Cyberduck Mountain Duck CLI

#9059 closed defect (duplicate)

Certificate error with S3 upload to bucket named as FQDN host

Reported by: sylnsr Owned by:
Priority: normal Milestone:
Component: s3 Version: 4.7.2
Severity: normal Keywords: S3 certificate
Cc: Architecture:
Platform:

Description

Steps to reproduce.

Create S3 bucket for a statically hosted site (https://docs.aws.amazon.com/AmazonS3/latest/dev/website-hosting-custom-domain-walkthrough.html)

Cyberduck for Windows 4.7.2: Configure a bookmark to access the bucket and you'll get a warning indicating that that the certificate is not valid and that "You might be connecting to a servver that is pretending to be <www.example.com>.s3.amazonaws.com" (where example.com is the bucket named after your FQDN).

duck.sh for Linux 4.7.2: Upload to the bucket and you will get a warning: The certificate for this server is invalid. You might be connecting to a server that is pretending to be “<www.example.com>.s3.amazonaws.com” which could put your confidential information at risk. Would you like to connect to the server anyway? (y/n): ... (where example.com is the bucket named after your FQDN)

In the case of the Windows Cyberduck UI one is given an option to click the button "Show Certificate" which does indeed show the valid certificate for *.s3.amazonaws.com

I don't experience this issue when uploading to buckets that do not match the FQDN format.

Change History (1)

comment:1 Changed on Oct 21, 2015 at 5:08:36 AM by dkocher

  • Component changed from core to s3
  • Resolution set to duplicate
  • Status changed from new to closed

Duplicate for #3813.

Note: See TracTickets for help on using tickets.