Märt Reose

Getting same error on tls 1.2 in linux and windows.

Any ideas on this?

Tested it, did not work. S3 cli worked with the same config in the same container. Built a docker image with: `TARGET_IMAGE="test/gdal" ./docker/ubuntu-small/build.sh --proj master --release --gdal-repository rouault/gdal --gdal a424dd638b27e13c9ed47a18c7099cf7ba4ef40c`...

``` root@135b05e8d51d:/# cat ~/.aws/config [profile webidentityprovider] role_arn = arn:aws:iam::MYACCOUNT:role/MYROLE web_identity_token_file = /root/.aws/token [profile default] role_arn = arn:aws:iam::MYOTHERACCOUNT:role/MYOTHERROLE source_profile = webidentityprovider ``` If you tell me how to run this debug...

Used find and replace over account names and other stuff, so it is consistent. ``` root@2b580559839a:/# cat ~/.aws/config [profile webidentityprovider] role_arn = arn:aws:iam::SOURCEACCOUNT:role/SOURCEROLE web_identity_token_file = /root/.aws/token [profile default] role_arn =...

``` root@2b580559839a:/# cat ~/.aws/config [profile webidentityprovider] role_arn = arn:aws:iam::SRCACCOUNT:role/SRCROLE web_identity_token_file = /root/.aws/token [profile default] role_arn = arn:aws:iam::DSTACCOUNT:role/DSTROLE source_profile = webidentityprovider root@2b580559839a:/# gdalinfo /vsis3/BUCKET/FOLDER/FILE.jpg --debug on --config CPL_CURL_VERBOSE YES AWS: GetConfigurationFromAWSConfigFiles()...

[debuglogs.log](https://github.com/OSGeo/gdal/files/9581530/debuglogs.log)

Got the same: CURL_INFO_TEXT: Closing connection -1 Token has multiple things: -_. and aws doc even has % in token. https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithWebIdentity.html

In the cli I wrapped the whole URL inbetween "" to make it work. Actually this worked as the first request succeeded but the next one failed. And it failed...

The issue might be my setup, will try to find time later this week to debug some more.