The CreatorCon Call for Content is officially open! Get started here.

Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_version, include_cert_status)

rp1
Tera Expert

We are trying to discover our CA certs with godaddy.  We can manually get our cert list using the API Key/Secret and get any attempt in SNOW to get the information is resulting in the following error:

Pattern exit because Graceful Termination, reason: Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_version, include_cert_status)

I've put the MID server in debug mode and based on what I'm seeing it's not actually doing anything.  Here's the relevant log info.  Looks to me like it's saying it's doing something but it's actually not doing anything at all.

Line 55644: 03/13/22 17:25:07 (779) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: Certificate check for host[api.godaddy.com] is false
	Line 55645: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDX509TrustManager: checkServerTrusted is set to [trustAll]
	Line 55646: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: calculating security Policy to be applied on api.godaddy.com 
	Line 55647: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: returning a security policy from the fast cache!
	Line 55648: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: hostname verification for host[api.godaddy.com] is false
	Line 55649: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: calculating security Policy to be applied on api.godaddy.com 
	Line 55650: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: returning a security policy from the fast cache!
	Line 55651: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: Certificate revocation check for host[api.godaddy.com] is false
	Line 55794: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 WARNING *** WARNING *** Socket timeout
	Line 55795: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 *** Script: Error while getting Certificate ListTypeError: Cannot convert null to an object.
	Line 55796: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 *** Script: Result is empty.
	Line 55797: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 Slow execution (242336ms) of script: ad_hoc:EvalClosure-Get Certificates
	Line 55798: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)EvalClosure - {'result':[]}
	Line 55799: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)ExecutionContextImpl - setAttribute(content,%7B%22result%22:%5B%5D%7D)
	Line 55800: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)ExecutionContextImpl - setAttribute(name_server,mid)
	Line 55801: 03/13/22 17:29:07 (911) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)EvalClosure - <root><result /></root>
	Line 55802: 03/13/22 17:29:07 (927) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)DefaultPatternExecutor - Finished Step [name='Get Certificates', functor=CustomOperationClosure:CUSTOM_OPERATION:17b9a67e-9c4e-4aaa-a26b-fe6a06ebcfb0] with status [{type = SUCCESS}] execution took 242398 ms
	Line 55803: 03/13/22 17:29:07 (927) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)DefaultPatternExecutor - Execution time: 242398 ms
	Line 55804: 03/13/22 17:29:07 (927) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)DefaultPatternExecutor - Starting step: [name='Terminate if Certificate List is Empty', functor=MatchClosure:MATCH:b8d5f17f-3338-4d30-bae1-2db5536b4235]
	Line 55805: 03/13/22 17:29:07 (927) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)DefaultPatternExecutor - Finished Step [name='Terminate if Certificate List is Empty', functor=MatchClosure:MATCH:b8d5f17f-3338-4d30-bae1-2db5536b4235] with status [{type = GRACEFUL_TERMINATION, cause = com.snc.sw.exception.ConfigurationException: Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_version, include_cert_status)}] execution took 0 ms
	Line 55806: 03/13/22 17:29:07 (927) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)DefaultPatternExecutor - Execution time: 0 ms
1 ACCEPTED SOLUTION

We did!  It's now captured under PRB1567078.

 

Long story short you need to do the following.

 

1. Goto ecc_agent_script_include.list

2. Open SSLCertificateUtil

3. update line 16

GODADDY_MAX_SIZE_PER_REQ: 20, //GoDaddy apparently does not like the value 200 set by SNOW

View solution in original post

11 REPLIES 11

Hey rp1,

 

I am also facing similar issue like shiva, does the api key needs specific role/permissions? To be used in credentials 

 

Thanks,

Abdul

Hey shiva,

 

I ended up in this thred since facing the same issue for digicert discovery.

 

 

Assuming you must haved fixed  it would be great help if you can guide me

 

thanks,

Shiva - were you able to find a solution?

alhalljr
Tera Contributor

I as well am experiencing this with my organization and I changed the line 16 and still get the same error and do not seem to discovery any Godaddy Certs.

so if you're getting the same issue try grabbing the output via cmd and/or postman.  I was able to confirm that when the pagesize was 200 it was returning nothing and the result was consistent regardless of in SNOW, postman or via wget/curl

Example url that doesn't work via postman/curl:

https://api.godaddy.com/v1/certificates?pageSize=200&pageNumber=1

Example that does work via postman/curl:

https://api.godaddy.com/v1/certificates?pageSize=20&pageNumber=1