Latest changes to DownloadManifest

1 view
Skip to first unread message

Vasiliy Kochergin

unread,
Jan 14, 2015, 3:27:55 PM1/14/15
to Storage Team, Quality Assurance Team
Folks,
Looks like latest change in the DownloadManifestFactory and its usage
of S3Client broke pre-sign URLs. The one that are created triggering
'signature mismatch' at download time. Any ideas what could trigger
that issue?

Vasya.

Swathi Gangisetty

unread,
Jan 14, 2015, 3:30:46 PM1/14/15
to Vasiliy Kochergin, Storage Team, Quality Assurance Team
Vasya, 

Can you be more specific about the error. Do you have any logs that we could take a look at? Also any pointers to the changes you are referring would be helpful. 

Thanks,
Swathi

Vasiliy Kochergin

unread,
Jan 14, 2015, 3:57:25 PM1/14/15
to Swathi Gangisetty, Storage Team, Quality Assurance Team
I wish I can be more specific. I see only that pre-signed URLs that
are now created in the DownloadManifest don't work. Still looking into
this.

Vasiliy Kochergin

unread,
Jan 14, 2015, 4:34:27 PM1/14/15
to Swathi Gangisetty, Storage Team, Quality Assurance Team
Swathi,
To be more specific. Presigned Url generated by this script works:

--------
import com.eucalyptus.auth.Accounts;
import com.eucalyptus.objectstorage.client.EucaS3Client;
import com.eucalyptus.objectstorage.client.EucaS3ClientFactory;
import com.amazonaws.HttpMethod;
import com.amazonaws.services.s3.model.GeneratePresignedUrlRequest;

Date expiration = new Date();
long msec = expiration.getTime() + 1000 * 60 * 60 * 1;
expiration.setTime(msec);
final EucaS3Client s3Client =
EucaS3ClientFactory.getEucaS3Client(Accounts.lookupAwsExecReadAdmin(true))
//s3Client.refreshEndpoint(true);
URL s = s3Client.generatePresignedUrl('test', 'test', expiration,
HttpMethod.GET);
s.toString()
---------

but if you comment out s3Client.refreshEndpoint(true); url that is now
FQN does not work.

Vasya.

On Wed, Jan 14, 2015 at 12:57 PM, Vasiliy Kochergin

Vasiliy Kochergin

unread,
Jan 14, 2015, 4:35:14 PM1/14/15
to Swathi Gangisetty, Storage Team, Quality Assurance Team
Sorry, if you remove comment script creates URL that triggers 403.

Vasiliy Kochergin

unread,
Jan 14, 2015, 5:04:24 PM1/14/15
to Swathi Gangisetty, Storage Team, Quality Assurance Team
I think I know the problem. There is now extra / in the url.
Reply all
Reply to author
Forward
0 new messages