SSL Validation error

0

I am trying to run a CloudFormation template through CLI and I am getting SSL validation error, I am also getting same error for the command aws s3 ls SSL validation failed for https://s3.us-east-1.amazonaws.com/ [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1002). I would like to know solution for this

Tej
已提問 8 個月前檢視次數 2167 次
1 個回答
0

Hello.

This may occur when special CAs or other special CAs are used in the environment where the AWS CLI is running.
https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-troubleshooting.html#tshoot-certificate-verify-failed

When you use a AWS CLI command, you receive an [SSL: CERTIFICATE_ VERIFY_FAILED] certificate verify failed error message. This is caused by the AWS CLI not trusting your proxy's certificate due to factors such as your proxy's certificate being self-signed, with your company set as the Certification Authority (CA). This prevents the AWS CLI from finding your companies CA root certificate in the local CA registry.

If you just want to run the command for now, you can add "--no-verify-ssl" as an option.

aws s3 ls --no-verify-ssl

However, "--no-verify-ssl" is not recommended for security reasons and should be used as a temporary measure.
Basically, it is best to specify the CA certificate with the "--ca-bundle" option.
https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-options.html

This option is not best practice. If you use --no-verify-ssl, your traffic between your client and AWS services is no longer secured. This means your traffic is a security risk and vulnerable to man-in-the-middle exploits. If you're having issues with certificates, it's best to resolve those issues instead. For certificate troubleshooting steps, see SSL certificate errors.

profile picture
專家
已回答 8 個月前
profile pictureAWS
專家
已審閱 8 個月前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南