ngx_aws_auth icon indicating copy to clipboard operation
ngx_aws_auth copied to clipboard

SignatureDoesNotMatch

Open eli007s opened this issue 9 years ago • 15 comments

following your example to the letter and providing my key, secret, and bucket information i get the following error

The request signature we calculated does not match the signature you provided. Check your key and signing method.

any ideas?

eli007s avatar Jul 18 '15 00:07 eli007s

Could you provide the following info:

  • The nginx conf (minus the keys ofcourse)
  • Your S3 region
  • The S3 url that you wish to proxy to
  • The request that you made to nginx (HTTP Verb and URL)

anomalizer avatar Jul 18 '15 07:07 anomalizer

my regions is us-west-1

what do you mean by http verb?

location ~ ^/data/(.*)$ { proxy_pass http://[myBucket].s3.amazonaws.com/[key]/data/$1;

  aws_access_key [myKey];
  aws_secret_key [mySecret];
  s3_bucket [myBucket];  
  proxy_set_header Authorization $s3_auth_token;
  proxy_set_header x-amz-date $aws_date;
}

eli007s avatar Jul 18 '15 21:07 eli007s

GET, POST, HEAD etc. etc. I meant HTTP method

anomalizer avatar Jul 19 '15 04:07 anomalizer

Oh I'm accessing it directly thru the URL

Www.domain.com/data/image.jpg

On Saturday, July 18, 2015, Arvind Jayaprakash [email protected] wrote:

GET, POST, HEAD etc. etc. I meant HTTP method

— Reply to this email directly or view it on GitHub https://github.com/anomalizer/ngx_aws_auth/issues/17#issuecomment-122622625 .

eli007s avatar Jul 19 '15 05:07 eli007s

its get

<StringToSign>GETx-amz-date:Mon, 20 Jul 2015 20:35:44 GMT /photo11_2x5714619687.jpg</StringToSign>

eli007s avatar Jul 20 '15 20:07 eli007s

Please start watching the branch AuthV4. It now has the most basic support for new regions

anomalizer avatar May 01 '16 17:05 anomalizer

Please try the new code on master. This should take care of your issue

anomalizer avatar May 14 '16 17:05 anomalizer

same issue here signature does not match

rahulravindran0108 avatar Aug 03 '16 23:08 rahulravindran0108

I get 403 signaturenotmatch too, I use ceph rgw as S3 service, does ngx_aws_auth(V2) work well @anomalizer

rikewang avatar Apr 08 '17 06:04 rikewang

This plugin has never been tested with ceph rgw as a backend. Support for ceph would be a new feature

anomalizer avatar Apr 12 '17 08:04 anomalizer

I am facing same error too while using with auth v4 to s3 in us-east-1. Details in https://github.com/anomalizer/ngx_aws_auth/issues/54

Any thoughts @anomalizer ??

Regards, Karthik

y2kkarthik avatar Nov 20 '18 14:11 y2kkarthik

Got that error fixed. But now it says Access Denied. Does the bucket have to be really public to work with this?

Regards, Karthik

y2kkarthik avatar Nov 20 '18 16:11 y2kkarthik

Try add this to nginx config: proxy_set_header Host $host;

zmqundead avatar Jan 20 '19 16:01 zmqundead

I am facing same error too while using with auth v4 to s3 in us-east-1. Details in #54

Any thoughts @anomalizer ??

Regards, Karthik

Hello,

Did you finish this issue?

Does it work with Ceph rwg s3?

Thanks,

bugoverfl0w avatar Mar 07 '19 08:03 bugoverfl0w

@anomalizer I get this error too sometimes, is there any fix for this?

Also, what happened to the v4 branch? Is this project abandoned?

noplanman avatar May 01 '20 21:05 noplanman