Backup to S3 Error (x509: certificate signed by unknown authority)

Translated
1

Note:
This topic has been translated from a Chinese forum by GPT and might contain errors.

Original topic: br备份到S3报错（x509: certificate signed by unknown authority）

| username: TiDBer_lF5whaJ3

[Test Environment for TiDB] Testing
[TiDB Version] v6.1.0
[Reproduction Steps]

  1. Install MinIO and configure HTTPS access
    br backup full --pd 172.172.31.133:12379 --storage s3://tidb/bak_20221117/ --send-credentials-to-tikv=true --s3.endpoint “https://192.168.216.166:44088” --ratelimit 128
  2. Error occurs when using br to backup to S3

[Issue: Symptoms and Impact]
How to configure the S3 certificate path or configure to ignore certificate verification when br backs up to S3?

[Resource Configuration]
[Attachments: Screenshots/Logs/Monitoring]
[“failed to request s3, retrying”] [error=“RequestError: send request failed\ncaused by: x509: certificate signed by unknown authority”]

image
image1423×261 34.6 KB

2
| username: xfworld | Original post link

–send-credentials-to-tikv=true remove this

Then https://192.168.216.166:44088”
remove the S and convert it to a regular

http://192.168.216.166:44088/

There is a prerequisite that minio must support HTTP access by default, otherwise it will still fail.

For other parameters, refer to the official BR documentation.

3
| username: TiDBer_lF5whaJ3 | Original post link

Does BR support certificate configuration in the case where MinIO only supports HTTPS access?

4
| username: xfworld | Original post link

Refer to this, you can configure it yourself:

5
| username: system | Original post link

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.