[GH-ISSUE #1812] Not work --no-verify-ssl option for aws cli on some Runner #927

Closed
opened 2026-03-04 01:49:59 +03:00 by kerem · 1 comment
Owner

Originally created by @ggtakec on GitHub (Dec 2, 2021).
Original GitHub issue: https://github.com/s3fs-fuse/s3fs-fuse/issues/1812

Additional Information

In some GithubActions Runners(ubuntu 18.04, debian buster, opensuse/leap 15), the aws command call is in error.

The error is:

SSL validation failed for https://127.0.0.1:8080/s3fs-integration-test/testrun-30317/test-s3fs-ALT.txt [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:852)

The aws command is called with --no-verify-ssl but receives CERTIFICATE_VERIFY_FAILED.

I've tried some workarounds, but I still can't solve them, so I'll report them as Issue.

  • Specify --ca-bundle option
  • Specify AWS_CA_BUNDLE environment
  • Upgrade certifi pip pacakge
  • Reinstall ca-certificates and execute update-ca-certificates
  • etc

I've tried the above, but it still doesn't work.
I hope someone knew something ...

Originally created by @ggtakec on GitHub (Dec 2, 2021). Original GitHub issue: https://github.com/s3fs-fuse/s3fs-fuse/issues/1812 ### Additional Information In some GithubActions Runners(`ubuntu 18.04`, `debian buster`, `opensuse/leap 15`), the aws command call is in error. The error is: ``` SSL validation failed for https://127.0.0.1:8080/s3fs-integration-test/testrun-30317/test-s3fs-ALT.txt [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:852) ``` The aws command is called with `--no-verify-ssl` but receives `CERTIFICATE_VERIFY_FAILED`. I've tried some workarounds, but I still can't solve them, so I'll report them as Issue. - Specify `--ca-bundle` option - Specify `AWS_CA_BUNDLE` environment - Upgrade `certifi` pip pacakge - Reinstall `ca-certificates` and execute `update-ca-certificates` - etc I've tried the above, but it still doesn't work. I hope someone knew something ...
kerem closed this issue 2026-03-04 01:49:59 +03:00
Author
Owner

@gaul commented on GitHub (Jan 8, 2022):

Note that this only happens with the AWS CLI on older distros.

<!-- gh-comment-id:1007939462 --> @gaul commented on GitHub (Jan 8, 2022): Note that this only happens with the AWS CLI on older distros.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/s3fs-fuse#927
No description provided.