For reference, this is the output from the minio cli when the trust forwarded https is not enabled:
``` $ mcli --insecure cp mcli_20230526233154.0.0_amd64.deb testbed/mybucket/encrypted-mcli2.deb --encrypt-key "testbed/mybucket/=JkjkEoXp0HC3YYVFm7IKaOoG/18ZvI8bQ/y+ioPNx2s=" mcli: <ERROR> Failed to copy `mcli_20230526233154.0.0_amd64.deb`. Error response code InvalidRequest.
# and debug output for the last request mcli: <DEBUG> PUT /mybucket/encrypted-mcli2.deb HTTP/1.1 Host: 192.168.151.118 User-Agent: MinIO (linux; amd64) minio-go/v7.0.55 mcli/RELEASE.2023-05-26T23-31-54Z Content-Length: 9862956 Authorization: AWS4-HMAC-SHA256 Credential=**REDACTED**/20230530/default/s3/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date;x-amz-server-side-encryption-customer-algorithm;x-amz-server-side-encryption-customer-key;x-amz-server-side-encryption-customer-key-md5, Signature=**REDACTED** Content-Type: application/x-debian-package X-Amz-Content-Sha256: UNSIGNED-PAYLOAD X-Amz-Date: 20230530T065040Z X-Amz-Server-Side-Encryption-Customer-Algorithm: AES256 X-Amz-Server-Side-Encryption-Customer-Key: JkjkEoXp0HC3YYVFm7IKaOoG/18ZvI8bQ/y+ioPNx2s= X-Amz-Server-Side-Encryption-Customer-Key-Md5: DqFKVxJ0Q63IcSfbi3fKnw== Accept-Encoding: gzip
mcli: <DEBUG> HTTP/1.1 400 Bad Request Connection: close Content-Length: 220 Accept-Ranges: bytes Content-Type: application/xml Date: Tue, 30 May 2023 06:50:40 GMT Server: Apache/2.4.52 (Ubuntu) X-Amz-Request-Id: tx00000b40b01d62d21cfb9-0064759cc0-2d9f-default
<?xml version="1.0" encoding="UTF-8"?><Error><Code>InvalidRequest</Code><BucketName>mybucket</BucketName><RequestId>tx00000b40b01d62d21cfb9-0064759cc0-2d9f-default</RequestId><HostId>2d9f-default-default</HostId></Error>mcli: <DEBUG> TLS Certificate found: mcli: <DEBUG> >> Expires: 2024-05-29 03:59:43 +0000 UTC mcli: <DEBUG> Response Time: 25.577889ms
```
And when it is, it works fine:
``` $ mcli --insecure cp mcli_20230526233154.0.0_amd64.deb testbed/mybucket/encrypted-mcli2.deb --encrypt-key "testbed/mybucket/=JkjkEoXp0HC3YYVFm7IKaOoG/18ZvI8bQ/y+ioPNx2s=" ...0230526233154.0.0_amd64.deb: 9.41 MiB / 9.41 MiB ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 28.95 MiB/s 0s ```
For reference, this is the output from the minio cli when the trust forwarded https is not enabled:
``` 3154.0. 0_amd64. deb testbed/ mybucket/ encrypted- mcli2.deb --encrypt-key "testbed/ mybucket/ =JkjkEoXp0HC3YY VFm7IKaOoG/ 18ZvI8bQ/ y+ioPNx2s= " 33154.0. 0_amd64. deb`. Error response code InvalidRequest.
$ mcli --insecure cp mcli_2023052623
mcli: <ERROR> Failed to copy `mcli_202305262
# and debug output for the last request encrypted- mcli2.deb HTTP/1.1 2023-05- 26T23-31- 54Z **REDACTED* */20230530/ default/ s3/aws4_ request, SignedHeaders= content- type;host; x-amz-content- sha256; x-amz-date; x-amz-server- side-encryption -customer- algorithm; x-amz-server- side-encryption -customer- key;x-amz- server- side-encryption -customer- key-md5, Signature= **REDACTED* * x-debian- package Sha256: UNSIGNED-PAYLOAD Side-Encryption -Customer- Algorithm: AES256 Side-Encryption -Customer- Key: JkjkEoXp0HC3YYV Fm7IKaOoG/ 18ZvI8bQ/ y+ioPNx2s= Side-Encryption -Customer- Key-Md5: DqFKVxJ0Q63IcSf bi3fKnw= =
mcli: <DEBUG> PUT /mybucket/
Host: 192.168.151.118
User-Agent: MinIO (linux; amd64) minio-go/v7.0.55 mcli/RELEASE.
Content-Length: 9862956
Authorization: AWS4-HMAC-SHA256 Credential=
Content-Type: application/
X-Amz-Content-
X-Amz-Date: 20230530T065040Z
X-Amz-Server-
X-Amz-Server-
X-Amz-Server-
Accept-Encoding: gzip
mcli: <DEBUG> HTTP/1.1 400 Bad Request 2d21cfb9- 0064759cc0- 2d9f-default
Connection: close
Content-Length: 220
Accept-Ranges: bytes
Content-Type: application/xml
Date: Tue, 30 May 2023 06:50:40 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Amz-Request-Id: tx00000b40b01d6
<?xml version="1.0" encoding= "UTF-8" ?><Error> <Code>InvalidRe quest</ Code><BucketNam e>mybucket< /BucketName> <RequestId> tx00000b40b01d6 2d21cfb9- 0064759cc0- 2d9f-default< /RequestId> <HostId> 2d9f-default- default< /HostId> </Error> mcli: <DEBUG> TLS Certificate found:
mcli: <DEBUG> >> Expires: 2024-05-29 03:59:43 +0000 UTC
mcli: <DEBUG> Response Time: 25.577889ms
```
And when it is, it works fine:
``` 3154.0. 0_amd64. deb testbed/ mybucket/ encrypted- mcli2.deb --encrypt-key "testbed/ mybucket/ =JkjkEoXp0HC3YY VFm7IKaOoG/ 18ZvI8bQ/ y+ioPNx2s= " 4.0.0_amd64. deb: 9.41 MiB / 9.41 MiB ━━━━━━━ ━━━━━━━ ━━━━━━━ ━━━━━━━ ━━━━━━━ ━━━━━━━ ━━━━━━━ ━━━━━━━ ━━━━━━━ ━━━━━━━ ━━━━━━━ ━━━━━━━ ━━━━━━━ ━━━━━━━ ━━━━━━━ ━ 28.95 MiB/s 0s
$ mcli --insecure cp mcli_2023052623
...023052623315
```