Applying Gateway 11.1.1 Patch Fails With Certificate Error

Products

• CA API Gateway

Issue/Introduction

Attempting to upload the Layer7_API_Gateway_Debian_v11.1.1-18484.L7P patch fails with the following error:

Patch operation failed : Patch API Error: Certificate is not trusted for signing patches:

Environment

CA API Gateway 11.1.1,  Gateway 11.1

Cause

Due to new signing algorithm requirements you will be required to use our PMS 2.0 component when going to gateway 11.1.1 or installing the August 2024 or later monthly platform patch. 

It is also required for the gateway 11.1 for all the patches after August 2024. 

Resolution

In order to install the required gateway 11.1.1 and 11.1 patches and subsequent Monthly Platform Patches you must first upgrade our underlying patch management service.

Prior to going to 11.1.1 upload and install the PMS Upgrade Patch (Layer7_API_PMS_Debian_v2.0.0-20240715115049.L7P).

You will then be able to upload and install the Layer7_API_Gateway_Debian_v11.1.1-18484.L7P patch successfully.

Additional Information

We mention this within our documentation which can be referenced here.