question Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_version, include_cert_status) in ITOM forum

Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_version, include_cert_status)

rp1 — Sun, 13 Mar 2022 21:33:48 GMT

We are trying to discover our CA certs with godaddy. We can manually get our cert list using the API Key/Secret and get any attempt in SNOW to get the information is resulting in the following error:

Pattern exit because Graceful Termination, reason: Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_version, include_cert_status)

I've put the MID server in debug mode and based on what I'm seeing it's not actually doing anything. Here's the relevant log info. Looks to me like it's saying it's doing something but it's actually not doing anything at all.

Line 55644: 03/13/22 17:25:07 (779) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: Certificate check for host[api.godaddy.com] is false
	Line 55645: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDX509TrustManager: checkServerTrusted is set to [trustAll]
	Line 55646: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: calculating security Policy to be applied on api.godaddy.com 
	Line 55647: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: returning a security policy from the fast cache!
	Line 55648: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: hostname verification for host[api.godaddy.com] is false
	Line 55649: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: calculating security Policy to be applied on api.godaddy.com 
	Line 55650: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: returning a security policy from the fast cache!
	Line 55651: 03/13/22 17:25:07 (826) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: MIDSecPolicy: Certificate revocation check for host[api.godaddy.com] is false
	Line 55794: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 WARNING *** WARNING *** Socket timeout
	Line 55795: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 *** Script: Error while getting Certificate ListTypeError: Cannot convert null to an object.
	Line 55796: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 *** Script: Result is empty.
	Line 55797: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 Slow execution (242336ms) of script: ad_hoc:EvalClosure-Get Certificates
	Line 55798: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)EvalClosure - {'result':[]}
	Line 55799: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)ExecutionContextImpl - setAttribute(content,%7B%22result%22:%5B%5D%7D)
	Line 55800: 03/13/22 17:29:07 (880) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)ExecutionContextImpl - setAttribute(name_server,mid)
	Line 55801: 03/13/22 17:29:07 (911) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)EvalClosure - <root><result /></root>
	Line 55802: 03/13/22 17:29:07 (927) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)DefaultPatternExecutor - Finished Step [name='Get Certificates', functor=CustomOperationClosure:CUSTOM_OPERATION:17b9a67e-9c4e-4aaa-a26b-fe6a06ebcfb0] with status [{type = SUCCESS}] execution took 242398 ms
	Line 55803: 03/13/22 17:29:07 (927) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)DefaultPatternExecutor - Execution time: 242398 ms
	Line 55804: 03/13/22 17:29:07 (927) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)DefaultPatternExecutor - Starting step: [name='Terminate if Certificate List is Empty', functor=MatchClosure:MATCH:b8d5f17f-3338-4d30-bae1-2db5536b4235]
	Line 55805: 03/13/22 17:29:07 (927) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)DefaultPatternExecutor - Finished Step [name='Terminate if Certificate List is Empty', functor=MatchClosure:MATCH:b8d5f17f-3338-4d30-bae1-2db5536b4235] with status [{type = GRACEFUL_TERMINATION, cause = com.snc.sw.exception.ConfigurationException: Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_version, include_cert_status)}] execution took 0 ms
	Line 55806: 03/13/22 17:29:07 (927) Worker-Standard:HorizontalDiscoveryProbe-c4039edc1bda4190f8dd52ce034bcb62 DEBUG: (71)DefaultPatternExecutor - Execution time: 0 ms

Re: Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_version, include_cert_status)

jlaue — Thu, 07 Apr 2022 19:03:02 GMT

Hello - just wondering if you ever got this resolved. Experiencing a similar issue.

Thanks!

Re: Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_version, include_cert_status)

rp1 — Thu, 07 Apr 2022 19:16:39 GMT

We did! It's now captured under PRB1567078.

Long story short you need to do the following.

1. Goto ecc_agent_script_include.list

2. Open SSLCertificateUtil

3. update line 16

GODADDY_MAX_SIZE_PER_REQ: 20, //GoDaddy apparently does not like the value 200 set by SNOW

Re: Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_version, include_cert_status)

shivareddy — Fri, 08 Apr 2022 06:29:47 GMT

Hello

We are facing same issue for "DigiCert" CA Type, We even tried updating this value to "DIGICERT_MAX_CERT_PER_PAGE_LIMIT: 20"

Kindly Help on this

Re: Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_version, include_cert_status)

alhalljr — Tue, 12 Apr 2022 22:29:05 GMT

I as well am experiencing this with my organization and I changed the line 16 and still get the same error and do not seem to discovery any Godaddy Certs.

Re: Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_version, include_cert_status)

rp1 — Tue, 12 Apr 2022 22:46:09 GMT

I have no experience on the digicert side it's possible there are other issues at play I would suggest you engage SNOW support and/or your digicert contact.

Re: Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_version, include_cert_status)

rp1 — Tue, 12 Apr 2022 22:49:53 GMT

so if you're getting the same issue try grabbing the output via cmd and/or postman. I was able to confirm that when the pagesize was 200 it was returning nothing and the result was consistent regardless of in SNOW, postman or via wget/curl

Example url that doesn't work via postman/curl:

https://api.godaddy.com/v1/certificates?pageSize=200&pageNumber=1

Example that does work via postman/curl:

https://api.godaddy.com/v1/certificates?pageSize=20&pageNumber=1

Re: Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_version, include_cert_status)

BhupeshG — Thu, 14 Apr 2022 07:49:39 GMT

Do we know what level of privlige does this API key needs in order to discover for go daddy and digicert

Re: Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_vers

AbdulRahimS2871 — Wed, 24 May 2023 06:36:00 GMT

Hey shiva,

I ended up in this thred since facing the same issue for digicert discovery.

Assuming you must haved fixed it would be great help if you can guide me

thanks,

Re: Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_vers

AbdulRahimS2871 — Wed, 24 May 2023 06:38:42 GMT

Hey rp1,

I am also facing similar issue like shiva, does the api key needs specific role/permissions? To be used in credentials

Thanks,

Abdul

Re: Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_vers

Mike Farmer1 — Mon, 29 Apr 2024 19:51:15 GMT

Shiva - were you able to find a solution?

Re: Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_vers

HeyMarkWarmack — Mon, 28 Apr 2025 22:07:04 GMT

Hello all - I am doing a 2025 check to this 2022 thread. I tried all the above suggestions with no luck.

We are now on Yokohama in DEV and trying to get a GoDaddy inventory pull.

I am getting this Discovery error on the "CA Trust Discovery":

Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_version, include_cert_status) , Pattern name: GoDaddy - Certificate Management.

I have tried several iterations of the variables:

ca_api_url

https://api.godaddy.com/
https://api.godaddy.com/v1/certificates

include_cert_status

valid,installed,retired,custom,active

Issued, Expired, Revoked, Canceled

If anyone was successful with pulling their full GoDaddy inventory, please share your success story.

Thank you!