[Cyberduck-trac] [Cyberduck] #10488: Ignores upload encryption policy when creating a Cryptomator Vault. User unable to create vault in bucket requiring `s3:x-amz-server-side-encryption": "AES256`

Cyberduck trac at cyberduck.io
Sun Apr 14 15:29:19 UTC 2019


#10488: Ignores upload encryption policy when creating a Cryptomator Vault. User
unable to create vault in bucket requiring `s3:x-amz-server-side-
encryption": "AES256`
-----------------------------+-------------------------
 Reporter:  a.cyberduc.user  |         Owner:  dkocher
     Type:  defect           |        Status:  reopened
 Priority:  normal           |     Milestone:  6.9.3
Component:  s3               |       Version:  6.8.0
 Severity:  normal           |    Resolution:
 Keywords:                   |  Architecture:
 Platform:  macOS 10.14      |
-----------------------------+-------------------------
Changes (by a.cyberduc.user):

 * status:  closed => reopened
 * resolution:  fixed =>


Comment:

 Still not fixed.  The required header is missing from subsequent/sub-
 directories, still:


 Here's the creation of the *root* folder `test-vault`:
 {{{

 PUT /Takeout/test-vault/ HTTP/1.1
 Date: Sun, 14 Apr 2019 15:21:53 GMT
 Expect: 100-continue
 Content-Type: application/x-directory
 x-amz-content-sha256:
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
 x-amz-server-side-encryption: AES256
 Host: my-bucket-name-here.s3.amazonaws.com
 x-amz-date: 20190414T152153Z
 Authorization: ********
 Content-Length: 0
 Connection: Keep-Alive
 User-Agent: Cyberduck/6.9.4.30164 (Mac OS X/10.14.4) (x86_64)
 HTTP/1.1 200 OK
 }}}

 And here's the `/d/` dir that belongs inside the vault folder

 {{{

 PUT /Takeout/test-vault/d/ HTTP/1.1
 Date: Sun, 14 Apr 2019 15:21:53 GMT
 Expect: 100-continue
 Content-Type: application/x-directory
 x-amz-content-sha256:
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
 Host: my-bucket-name-here.s3.amazonaws.com
 x-amz-date: 20190414T152153Z
 Authorization: ********
 Content-Length: 0
 Connection: Keep-Alive
 User-Agent: Cyberduck/6.9.4.30164 (Mac OS X/10.14.4) (x86_64)
 HTTP/1.1 403 Forbidden

 }}}

 The `x-amz-server-side-encryption: AES256` header is present on the root
 folder creation and not present on the sub-folder creation.

--
Ticket URL: <https://trac.cyberduck.io/ticket/10488#comment:9>
Cyberduck <https://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows


More information about the Cyberduck-trac mailing list