Deployment to truenas 25.10 fail with certificate_create.passphrase: String should have at least 1 characte

[Horlogrium]

I think there as been a change on the python API client in the truenas update 25.10 which cause the deployment to not work anymore.

I have the following error :

Traceback (most recent call last):
  File "<stdin>", line 16, in <module>
  File "/usr/lib/python3/dist-packages/truenas_api_client/__init__.py", line 810, in call
    return self.wait(c, callback=callback, job=job, timeout=timeout,
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/truenas_api_client/__init__.py", line 863, in wait
    return jobobj.result()
           ^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/truenas_api_client/__init__.py", line 347, in result
    raise ValidationErrors(job['exc_info']['extra'] or [])
truenas_api_client.exc.ValidationErrors: [EINVAL] certificate_create.passphrase: String should have at least 1 character

[github-actions]

Please upgrade to the latest code and try again first. Maybe it's already fixed. acme.sh --upgrade If it's still not working, please provide the log with --debug 2, otherwise, nobody can help you.

[Horlogrium]

I was able to find out what the issue is and how to workaround it.
In the deploy file, the _ws_upload_cert use the "passphrase" call parameter. Which is not required but if not null should be at least 1 character long.

#_ws_upload_cert() {

  /usr/bin/env python - <<EOF

import sys

from truenas_api_client import Client
with Client(uri="$_ws_uri") as c:

  ### Login with API key
  print("I:Trying to upload new certificate...")
  ret = c.call("auth.login_with_api_key", "${DEPLOY_TRUENAS_APIKEY}")
  if ret:
    ### upload certificate
    with open('$1', 'r') as file:
      fullchain = file.read()
    with open('$2', 'r') as file:
      privatekey = file.read()
    ret = c.call("certificate.create", {"name": "$3", "create_type": "CERTIFICATE_CREATE_IMPORTED", "certificate": fullchain, "privatekey": privatekey, "passphrase": ""}, job=True)
    print("R:" + str(ret["id"]))
    sys.exit(0)
  else:
    print("R:0")
    print("E:_ws_upload_cert error!")
    sys.exit(7)

But in the actual file, if not specified, the passphrase is "" and so not long enough.

As i don't use it i remove it totally in the deploy file and i was able to deploy cert again.