bypass or disable SSL certificate verification for S3

Question

Hello Team,

We are stuck on one scenario,

We have IoT devices on the field, which are connected to the MQTT broker hosted on the AWS EC2. In that device, we have hard-coded the OTA S3 URL with HTTPS and Digicert root certificates for verification of the request.

Example URL: https://test3.s3.amazonaws.com/firmware/1.0.8.bin

Now when performing the OTA(Over the Air) updates, it is stuck at certificate verification error as AWS S3 has shifted the root certificates from Digicert to its own service known as Amazon trust service.

Can you please guide us on how to provide OTA updates bypassing verification of the certificate or any other method?

Thanks & Regards

Answer

The AWS Rust SDK allows disabling SSL verification by using the rustls library. This involves creating a custom struct that implements the ServerCertVerifier trait, where the verify_server_cert function always returns Ok(). Then, you configure the S3 client to use this verifier. The detailed code is available in this GitHub discussion​.

https://github.com/awslabs/aws-sdk-rust/discussions/650

If you're using the boto3 library, disabling SSL verification is as simple as passing verify=False when creating your S3 client:
https://stackoverflow.com/questions/60664637/sslerror-using-boto
https://github.com/iterative/dvc/issues/1394

```
s3 = boto3.client('s3', verify=False)

```

In the AWS SDK for Java, you can disable SSL verification by setting the TRUST_ALL_CERTIFICATES configuration option to true. 
https://stackoverflow.com/questions/54749971/is-it-possible-to-disable-ssl-certificate-checking-in-the-amazon-kinesis-consume

```
final AttributeMap attributeMap = AttributeMap.builder()
    .put(SdkHttpConfigurationOption.TRUST_ALL_CERTIFICATES, true)
    .build();
final SdkHttpClient sdkHttpClient = new DefaultSdkHttpClientBuilder().buildWithDefaults(attributeMap);
return S3Client.builder()
    .httpClient(sdkHttpClient)
    .build();
```

bypass or disable SSL certificate verification for S3

Relevant content