Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_version, include_cert_status)

[rp1]

We are trying to discover our CA certs with godaddy.  We can manually get our cert list using the API Key/Secret and get any attempt in SNOW to get the information is resulting in the following error:

Pattern exit because Graceful Termination, reason: Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_version, include_cert_status)

I've put the MID server in debug mode and based on what I'm seeing it's not actually doing anything.  Here's the relevant log info.  Looks to me like it's saying it's doing something but it's actually not doing anything at all.

Line 55644: 03/13/22 17:25:07 (779) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: Certificate check for host[api.godaddy.com] is false
	Line 55645: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDX509TrustManager: checkServerTrusted is set to [trustAll]
	Line 55646: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: calculating security Policy to be applied on api.godaddy.com 
	Line 55647: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: returning a security policy from the fast cache!
	Line 55648: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: hostname verification for host[api.godaddy.com] is false
	Line 55649: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: calculating security Policy to be applied on api.godaddy.com 
	Line 55650: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: returning a security policy from the fast cache!
	Line 55651: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: Certificate revocation check for host[api.godaddy.com] is false
	Line 55794: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 WARNING *** WARNING *** Socket timeout
	Line 55795: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 *** Script: Error while getting Certificate ListTypeError: Cannot convert null to an object.
	Line 55796: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 *** Script: Result is empty.
	Line 55797: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 Slow execution (242336ms) of script: ad_hoc:EvalClosure-Get Certificates
	Line 55798: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)EvalClosure - {'result':[]}
	Line 55799: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)ExecutionContextImpl - setAttribute(content,%7B%22result%22:%5B%5D%7D)
	Line 55800: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)ExecutionContextImpl - setAttribute(name_server,mid)
	Line 55801: 03/13/22 17:29:07 (911) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)EvalClosure - <root><result /></root>
	Line 55802: 03/13/22 17:29:07 (927) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)DefaultPatternExecutor - Finished Step [name='Get Certificates', functor=CustomOperationClosure:CUSTOM_OPERATION:17b9a67e-9c4e-4aaa-a26b-fe6a06ebcfb0] with status [{type = SUCCESS}] execution took 242398 ms
	Line 55803: 03/13/22 17:29:07 (927) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)DefaultPatternExecutor - Execution time: 242398 ms
	Line 55804: 03/13/22 17:29:07 (927) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)DefaultPatternExecutor - Starting step: [name='Terminate if Certificate List is Empty', functor=MatchClosure:MATCH:b8d5f17f-3338-4d30-bae1-2db5536b4235]
	Line 55805: 03/13/22 17:29:07 (927) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)DefaultPatternExecutor - Finished Step [name='Terminate if Certificate List is Empty', functor=MatchClosure:MATCH:b8d5f17f-3338-4d30-bae1-2db5536b4235] with status [{type = GRACEFUL_TERMINATION, cause = com.snc.sw.exception.ConfigurationException: Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_version, include_cert_status)}] execution took 0 ms
	Line 55806: 03/13/22 17:29:07 (927) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)DefaultPatternExecutor - Execution time: 0 ms

[jlaue]

Hello - just wondering if you ever got this resolved.  Experiencing a similar issue.

Thanks!

[rp1 · Accepted solution]

We did!  It's now captured under PRB1567078.

Long story short you need to do the following.

1. Goto ecc_agent_script_include.list

2. Open SSLCertificateUtil

3. update line 16

GODADDY_MAX_SIZE_PER_REQ: 20, //GoDaddy apparently does not like the value 200 set by SNOW

[shivareddy]

Hello

We are facing same issue for "DigiCert" CA Type, We even tried updating this value to "DIGICERT_MAX_CERT_PER_PAGE_LIMIT: 20"

Kindly Help on this

[rp1]

I have no experience on the digicert side it's possible there are other issues at play I would suggest you engage SNOW support and/or your digicert contact.