[BUG]: after gateway installation the REST API test fails due to non-validated certificate

[coulof]

Describe the bug
After the gateway installation of the PowerFlex Gateway the REST API test fails due to non-validated certificate.

From the Catalina logs we have the error:

2024-03-25 11:09:39,361 [https-jsse-nio-443-exec-7] ERROR c.e.s.s.w.s.ScaleIOSecurityUtils - Password can't be empty
org.springframework.security.authentication.BadCredentialsException: Not Authenticated

To Reproduce
Install the PowerFlex Gateway and try the REST API

Below are the steps and fix

pflex.gateway.failure.and.fix.mp4

Expected behavior
MDM certificate must be auto-validated by the playbook instead of requesting a manual validation

System Information (please complete the following information):

• OS/Version: SLES 15.4
• Ansible Version: 4.x
• Python Version: 3.6

[anupamaloke]

@coulof , thank you for submitting this request. We will prioritize this and will add support in future releases.

[Bhavneet-Sharma]

We're able to reproduce the issue for PowerFlex 3.6.x. and working this fix to include in the collection asap. Bases on the investigation, the possible fix for issue are as following:

Method 1: GW API to upload the certs

1. Get token:

gw_ip=<gw_IP>; mdm_pass='<mdm_pass>';token=curl -k -u admin:$mdm_pass https://$gw_ip/api/login| sed 's/\"//g'

2. Pull remote MDM cert:

mdm_ip=<mdm_ip>; curl -k -u admin:$token https://$gw_ip/api/getHostCertificate/Mdm?host=$mdm_ip > /tmp/mdm.cer

3. Upload MDM cert to GW trust:

curl -k -u admin:$token -F "file=@/tmp/mdm.cer" https://$gw_ip/api/trustHostCertificate/Mdm

Method 2: SCP/Keytool upload

1). From the GW, SCP the MDM cert to the GW and upload it to the trust:

mdm_ip1=<mdm_ip>; scp root@$mdm_ip1:/opt/emc/scaleio/mdm/cfg/mdm_management_certificate.pem /tmp/ ; openssl x509 outform der -in /tmp/mdm_management_certificate.pem -out /tmp/mdm.der ; keytool -import -trustcacerts -alias "ou=asd, o=emc, c=us, st=massachusetts, l=hopkinton, cn=scaleio$mdm_ip1, givenname=$primarymdmname" -file /tmp/mdm.der -keystore /opt/emc/scaleio/gateway/webapps/ROOT/WEB-INF/classes/certificates/truststore.jks -storepass changeit

2). Restart GW:

service scaleio-gateway restart