feat(specs): Add spec, tests and example for certificate import

Author: kklimonda-cl

assets/pango/client.go

@@ -971,7 +971,7 @@ func (c *Client) Communicate(ctx context.Context, cmd util.PangoCommand, strip b
 }
 
 // ImportFile imports the given file into PAN-OS.
-func (c *Client) ImportFile(ctx context.Context, cmd *xmlapi.Import, content, filename, fp string, strip bool, ans any) ([]byte, *http.Response, error) {
+func (c *Client) ImportFile(ctx context.Context, cmd *xmlapi.Import, content []byte, filename, fp string, strip bool, ans any) ([]byte, *http.Response, error) {
 	if cmd == nil {
 		return nil, nil, fmt.Errorf("cmd is nil")
 	}
@@ -1002,7 +1002,7 @@ func (c *Client) ImportFile(ctx context.Context, cmd *xmlapi.Import, content, fi
 		return nil, nil, err
 	}
 
-	if _, err = io.Copy(w2, strings.NewReader(content)); err != nil {
+	if _, err = io.Copy(w2, bytes.NewReader(content)); err != nil {
 		return nil, nil, err
 	}
 
@@ -1038,6 +1038,8 @@ func (c *Client) ExportFile(ctx context.Context, cmd *xmlapi.Export, ans any) (s
 		return "", nil, nil, err
 	}
 
+	req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
+
 	b, resp, err := c.sendRequest(ctx, req, false, ans)
 	if err != nil {
 		return "", b, resp, err

assets/pango/util/pangoclient.go

@@ -34,7 +34,7 @@ type PangoClient interface {
 
 	// Specialized communication functions around specific XPI API commands.
 	MultiConfig(context.Context, *xmlapi.MultiConfig, bool, url.Values) ([]byte, *http.Response, *xmlapi.MultiConfigResponse, error)
-	ImportFile(context.Context, *xmlapi.Import, string, string, string, bool, any) ([]byte, *http.Response, error)
+	ImportFile(context.Context, *xmlapi.Import, []byte, string, string, bool, any) ([]byte, *http.Response, error)
 	ExportFile(context.Context, *xmlapi.Export, any) (string, []byte, *http.Response, error)
 
 	// Operational functions in use by one or more resources / data sources / namespaces.

assets/terraform/examples/resources/panos_certificate_import/resource.tf

@@ -0,0 +1,24 @@
+resource "panos_certificate_import" "example1" {
+  location = { template = { name = panos_template.example.name } }
+
+  local = {
+    pem = {
+      certificate = file("cert.pem")     # PEM-encoded certificate
+      private_key = file("cert.key")     # PEM-encoded private key
+      passphrase  = "example-passphrase" # passphrase used to decrypt private key
+    }
+  }
+}
+
+resource "panos_template" "example2" {
+  location = { panorama = {} }
+
+  name = "example-template"
+
+  local = {
+    pcks12 = {
+      certificate = base64encode(file("cert.pkcs12"))
+      passphrase  = "example-passphrase"
+    }
+  }
+}

assets/terraform/go.mod

@@ -13,6 +13,7 @@ require (
 	github.com/hashicorp/terraform-plugin-testing v1.12.0
 	github.com/onsi/ginkgo/v2 v2.22.2
 	github.com/onsi/gomega v1.36.2
+	software.sslmate.com/src/go-pkcs12 v0.5.0
 )
 
 require (

assets/terraform/go.sum

@@ -253,3 +253,5 @@ gopkg.in/warnings.v0 v0.1.2 h1:wFXVbFY8DY5/xOe1ECiWdKCzZlxgshcYVNkBHstARME=
 gopkg.in/warnings.v0 v0.1.2/go.mod h1:jksf8JmL6Qr/oQM2OXTHunEvvTAsrWBLb6OOjuVWRNI=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+software.sslmate.com/src/go-pkcs12 v0.5.0 h1:EC6R394xgENTpZ4RltKydeDUjtlM5drOYIG9c6TVj2M=
+software.sslmate.com/src/go-pkcs12 v0.5.0/go.mod h1:Qiz0EyvDRJjjxGyUQa2cCNZn/wMyzrRJ/qcDXOQazLI=