The CreatorCon Call for Content is officially open! Get started here.

Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_version, include_cert_status)

rp1
Tera Expert

We are trying to discover our CA certs with godaddy.  We can manually get our cert list using the API Key/Secret and get any attempt in SNOW to get the information is resulting in the following error:

Pattern exit because Graceful Termination, reason: Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_version, include_cert_status)

I've put the MID server in debug mode and based on what I'm seeing it's not actually doing anything.  Here's the relevant log info.  Looks to me like it's saying it's doing something but it's actually not doing anything at all.

Line 55644: 03/13/22 17:25:07 (779) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: Certificate check for host[api.godaddy.com] is false
	Line 55645: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDX509TrustManager: checkServerTrusted is set to [trustAll]
	Line 55646: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: calculating security Policy to be applied on api.godaddy.com 
	Line 55647: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: returning a security policy from the fast cache!
	Line 55648: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: hostname verification for host[api.godaddy.com] is false
	Line 55649: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: calculating security Policy to be applied on api.godaddy.com 
	Line 55650: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: returning a security policy from the fast cache!
	Line 55651: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: Certificate revocation check for host[api.godaddy.com] is false
	Line 55794: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 WARNING *** WARNING *** Socket timeout
	Line 55795: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 *** Script: Error while getting Certificate ListTypeError: Cannot convert null to an object.
	Line 55796: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 *** Script: Result is empty.
	Line 55797: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 Slow execution (242336ms) of script: ad_hoc:EvalClosure-Get Certificates
	Line 55798: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)EvalClosure - {'result':[]}
	Line 55799: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)ExecutionContextImpl - setAttribute(content,%7B%22result%22:%5B%5D%7D)
	Line 55800: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)ExecutionContextImpl - setAttribute(name_server,mid)
	Line 55801: 03/13/22 17:29:07 (911) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)EvalClosure - <root><result /></root>
	Line 55802: 03/13/22 17:29:07 (927) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)DefaultPatternExecutor - Finished Step [name='Get Certificates', functor=CustomOperationClosure:CUSTOM_OPERATION:17b9a67e-9c4e-4aaa-a26b-fe6a06ebcfb0] with status [{type = SUCCESS}] execution took 242398 ms
	Line 55803: 03/13/22 17:29:07 (927) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)DefaultPatternExecutor - Execution time: 242398 ms
	Line 55804: 03/13/22 17:29:07 (927) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)DefaultPatternExecutor - Starting step: [name='Terminate if Certificate List is Empty', functor=MatchClosure:MATCH:b8d5f17f-3338-4d30-bae1-2db5536b4235]
	Line 55805: 03/13/22 17:29:07 (927) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)DefaultPatternExecutor - Finished Step [name='Terminate if Certificate List is Empty', functor=MatchClosure:MATCH:b8d5f17f-3338-4d30-bae1-2db5536b4235] with status [{type = GRACEFUL_TERMINATION, cause = com.snc.sw.exception.ConfigurationException: Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_version, include_cert_status)}] execution took 0 ms
	Line 55806: 03/13/22 17:29:07 (927) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)DefaultPatternExecutor - Execution time: 0 ms
1 ACCEPTED SOLUTION

We did!  It's now captured under PRB1567078.

 

Long story short you need to do the following.

 

1. Goto ecc_agent_script_include.list

2. Open SSLCertificateUtil

3. update line 16

GODADDY_MAX_SIZE_PER_REQ: 20, //GoDaddy apparently does not like the value 200 set by SNOW

View solution in original post

11 REPLIES 11

BhupeshG
Tera Guru

Do we know what level of privlige does this API key needs in order to discover for go daddy and digicert

HeyMarkWarmack
Tera Expert

Hello all - I am doing a 2025 check to this 2022 thread.  I tried all the above suggestions with no luck.

We are now on Yokohama in DEV and trying to get a GoDaddy inventory pull.

I am getting this Discovery error on the "CA Trust Discovery":

Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_version, include_cert_status) , Pattern name: GoDaddy - Certificate Management.

 

I have tried several iterations of the variables:

ca_api_url

https://api.godaddy.com/
https://api.godaddy.com/v1/certificates

include_cert_status

valid,installed,retired,custom,active

Issued, Expired, Revoked, Canceled

 

If anyone was successful with pulling their full GoDaddy inventory, please share your success story. 

Thank you!