DataSync Agent cannot reach Dell ECS onprem object storage with SSL error

Question

The errors I get are following:

S3 Exception: op=ListObjectsV2 bucket=xyz code=-1 type-99 exception=, msg=curlCode: 60, SSL peer certificate for SSH remote key was not OK

There was a certificate verification error communicating with the object storage endpoint. Verify the ServerCertificate provided for this location is a complete certificate chain for your object storage location.

I uploaded the ECS node chain PEM certificate when creating a Task in DataSync console. Agent is online, it has connectivity to ECS node on IP level - test passes.

Are self signed certificates good for DataSync Agent?

Is there a way to get more detailed info on why the certificate was rejected and by which node/host or service?

Answer

Hello, per [here ](https://aws.amazon.com/about-aws/whats-new/2022/10/aws-datasync-support-self-signed-certificates/)self-signed certificates are supported to be used with AWS DataSync. This is the same error message reported in this [post ](https://repost.aws/questions/QUisReMVxGRSilkqI4023QLQ/on-prem-object-storage-to-s3-datasync-task-failed-with-s3-exception-error-ssl-peer-certification-or-ssh-remote-key-was-not-ok).

I would recommend verifying the certificate chain and is valid, I would suggest checking this [thread](https://stackoverflow.com/a/26520714/5603107).

DataSync Agent cannot reach Dell ECS onprem object storage with SSL error

Relevant content