Comment 2 for bug 2021560

Revision history for this message
Samuel Walladge (swalladge) wrote :

For reference, this is the output from the minio cli when the trust forwarded https is not enabled:

```
$ mcli --insecure cp mcli_20230526233154.0.0_amd64.deb testbed/mybucket/encrypted-mcli2.deb --encrypt-key "testbed/mybucket/=JkjkEoXp0HC3YYVFm7IKaOoG/18ZvI8bQ/y+ioPNx2s="
mcli: <ERROR> Failed to copy `mcli_20230526233154.0.0_amd64.deb`. Error response code InvalidRequest.

# and debug output for the last request
mcli: <DEBUG> PUT /mybucket/encrypted-mcli2.deb HTTP/1.1
Host: 192.168.151.118
User-Agent: MinIO (linux; amd64) minio-go/v7.0.55 mcli/RELEASE.2023-05-26T23-31-54Z
Content-Length: 9862956
Authorization: AWS4-HMAC-SHA256 Credential=**REDACTED**/20230530/default/s3/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date;x-amz-server-side-encryption-customer-algorithm;x-amz-server-side-encryption-customer-key;x-amz-server-side-encryption-customer-key-md5, Signature=**REDACTED**
Content-Type: application/x-debian-package
X-Amz-Content-Sha256: UNSIGNED-PAYLOAD
X-Amz-Date: 20230530T065040Z
X-Amz-Server-Side-Encryption-Customer-Algorithm: AES256
X-Amz-Server-Side-Encryption-Customer-Key: JkjkEoXp0HC3YYVFm7IKaOoG/18ZvI8bQ/y+ioPNx2s=
X-Amz-Server-Side-Encryption-Customer-Key-Md5: DqFKVxJ0Q63IcSfbi3fKnw==
Accept-Encoding: gzip

mcli: <DEBUG> HTTP/1.1 400 Bad Request
Connection: close
Content-Length: 220
Accept-Ranges: bytes
Content-Type: application/xml
Date: Tue, 30 May 2023 06:50:40 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Amz-Request-Id: tx00000b40b01d62d21cfb9-0064759cc0-2d9f-default

<?xml version="1.0" encoding="UTF-8"?><Error><Code>InvalidRequest</Code><BucketName>mybucket</BucketName><RequestId>tx00000b40b01d62d21cfb9-0064759cc0-2d9f-default</RequestId><HostId>2d9f-default-default</HostId></Error>mcli: <DEBUG> TLS Certificate found:
mcli: <DEBUG> >> Expires: 2024-05-29 03:59:43 +0000 UTC
mcli: <DEBUG> Response Time: 25.577889ms

```

And when it is, it works fine:

```
$ mcli --insecure cp mcli_20230526233154.0.0_amd64.deb testbed/mybucket/encrypted-mcli2.deb --encrypt-key "testbed/mybucket/=JkjkEoXp0HC3YYVFm7IKaOoG/18ZvI8bQ/y+ioPNx2s="
...0230526233154.0.0_amd64.deb: 9.41 MiB / 9.41 MiB ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 28.95 MiB/s 0s
```