Cannot connect to a S3 disk (MinIO) using HTTPS just HTTP

I'm having a connection error when I trying to connect to a MinIO (S3) server over HTTPS, It just happens with HTTPS because when I use HTTP it works fine. Let me give you an example of what I mean.

// config/filesystems.php
'custom-minio-s3-disk' => [
  'driver' => 's3',
  'key' => env('CUSTOM_ACCESS_KEY'),
  'secret' => env('CUSTOM_SECRET_KEY'),
  'region' => 'us-east-1',
  'bucket' => env('CUSTOM_BUCKET'),
  // I skip using 'url' because with it or without it
  'endpoint' => env('CUSTOM_ENDPOINT'),
  'use_path_style_endpoint' => true,
  'throw' => false,
  'report' => false
]

# .env
CUSTOM_KEY=...
CUSTOM_SECRET_KEY=...
CUSTOM_BUCKET=bucket-name
CUSTOM_ENDPOINT=https://minio.mydomain.com # Using HTTPS

When I trying to access using HTTPS https://minio.mydomain.com I get errors when retrieving like:

Unable to check existence, when just trying to validate the existence of the file in the bucket
Unable to retrieve the file_size for file at location when file is already uploaded to the with livewire's livewire-tmp

But magically when using just HTTP http://192.168..:9000 the files can be retrieved and uploaded.

I don't know if It's something with my filesystem.php disk configuration or something else. At first glance I thought it was because of my use_path_style_endpoint but I change it to true, and it still not working. I've already did a test request using postman and it perfectly works with the key and secret credentials, and using the domain (https://minio.mydomain.com/bucket-name/image.png) and it works fine.

I would appreciate your help.

yeon-develope

1 year ago

Level 1

Partial solution

As I've alredy try using Minio (S3) disk with a domain name, and a valid Cloudflared SSL certificate (like https://minio.mydomain.com/bucket-name/...), I've get constantly error message for JUST retriving files and NOT for uploading files.

So I've decide to use OpenSSL certificates, and added to MinIO to serve as HTTPS with a local IP address (https://192.168..:9000) instead of the domain (which for sure will make a security gap if the app is served in a reverse proxy like Cloudflared Tunnel), but will work for now.

Resume

// config/filesystems.php
'custom-minio-s3-disk' => [
  # Configurations added
  'ssl.certificate_verification' => false, # Needed to skip console connection refuse
  'http' = [ 'verify' => false ],
]

// .env
CUSTOM_KEY=...
CUSTOM_SECRET_KEY=...
CUSTOM_BUCKET=bucket-name
CUSTOM_ENDPOINT=https://192.168..:9000 # Using HTTPS with a OpenSSL Certificate

I guess there's some good reason for this error to happen.

Please or to participate in this conversation.