 4, 2021 at 12:10 PM Fabrice Bacchella < fabrice.bacchella@xxxxxxxxx> wrote: > And worst: > > $ ceph config-key set mgr/restful/fa42/crt -i /data/ceph/conf/ceph.crt > set mgr/restful/fa42/crt > > The exact same certificate is accepted by the mgr. > > > > Le 3 mai 2021 à 23:03, Fabrice Bacchella <fabrice.bacchella@xxxxxxxxx> > a écrit : > > > > Once activated the dashboard, I try to import certificates, but it fails: > > > > $ ceph dashboard set-ssl-certificate-key -i /data/ceph/conf/ceph.key > > Error EINVAL: Traceback (most recent call last): > > File "/usr/share/ceph/mgr/mgr_module.py", line 1337, in _handle_command > > return CLICommand.COMMANDS[cmd['prefix']].call(self, cmd, inbuf) > > File "/usr/share/ceph/mgr/mgr_module.py", line 389, in call > > return self.func(mgr, **kwargs) > > File "/usr/share/ceph/mgr/dashboard/module.py", line 385, in > set_ssl_certificate_key > > self.set_store('key', inbuf.decode()) > > AttributeError: 'str' object has no attribute 'decode' > > > > $ ceph dashboard set-ssl-certificate -i /data/ceph/conf/ceph.crt > > Error EINVAL: Traceback (most recent call last): > > File "/usr/share/ceph/mgr/mgr_module.py", line 1337, in _handle_command > > return CLICommand.COMMANDS[cmd['prefix']].call(self, cmd, inbuf) > > File "/usr/share/ceph/mgr/mgr_module.py", line 389, in call > > return self.func(mgr, **kwargs) > > File "/usr/share/ceph/mgr/dashboard/module.py", line 372, in > set_ssl_certificate > > self.set_store('crt', inbuf.decode()) > > AttributeError: 'str' object has no attribute 'decode' > > > > > > They are both PEM encoded files: > > file /data/ceph/conf/ceph.key /data/ceph/conf/ceph.crt > > /data/ceph/conf/ceph.key: PEM RSA private key > > /data/ceph/conf/ceph.crt: PEM certificate > > > > What format does this command expect ? > > > > That error happens on Centos 8.3.2011 with ceph-mgr-16.2.1-0.el8.x86_64, > downloaded directly from ceph. > > _______________________________________________ > > ceph-users mailing list -- ceph-users@xxxxxxx > > To unsubscribe send an email to ceph-users-leave@xxxxxxx > > _______________________________________________ > ceph-users mailing list -- ceph-users@xxxxxxx > To unsubscribe send an email to ceph-users-leave@xxxxxxx > _______________________________________________ ceph-users mailing list -- ceph-users@xxxxxxx To unsubscribe send an email to ceph-users-leave@xxxxxxx
 |