Discussion Forum

doon.mok

Member

Registered: May 6, 2015

Posts: 94

Cloud Storage - Amazon S3

I upgraded to 4.3.2 and tried connecting to Amazon S3 but I keep on getting secret/key invalid. I know the secret/key are correct as I am using them on my live website(Bigtree 4.2.24). I checked S3 and we are using the right region.

Any ideas why it wouldn't connect?
Thanks

timbuckingham

Administrator

From: Baltimore, MD

Registered: April 2, 2012

Posts: 925

Re: Cloud Storage - Amazon S3

Is there a specific environment you're using you're trying to secret / key in (local, live, dev, etc)? It's possible that the AWS library in your vendor folder is out of date and that's causing issues. You could try running "composer update" and see if that fixes it.

doon.mok

Member

Registered: May 6, 2015

Posts: 94

Re: Cloud Storage - Amazon S3

Hey Tim,

This is my local using MAMP. I did a composer update and it updated aws to  3.81.5

Loading composer repositories with package information
Updating dependencies (including require-dev)
Package operations: 0 installs, 1 update, 0 removals
  - Updating aws/aws-sdk-php (3.81.3 => 3.81.5): Downloading (100%)
Writing lock file
Generating autoload files

I also did a clean install of BigTree and same issue.
Any other ideas?
Thanks

timbuckingham

Administrator

From: Baltimore, MD

Registered: April 2, 2012

Posts: 925

Re: Cloud Storage - Amazon S3

That's really strange. I tested in my local BigTree 4.3 install with your secret / key (from the live site) and it connected without any issues.

I think we'll need to dump the actual error being returned (which is hopefully informative). Can you modify line 14 of /core/admin/modules/developer/cloud-storage/amazon/update.php to add:

print_r($cloud->Errors);
die();

And then tell me what the error message says?

doon.mok

Member

Registered: May 6, 2015

Posts: 94

Re: Cloud Storage - Amazon S3

Tim,

This is the error:

Array ( [0] => Error executing "ListBuckets" on "https://s3.amazonaws.com/"; AWS HTTP error: cURL error 60: SSL certificate problem: unable to get local issuer certificate (see http://curl.haxx.se/libcurl/c/libcurl-errors.html) )

timbuckingham

Administrator

From: Baltimore, MD

Registered: April 2, 2012

Posts: 925

Re: Cloud Storage - Amazon S3

Thanks! It looks like this is due to your local system using an old certificate authority bundle for cURL calls. It looks like there's an option for specifying one in the AWS SDK so I'm going to see if we can specify the one bundled with BigTree. I'll let you know when I have more info!

doon.mok

Member

Registered: May 6, 2015

Posts: 94

Re: Cloud Storage - Amazon S3

Thanks Tim!!!

timbuckingham

Administrator

From: Baltimore, MD

Registered: April 2, 2012

Posts: 925

Re: Cloud Storage - Amazon S3

I've pushed a commit that should now use BigTree's local CA Cert bundle when calling S3 / CloudFront:
https://github.com/bigtreecms/BigTree-C … 0c2dcb2d8e