GUI for VirtualService, Pools and Certificates is not loading.

Products

• VMware Avi Load Balancer

Issue/Introduction

- In the Avi Loadbalancer versions prior to 22.1.x, there may arise a situation where the GUI for VirtualService, Pools and Certificates stops loading, after uploading a certificate.

- The api queries when checked on the browser may show the below error code

Request URL:

https://xx.xx.x.x/api/virtualservice-inventory/<uuid>/?include_name=true&include=health_score%2Cruntime%2Calert%2Cfaults&step=300&limit=72&

Request Method:

GET

Status Code:

500 Internal Server Error

Remote Address:

10.192.8.116:443

Referrer Policy:

strict-origin

- This is caused by an invalid certificate uploaded to the system.

Environment

Issue may be seen in 22.1.x version

 

Cause

- This issue may arise when a corrupted certificate with null-characters (\u0000) are uploaded to the controllers
- Since these null-characters are unable to be decoded by the internal framework, it may throw the below exceptions in /var/lib/avi/log/portal-webapp.log

- The JSON data shown in the exception may be used to identify the certificate from the avi_config

Resolution

- To resolve the issue, the corrupted certificate will have to be removed using the CLI.

 

Steps to remove the certificate from CLI

• ssh to the controller
• type "shell" and provide the credentials
• type the below command to delete the erroneous certificate 

- delete sslkeyandcertificate <name>

Additional Information

The issue does not occur in 30.x versions since a different framework is being used to decode the certificate.