[Bug]: certificate p12 = The format of the file is invalid. about cli HOT 4 CLOSED

I've found the same posts, which is why I upgraded to the latest firmware, mine now is 20230822.

I think this looks like an HP bug and not related to step-cli, so I'm closing this issue.

Thank you for your help.

from cli.

Hey @LauraTaylorUK,

I found this SE thread with a similar error message, but using OpenSSL instead: https://serverfault.com/questions/1121312/error-message-the-format-of-the-file-is-invalid-when-attempting-to-import-cert. It may be worth a try to remove the intermediate certificate from your printer.crt, and then retry the original command (or maybe the --legacy one). Simplest option to make printer.crt contain just the leaf is to remove all but the first ----- BEGIN CERTIFICATE ----- / ----- END CERTIFICATE ----- parts.

You'll likely need to install the intermediate cert in the clients connecting to your printer too to get a successful TLS connection, because the printer won't have it available to serve it. You could also opt for manually signing a cert for the printer using the root key, so that the intermediate's not required to get a full chain.

If you indeed have to install the intermediate on your client(s), you could file a bug with HP, because servers are responsible for sending the leaf + intermediates.

from cli.

Thank you for the suggestio, I've tried the above trick, I removed the intermediate certificate but that did not help, same error :(

I also tried with and without --legacy.

from cli.

I also found these blog posts: part1, part2. Can you try it with a different firmware version? The blog posts indicate 20230321 might work? if it does, it might mean they broke the firmware again with the newer one you tried last?

from cli.