2 problems adding minio

[balma01]

I'm trying minio for windows as object storage.
Started minio server using: minio server E:\minio\minio-storage\ --console-address :2222
I'm able to connect to the console using minioadmin and created a bucket
stopped minio server
Generated the certificate using certgen and placed in C:\Users\myuser\.minio\certs
started minio server using: minio server E:\minio\minio-storage\ --console-address :2222
if I try to connect to console using minioadmin I get {"code":401,"detailedMessage":"invalid Login","message":"invalid Login"
and if I try to add an S3 compatible repository, after have 'acceptd' to use untruysted certificate, I get :
failed to load Amazon S3 compatible configuration

any idea?

[sfirmes]

@balma01 I haven't seen this exact error before. MinIO has some great instructions here https://docs.min.io/docs/using-minio-with-veeam.html which may help you. Additionally, one of my colleagues @jorgedlcruz wrote a great blog which walks you through the steps to setup MinIO + Veeam https://jorgedelacruz.uk/2020/07/22/vee ... s-encrypt/.

[balma01]

Hi and thanks.
I've readed the guides provided then I fregenerad my certificate using
Generated the certificate using certgen -ca -host "192.168.x.y"
placed public and private in C:\Users\myuser\.minio\certs
started minio server using: minio server E:\minio\minio-storage\ --console-address :2222
Now I'm able to connect to the minioconsole console using minioadmin
But if I try to add an S3 compatible repository, using https://192.168.x.y:9000
I get :
failed to load Amazon S3 compatible configuration
failed to estabilish connection to Amazon S3 compatible endpoint

[balma01]

in the log Agent.PublicCloud.Satellite.1.log I see: WinHttpSendRequest: 12175: A security error occurred

[soncscy]

12175 would be an SSL error: https://docs.microsoft.com/en-us/window ... r-messages

So something is still wrong with your cert. I've never tried Minio with a Windows server before, but are you sure it's in the right location for the certs? When you launch the Minio server, it's definitely loading over https, yes? And is the WebUI accessible?

Keep in mind if you're using older operating systems, they don't have support for modern SSL ciphers/protocols by default.

[veremin]

Agree with Harvey here, it seems like certificate-releated issue. You can verify this assumption by opening a support ticket and asking our engineers for additional assistance. Thanks!

[balma01]

Hi,
it seems the KB https://www.veeam.com/kb3215
is releated to the same problem
I'll check it...
Thanks

[veremin]

The referenced article talks about validating certificate status by checking CA revocation list. This only applies to CA certificates. For self-signed certificates (that you are using) there is no such thing as revocation list: to revoke a self-signed certificate one just need to remove it from the whitelist of trusted certificates.

So while the resulting error is the same, the cases causing it seem to be different. That's why we recommend reaching our support team.

Thanks!

[balma01]

Opened case 05034538.
Thanks

[veremin]

Thank you, now let's wait and see what support team say about the experienced issue.

[init-s]

Hello,

were you able to solve the problem?
Thank you

[rennerstefan]

Hi Init-s,

can you please describe what issue you see in your environment?
As stated above most of them are certificate related.

Thanks

[init-s]

Hello,

the problem is the same - error 12175 adding a S3 repository on Minio.
Minio is using lets'encrypt certificate: if I publish minio through a reverse proxy (ie: haproxy, nginx) no problem.

Thank you

[veremin]

Any chance you have a ticket for this issue opened, so we can check how the investigation went? Thanks!

[rennerstefan]

Minio is using lets'encrypt certificate: if I publish minio through a reverse proxy (ie: haproxy, nginx) no problem.

Just out of interest, did you try to use other certificates as described here: https://docs.min.io/docs/how-to-secure- ... h-tls.html
In all installations I did it worked well so a ticket on both ends, MiniO as well as Veeam would be needed if none of the certificate ways work for you.

Let us know.

Thanks