TLS Enabled on ECS Service Connect not working, Certificate verification unsuccessful

Hi, I was trying to enable TLS on my service for encrypted service-to-service communication. I followed this guide. But when I tried to verify if the TLS was enabled successfully (I followed this guide - I got this error:

Command: openssl s_client -connect 192.168.92.125:80 < /dev/null 2> /dev/null | openssl x509 -noout -text Output:

Could not read certificate from <stdin>
48EB9A21CB7F0000:error:1608010C:STORE routines:ossl_store_handle_load_result:unsupported:crypto/store/store_result.c:151:

I ran the command inside my task container where the TLS was enabled. I am just a newbie in tech and am not familiar with how these things work. I hope someone can help me troubleshoot further.

So these were my configurations:

• AWS Private CA

  • Mode Options: Short-lived certificates
  • CA Type: Root
  • Key Algo: RSA 2048
  • Added a tag: AmazonECSManaged: true

• Attach this policy to the role I used -AmazonECSInfrastructureRolePolicyForServiceConnectTransportLayerSecurity

• KMSKey - I selected AWS Managed

• Task Definition

{
    "family": "svc-3",
    "containerDefinitions": [
        {
            "name": "backend-copy",
            "image": "252711609309.dkr.ecr.ap-southeast-2.amazonaws.com/hello-world/api:59800f63",
            "cpu": 0,
            "portMappings": [
                {
                    "name": "backend-copy",
                    "containerPort": 80,
                    "hostPort": 80,
                    "protocol": "tcp",
                    "appProtocol": "http"
                }
            ],
            "essential": true,
            "environment": [],
            "mountPoints": [],
            "volumesFrom": [],
            "logConfiguration": {
                "logDriver": "awslogs",
                "options": {
                    "awslogs-group": "/ecs/svc-3",
                    "mode": "non-blocking",
                    "awslogs-create-group": "true",
                    "max-buffer-size": "25m",
                    "awslogs-region": "ap-southeast-2",
                    "awslogs-stream-prefix": "ecs"
                }
            },
            "systemControls": []
        }
    ],
    "taskRoleArn": "arn:aws:iam::<AWS-ID>:role/fargate-test-task-role",
    "executionRoleArn": "arn:aws:I am::<AWS-ID>:role/fargate-test-task-exec-role",
    "networkMode": "awsvpc",
    "volumes": [],
    "placementConstraints": [],
    "requiresCompatibilities": [
        "FARGATE"
    ],
    "cpu": "256",
    "memory": "512",
    "runtimePlatform": {
        "cpuArchitecture": "X86_64",
        "operatingSystemFamily": "LINUX"
    },
    "enableFaultInjection": false
}

I can curl my API endpoint from my other service, but TLS was not just working.