I am having problems getting s3sync to work with SSL. It works fine without SSL. When I use SSL, I get the following error:
user@server:/opt/s3sync$ ruby s3sync.rb --ssl -v -n -d /home/user/localuploadfolder/ mybucket:remotefolder
s3Prefix remotefolder
localPrefix /home/user/localuploadfolder/
localTreeRecurse /home/user/localuploadfolder
Test /home/user/localuploadfolder/TEST~
Test /home/user/localuploadfolder/TEST
local item /home/user/localuploadfolder/TEST
local node object init. Name:TEST Path:/home/user/localuploadfolder/TEST Size:21 Tag:2d282102fa671256327d4767ec23bc6b
s3TreeRecurse mybucket remotefolder
Creating new connection
/usr/lib/ruby/1.8/net/http.rb:586:in `connect': certificate verify failed (OpenSSL::SSL::SSLError)
from /usr/lib/ruby/1.8/net/http.rb:586:in `connect'
from /usr/lib/ruby/1.8/net/http.rb:553:in `do_start'
from /usr/lib/ruby/1.8/net/http.rb:548:in `start'
from ./S3_s3sync_mod.rb:55:in `make_http'
from ./s3try.rb:62:in `S3tryConnect'
from ./s3try.rb:69:in `S3try'
from s3sync.rb:284:in `s3TreeRecurse'
from s3sync.rb:345:in `main'
from ./thread_generator.rb:79:in `call'
from ./thread_generator.rb:79:in `initialize'
from ./thread_generator.rb:76:in `new'
from ./thread_generator.rb:76:in `initialize'
from s3sync.rb:266:in `new'
from s3sync.rb:266:in `main'
from s3sync.rb:724
I took out specific identifying info. Here is packet in the tcpdump where the problem occurs. I can email the text file if you need to see the entire output of tcpdump.
9 0.153231 192.168.1.102 72.21.206.171 TLSv1 Alert (Level: Fatal, Description: Unknown CA)
I have tried my AWS X509 certificate, the README certificate, the certificates from here:
http://mirbsd.mirsolutions.de/cvs.cgi/src/etc/ssl.certs.shar and other certificates installed on my machine. All produce the same result. I have set the environment variable to the appropriate directory (which in my case is /opt/s3sync/certs) as well as tried pointing to a specific certificate. I set the variable in s3sconfig.yml as well as trying it through a shell script (export SSL_CERT_DIR=/opt/s3sync/certs and export SSL_CERT_FILE=/opt/s3sync/certs/ . . .).
I have Ruby 1.8.6 installed and have the libopenssl-ruby1.8 libraries installed. I am running Ubuntu 7.10 Gutsy Gibbon x64.
Please help. I really want to use s3sync and have spent many hours trying to figure this out on my own (well and with help from Google), but to no avail. I have searched these forums, the Ubuntu forums and various SSL forums, but have not found an answer (or at least one that I can understand).
Thank you in advance for any help you may be able to provide.
