Working example for replacing certificates via SDK

[rsommer]

I am looking for a working example of replacing the TLS certificates via the automation API. The example script containes a minor error (#405 proposed), but even after fixing I always come across the following error:

com.vmware.vapi.std.errors_client.Error: {messages : [LocalizableMessage(id='com.vmware.certificatemanagement.error', default_message='Exception found (org.bouncycastle.asn1.DEROctetString cannot be cast to org.bouncycastle.asn1.ASN1Integer)', args=['org.bouncycastle.asn1.DEROctetString cannot be cast to org.bouncycastle.asn1.ASN1Integer'], params=None, localized=None)], data : None, error_type : ERROR}

The same error occured while I was trying to reimplement this powershell example in python. Inside that powershell script a lot of mangling is done with the certificate data while the docs clearly state that the data has to be given as strings in PEM format, not mentioning any special formatting?

Besides that, the given powershell example uses concatenated certificates containing combinations of cert, intermediate and root ca. From the documentation it is not really clear when to use just the single certificates or when to use a combined version.

I would be grateful for clarification.