AnsweredAssumed Answered

HS3 api with HCP S10 won't authenticate

Question asked by Richard Murphy on Jun 20, 2016
Latest reply on Oct 11, 2017 by Michael Ratner

I am having trouble getting an HCP S10 device to authenticate while trying to access it with s3curl.  I have created a user, set the access keys in the web console, and it tells me SignatureDoesNotMatch when trying to list the contents.  Please help!

 

Here is the command and response:

 

perl s3curl.pl --debug --id=cemanager -- -k "https://hs3.xxx.cdc.gov/bucket/" -H "x-hcp-pretty-print:true"

 

s3curl: Found the url: host=hs3.xxx.cdc.gov; port=; uri=/bucket/; query=;

s3curl: cname endpoint signing case

s3curl: StringToSign='GET\n\n\nMon, 20 Jun 2016 15:19:53 +0000\n/hs3.xxx.cdc.gov/bucket/'

s3curl: exec curl -v -H 'Date: Mon, 20 Jun 2016 15:19:53 +0000' -H 'Authorization: AWS ITWi4I4ASmujRx4zC0bk:pzoOWMwX2EJv4ccdr1kJLRuN/Fk=' -L -H 'content-type: ' -k https://hs3.xxx.cdc.gov/bucket/ -H x-hcp-pretty-print:true

* About to connect() to hs3.xxx.cdc.gov port 443 (#0)

*   Trying xxx.xxx.xxx.xxx...

* Connected to hs3.xxx.cdc.gov (xxx.xxx.xxx.xxx) port 443 (#0)

* Initializing NSS with certpath: sql:/etc/pki/nssdb

* skipping SSL peer certificate verification

* SSL connection using TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

* Server certificate:

*       subject: CN=*.xxx.cdc.gov,OU=Hitachi Content Platform Storage,O=Hitachi Data Systems,L=Waltham,ST=Massachusetts,C=US

*       start date: Dec 15 12:19:56 2015 GMT

*       expire date: Dec 14 12:19:56 2020 GMT

*       common name: *.xxx.cdc.gov

*       issuer: CN=*.xxx.cdc.gov,OU=Hitachi Content Platform Storage,O=Hitachi Data Systems,L=Waltham,ST=Massachusetts,C=US

> GET /bucket/ HTTP/1.1

> User-Agent: curl/7.29.0

> Host: hs3.xxx.cdc.gov

> Accept: */*

> Date: Mon, 20 Jun 2016 15:19:53 +0000

> Authorization: AWS ITWi4I4ASmujRx4zC0bk:pzoOWMwX2EJv4ccdr1kJLRuN/Fk=

> x-hcp-pretty-print:true

>

< HTTP/1.1 403 Forbidden

< X-HCPS-Domain-Name: xxx.cdc.gov

< Server: HCP S Series/2.0.0.25

< X-HCPS-Server-Module-Number: 1

< Content-Type: application/xml;charset=UTF-8

< Transfer-Encoding: chunked

< Date: Mon, 20 Jun 2016 15:19:54 GMT

<

<?xml version='1.0' encoding='UTF-8'?>

<Error>

  <Code>SignatureDoesNotMatch</Code>

  <Message>The request signature we calculated does not match the signature you provided. Check your HCPS Secret Access Key and signing method.</Message>

  <RequestId>1466435994004</RequestId>

Outcomes