citadel not able to download the object from Frankfurt region

[abhishekamralkar]

We are facing an issue when trying to get the objects/secrets from eu-central-1 AWS region but it works fine in AWS us-west-2.

Relevant File Content:

/var/chef/cache/cookbooks/citadel/files/halite_gem/citadel/s3.rb:

78: "s3-#{region}.amazonaws.com"
79: end
80: Chef::Log.warn("citadel: path #{hostname}")
81: Chef::Log.warn("citadel: hostname #{hostname}")
82: begin
83: Chef::HTTP.new("https://#{hostname}").get("#{bucket}/#{path}", headers)
84: rescue Net::HTTPServerException => e
85>> raise CitadelError.new("Unable to download #{path}: #{e}")
86: end
87: end
88:
89: end
90: end
91:

[2018-05-15T06:17:03+00:00] ERROR: Unable to download keys/keys.json: 400 "Bad Request"

[coderanger]

Hmm, is eu-central-1 one of the regions that requires a new version of the signature protocol?

[abhishekamralkar]

@coderanger Yes as per to AWS

https://docs.aws.amazon.com/general/latest/gr/rande.html

It supports only Version 4 only.

[coderanger]

So yeah, probably need to upgrade the signature impl I include. Patches welcome :)