> Something else I found: The storage we have uses the signature algorithm
>> HMAC-SHA1 V2, whereas SigV4 uses HMAC-SHA256 as far as I understand, which
>> would explain the error. Can you confirm this and if so, what would be the
>> best workaround?
>>
>
> So you are using WALE_S3_ENDPOINT? I'm reasonably sure that I turned off
> Sigv4 when this was in use, attempting to avoid this outcome, so the
> problem could be something else. Perhaps confirm that WAL-E is attempting
> to use SigV4?
>
> You may have to enable debug output in boto to see what's going on, or
> instrument the code.
>
Indeed I use WALE_S3_ENDPOINT. What I found curious is that I got a warning
running the aforementioned command:
wal_e.blobstore.s3.s3_util WARNING MSG: WALE_S3_ENDPOINT defined, ignoring
AWS_REGION
HINT: AWS_REGION is only intended for use with AWS S3, and not
interface-compatible use cases supported by WALE_S3_ENDPOINT
STRUCTURED: time=2016-06-09T12:57:58.564420-00 pid=2433
Now, if I don't set AWS_REGION, then I get the obvious error "Could not
resolve host for AWS_REGION", so clearly it is required but why does it say
that it is ignoring AWS_REGION?
Furthermore, I tried creating the config file /etc/boto.cfg with contents
[Boto]
debug = 2
However, it seems that the file is not read, or at least I don't get
additional output. Did I miss something in the configuration?
In the meantime, I also looked at the code a bit and found in
/usr/lib/python2.7/site-packages/boto/auth.py
if hasattr(self, 'region'):
# If you're making changes here, you should also check
# ``boto/iam/connection.py``, as several things there are also
# endpoint-related.
if getattr(self.region, 'endpoint', ''):
for test in SIGV4_DETECT:
if test in self.region.endpoint:
return ['hmac-v4']
I found hmac-v4 in various other places too. Does this mean taht this what
is used when WALE_S3_ENDPOINT is set? As mentioned I need HMAC-SHA1 V2.
What S3-compatible software are you using? I don't know much about any of
> them in particular, but I'd like to know to get a sense of what people are
> doing with WAL-E.
>
I don't know much details myself, as we get the storage as a cloud service.
--
You received this message because you are subscribed to the Google Groups
"wal-e" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
