SQL DB extension

[KDalmeida]

I'm going through the steps to build an SQL extension and use Dynatrace CLI.

When I run the second command in step 4 "dt extension sign --key secrets/developer.pem"

error message "command not found: dt" 

Note: I'm using this doc https://docs.dynatrace.com/docs/extend-dynatrace/extensions20/sign-extension#install-cli 

[rudy_h]

Hi,

Have you run the first command? The result should be like this:

dt extension assemble
Building extension.zip from src
Adding file: src\alerts\buffer_cache_hit.json as alerts\buffer_cache_hit.json
Adding file: src\alerts\log_usage.json as alerts\log_usage.json
Adding file: src\dashboards\overview_dashboard.json as dashboards\overview_dashboard.json
Adding file: src\extension.yaml as extension.yaml

If you failed to run the first command, you need run this command first : pip install dt-cli

[KDalmeida]

I did a re-run of all the commands but did not get the extension.zip.sig file.

I have the bundle.zip and the extension.zip files

And when I ran the "dt extension upload bundle.zip" input my tenant url and api token I get error message:

"[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1000)"

[rudy_h]

Hi,

How about step 3? Have you done the following steps:

[KDalmeida]

 I found the credential vault and uploaded the root file. 

[KDalmeida]

Step 1: command: "pip install dt-cli" works and the installation is completed 

Step 2: ran successfully, and certificates and keys were generated. I got all the right output according to the doc. 

Step 3: Added root certificate to credential vault in the UI. Uploaded successfully. 

Step 4: The first command: "dt extension assemble" ran successfully and created extension.zip file

            The second command: "dt extension sign --key secrets/developer.pem" only creates bundle.zip and gives no                        output. 

How can I get the extension.zip.sig file? Please help 

[rudy_h]

Hi,

That file is in bundle.zip.

Please run the following step afterward:

If you installed the activegate in your PC, you may simply copy root.pem into the specified directory above.

[KDalmeida]

Hi,

My ActiveGate is AWS and I copied the root.pem file to the path. 

I'm still getting this error "[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1000)" 

[rudy_h]

Hi,

There are several .pem files in your secrets directory like this:

Are you sure you copy the 2 KB file? Also which file did you upload to the credential vault? Screen shot may help us to identify your fault

[KDalmeida]

These are the files in my secrets directory.

I uploaded the ca.pem file to the credential vault from the UI 

I added the ca.pem file to the Activegate host

[rudy_h]

Hi,

Please reupload the certificate into credential vault and give us the screen shot like this one:

Fill the description with your name to check whether it has successfully shown up in the credential vault list

[KDalmeida]

[rudy_h]

Hi,

Please input a description and save it. The description should show up in the credential vault list in the name & description column along with your email address in the Owner column.

Once you confirm it, please make sure that you input the same tenant url (the one you used to access the credential vault) when you run the "dt extension upload bundle.zip"

Sometimes you need to type the tenant url (not copy paste) to make sure they are exactly the same. 

[KDalmeida]

[KDalmeida]

I got the extension.zip.sig file but certificate verification is still failing when I run "dt extension upload bundle.zip"

error message "[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1000)" 

[rudy_h]

Hi,

Please check your access token:

Please show the expiration date and API v2 scopes

[KDalmeida]

My token is right it has all the required scopes. 

[KDalmeida]

[rudy_h · Accepted solution]

Hi,

Please check your Python version:

Please call command for windows: python -V

Please call command for linux: python3 --version

If your python does not meet the prerequisite, please upgrade it. Python 3.8 is the minimal version. I am using 3.12.5 and it is doing fine.