terraform-provider-akamai icon indicating copy to clipboard operation
terraform-provider-akamai copied to clipboard

Edge-Hostname failed to create with 3rd party wildcard certificate

Open nguyendk270996 opened this issue 2 years ago • 1 comments

Hi there,

I encounterd API error while trying to create an edge hostname using 3rd party wildcard certificate.

The cert is active and I can create edge hostname using that cert normally on web UI.

Terraform Version

Terraform v1.1.7

Terraform Configuration Files

resource "akamai_edge_hostname" "this" {
  product_id    = var.edge_product_id
  contract_id   = data.akamai_contract.this.id
  group_id      = data.akamai_group.this.id
  edge_hostname = "${var.domain_name}.${var.domain_suffix}"
  certificate   = var.cps_enrollment_id
  ip_behavior   = var.ip_behavior
}

Expected Behavior

Edge Host name successfully created

Actual Behavior

image

nguyendk270996 avatar Oct 13 '22 07:10 nguyendk270996

Hello @nguyendk270996 Thank You for reporting this issue. Regarding the certificate You mentioned. Can you please confirm two values in the certificate: both certificateType and validationType are third-party (not e.g. ov or wildcard-san)? And the wildcard occurs in common name or in one of the sans?

Thanks and best regards, Wojciech

wzagrajcz avatar Oct 20 '22 12:10 wzagrajcz

Hi Wojciech,

The certificate type and validation type are 3rd party and wildcard is in CN not SAN

Thanks,

Nguyen

nguyendk270996 avatar Oct 25 '22 14:10 nguyendk270996

Hi @nguyendk270996,

Thank you for additional information. We will try to reproduce it from our side.

Best regards, Tatiana

Slonimskaia avatar Oct 26 '22 10:10 Slonimskaia

Hello @nguyendk270996 We have some difficulties in recreating this issue - our tests successfully creates edge hostname based on provided information. Can You please provide some more details? Anything that You feel comfortable sharing would be beneficial for both edgehostname (e.g. product_id, ip_behaviour) and enrollment (e.g. usage of dual stack, change management, thirdParty.excludeSans, maxAllowedWildcardSanNames, networkConfiguration). Was creation of hostname from UI and attempt from terraform made using the same credentials?

Thanks and best regards, Wojciech

wzagrajcz avatar Nov 21 '22 15:11 wzagrajcz