s3gof3r
s3gof3r copied to clipboard
rlmcpherson
pass headers to all http requests for encryption
If I add the necessary headers for SSE-C ( customer side encryption keys) for uploads to S3 I get the error: 400: "The multipart upload initiate requested encryption. Subsequent part requests must include the appropriate encryption parameters."
It doesn't work with either cp or put commands.
Encryption seems to work if you use the SSE-S3 (x-amz-server-side-encryption) but not with SSE-KMS since it depends on signature v4.
Yes, you're correct on all counts. The customer-side encryption does not work as those headers must be sent with each part whereas all other headers are only sent on "Initiate Multipart Upload". Specific handling for these headers would need to be added.
Do you have any plans to add support for other encryption methods?
I hope to add v4 signing support but not sure when I'll get to that. I'll probably prioritize that over customer-side encryption support, as the signing may impact how that is implemented. If you want to add support for either feature, pull requests are more than welcome!
