curl - 获取 curl : (60) SSL certificate error with aws command

Question

当我在终端上使用 aws ls myBucket 或 aws mkdir newBucket 访问我的 S3 时，我得到:

curl: (60) SSL certificate problem: Invalid certificate chain
More details here: http://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using a "bundle"
of Certificate Authority (CA) public keys (CA certs). If the default
bundle file isn't adequate, you can specify an alternate file
using the --cacert option.

If this HTTPS server uses a certificate signed by a CA represented in
the bundle, the certificate verification probably failed due to a
problem with the certificate (it might be expired, or the name might
not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
the -k (or --insecure) option.

我不熟悉curl，如何解决这个问题？我的操作系统是 OSX 10.9.2

谢谢!

Answer 1

您的桶中是否包含点，例如 com.example.mybucket ？我还假设你使用这个 aws Perl client蒂姆·凯？

如果是，则问题与此客户端在后台执行 virtual-hosted-style requests 的事实有关。 ，例如 GET https://com.example.mybucket.s3.amazonaws.com/... .

Note: you can verify this as follow: aws --curl-options="-v" ls com.example.mybucket 2>&1 | grep "About to connect"

这种虚拟主机风格的请求会导致 certificate verification problem .

所以，我强烈建议您使用官方 AWS Command Line Interface 。使用它非常简单:

aws s3 ls com.example.mybucket

---

或者，穷人的解决方案是关闭 curl 详述的证书验证，如下所示:

aws --curl-options="-k" ls com.example.mybucket