Forum Discussion

jaikumar_f5_226's avatar
jaikumar_f5_226
Icon for Nimbostratus rankNimbostratus
Dec 08, 2017

An error has occurred while trying to process your request while selecting certificate

How to find the special character in the certificate. Getting the below error. Could not use GUI to see certificate details. Only tmos works.

        at iControl.ManagementKeyCertificateBindingStub.get_certificate_list_v2(ManagementKeyCertificateBindingStub.java:1760)
        at com.f5.model.security.PKIStore.getSSLCertificatesMap(PKIStore.java:82)
        ... 84 more
Caused by: org.xml.sax.SAXParseException; lineNumber: 1109; columnNumber: 43; An invalid XML character (Unicode: 0x13) was found in the element content of the document.
        at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.createSAXParseException(ErrorHandlerWrapper.java:198)
        at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.fatalError(ErrorHandlerWrapper.java:177)

I'm unable to narrow down the certificate which may be causing this.

I guess, I've hit article - K47741472: The Configuration utility does not process SSL keys and certificates with names that include special characters
iCall
LTM
security

4 Replies

Sort By
  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    Icon for Noctilucent rankNoctilucent
    Dec 09, 2017

    You have landed on right page. Infact I have also face similar issue. Best option to delete key/cert n re-import...

     

  • jaikumar_f5's avatar
    jaikumar_f5
    Icon for MVP rankMVP
    Dec 10, 2017

    Mate, there's 300+ certificates and I have no clue from when its happening, we hardly use GUI. If there's some log which could point out which certificate its happening for, it would be great. I also uploaded qkview in the Ihealth to see if it points out anything, no luck. No luck with the entire logs too.

     

  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    Icon for Noctilucent rankNoctilucent
    Dec 10, 2017

    Grep the key name via Unix command and review it. I know its bit tedious and time taken. Or connect with F5 support if they ve other option...

     

  • jaikumar_f5's avatar
    jaikumar_f5
    Icon for MVP rankMVP
    Dec 13, 2017

    I've fixed this, had to enable mcpd debug logging. Checked the mcpd.out log and went through the certificates collections and found which certificate was causing the issue.

     

    Deleted that particular cert and key. Issue got resolved.