Cannot Connect to endpoint with https/ssl

[SnowfallDan]

code like this：

void Service::initS3Client()
{
    try
    {
        Aws::Client::ClientConfiguration cfg;
        std::string endpoint = INI_CONFIG["S3.s3_endpoint"];
        std::string usr_name = INI_CONFIG["S3.s3_username"];
        std::string passwd = INI_CONFIG["S3.s3_passwd"];

        cfg.endpointOverride = Aws::String(endpoint.c_str(), endpoint.size());
        cfg.scheme = Aws::Http::Scheme::HTTPS;
        cfg.verifySSL = true;

        auto auth = Aws::Auth::AWSCredentials(
            Aws::String(usr_name.c_str(), usr_name.size()), 
            Aws::String(passwd.c_str(), passwd.size()));

        m_S3ClientPtr = new S3Client(auth, cfg, false, false);
        auto response = m_S3ClientPtr->ListBuckets();
        m_S3Connected = response.IsSuccess();
        if (!m_S3Connected)
        {
            auto code = response.GetError().GetResponseCode();
            LOG_ERROR("Connect Failed！error = {}", response.GetError().GetMessage());
            return;
        }

        LOG_INFO("Connected! endpoint = {}", endpoint);
    }
    catch (std::exception& e)
    {
        LOG_ERROR("Exception! message = {}", e.what());
    }
}

config like this:

s3_endpoint=xxx.xxx.com.cn:28780
s3_username=AKIA12344567D4CC27F8
s3_passwd=*****

I try Go SDK with same config, it works. Also S3 Browser.

Aws log :

[TRACE] 2022-11-08 18:42:11 WinHttpSyncHttpClient [30308] Making GET request to uri https://xxx.xxx.com.cn:28780
[INFO] 2022-11-08 18:42:11 WinHttpConnectionPoolMgr [30308] Attempting to aquire connection for xxx.xxx.com.cn:28780
[DEBUG] 2022-11-08 18:42:11 WinHttpConnectionPoolMgr [30308] Pool doesn't exist for endpoint, creating...
[DEBUG] 2022-11-08 18:42:11 WinHttpConnectionPoolMgr [30308] Pool has no available existing connections for endpoint, attempting to grow pool.
[INFO] 2022-11-08 18:42:11 WinHttpConnectionPoolMgr [30308] Connection now available, continuing.
[DEBUG] 2022-11-08 18:42:11 WinHttpConnectionPoolMgr [30308] Returning connection handle 0097DF00
[DEBUG] 2022-11-08 18:42:11 WinHttpSyncHttpClient [30308] Acquired connection 0097DF00
[DEBUG] 2022-11-08 18:42:11 WinHttpSyncHttpClient [30308] AllocateWindowsHttpRequest returned handle 0097F9E8
[DEBUG] 2022-11-08 18:42:11 WinHttpSyncHttpClient [30308] with headers:
[DEBUG] 2022-11-08 18:42:11 WinHttpSyncHttpClient [30308] authorization: AWS4-HMAC-SHA256 Credential=AKIA3AEFE88ED4CC27F8/20221108/us-east-1/s3/aws4_request, SignedHeaders=host;x-amz-content-sha256;x-amz-date, Signature=c3a219c1da5ec93d458ebc79716dad2bddf997190bfedb593cae0c6bd0d36572

host: dfs-prd.chinastock.com.cn

user-agent: aws-sdk-cpp/1.0.164 Windows/10.0.19041.804 x86

x-amz-content-sha256: UNSIGNED-PAYLOAD

x-amz-date: 20221108T104211Z


[DEBUG] 2022-11-08 18:42:11 WinHttpSyncHttpClient [30308] Received response code 403
[DEBUG] 2022-11-08 18:42:11 WinHttpSyncHttpClient [30308] Received content type application/xml
[DEBUG] 2022-11-08 18:42:11 WinHttpSyncHttpClient [30308] Received headers:
[DEBUG] 2022-11-08 18:42:11 WinHttpSyncHttpClient [30308] HTTP/1.1 403 Forbidden

Connection: keep-alive

Date: Tue, 08 Nov 2022 10:42:25 GMT

Content-Length: 329

Content-Type: application/xml

Server: openresty/1.19.9.1

x-amz-id-2: 

x-amz-request-id: 0a0148df:1785e4bf8d2:ba66b:1




[TRACE] 2022-11-08 18:42:11 WinHttpSyncHttpClient [30308] Response content-length header: 329
[TRACE] 2022-11-08 18:42:11 WinHttpSyncHttpClient [30308] Response body length: 329
[DEBUG] 2022-11-08 18:42:11 WinHttpSyncHttpClient [30308] Closing http request handle 0097F9E8
[DEBUG] 2022-11-08 18:42:11 WinHttpSyncHttpClient [30308] Releasing connection handle 0097DF00
[DEBUG] 2022-11-08 18:42:11 WinHttpConnectionPoolMgr [30308] Releasing connection to endpoint dfs-prd.chinastock.com.cn:28780
[DEBUG] 2022-11-08 18:42:11 AWSClient [30308] Request returned error. Attempting to generate appropriate error codes from response
[TRACE] 2022-11-08 18:42:11 AWSErrorMarshaller [30308] Error response is <?xml version="1.0"?>
<Error>
    <Code>SignatureDoesNotMatch</Code>
    <Message>The request signature we calculated does not match the signature you provided. Check your Secret Access Key and signing method. For more information, see REST Authentication and SOAP Authentication for details.</Message>
    <RequestId>0a0148df:1785e4bf8d2:ba66b:1</RequestId>
</Error>

[WARN] 2022-11-08 18:42:11 AWSErrorMarshaller [30308] Encountered AWSError
SignatureDoesNotMatch
The request signature we calculated does not match the signature you provided. Check your Secret Access Key and signing method. For more information, see REST Authentication and SOAP Authentication for details.:

I check the auth when debugging. it's same with the config.

Anyone Can help me....

[byronwind]

cfg.verifySSL = false; // disable verifySSL

[jmklix]

It looks like you're using a 3rd party s3 service. I can't help you debug that because we don't guarantee that this sdk will work with other s3 services. If you can reproduce this error with AWS s3 then I can try to help diagnose any problems