cannot update local certificate

[niklsj]

I'm unable to update a local certificate using the API, I can do it manually in the console by entering the same new private-key and certificate values that the API is rejecting.

When running the following snippet the API returns 500:

api = FortiGateAPI(host=HOST, username=USERNAME, password=PASSWORD)
data = {
"name" : "acme-test",
"private-key": privkey.read(),
"certificate": certificate.read()
}
response = api.cmdb.certificate.local.update(data)

In command debugging on the FortiGate I can see a different private-key and the old certificate is reentered.

[vladimirs-git]

Try to enable logging for more verbose error output.

import logging
logging.getLogger().setLevel(logging.DEBUG)
api = FortiGateAPI(host=HOST, username=USERNAME, password=PASSWORD, logging=True)

On my Fortinet FGT_100F v7.4, I don’t see the config certificate local command. I only have config vpn certificate local and api.cmdb.vpn_certificate.local.update(data) is working.

[niklsj]

The logging shows this url:
INFO:root:code=500 reason='Internal Server Error' url='https://fortigate:443/api/v2/cmdb/certificate/local/acme-test?vdom=root'

My FortiGate is running in multi-vdom mode and the config certificate local command is available when you are in the global scope.

I don't have access to FNDN but I assume the API call should contain ?scope=global instead of ?vdom=root. I cant find a way to configure this in FortiGateAPI, only to change the vdom.

[vladimirs-git]

I am not able to troubleshoot this case at the moment. If you can share a reproducible working example, I will look into updating the functionality.