c++ - Unable to connect to Cloudfront from MacOSX client -


my multi-platform client, written in c++ , built on curl, should download file cloudfront. on windows, download works fine libcurl 7.40.0 , openssl 1.0.2c. on macosx:

  • the file served via "direct" amazon aws link correctly downloaded;
  • the file served via cloudfront link cannot downloaded: curl error after call set curle_ssl_connect_error, , debug informations show protocol breaks during ssl handshake.

the file correctly downloaded via curl command macosx bash (version 7.54.0).

i linking against curl version installed on imac (version 7.54.0 security layer provided zlib version 1.2.8). version supports ssl , tlsv1.2 (as can seen when performing aws download).

i @ wit's end: tlsv1.2 supported , should enabled during communication cloudfront. there else forgot?

thank in advance help. mwe , responses both servers follow.

minimum working example (urls faked):

#include "curl/curl.h"  #define urldownload "https://x.cloudfront.net/file.file?expires=123&signature=456&key-pair-id=789" #define awsurldownload "https://x.amazonaws.net/file.file?expires=123&signature=456&key-pair-id=789"  int main(int argc, const char * argv[]) {      curl_global_init(curl_global_all);      curl* curl = curl_easy_init();      curl_easy_setopt(curl, curlopt_followlocation, 1);     curl_easy_setopt(curl, curlopt_ssl_verifypeer, false);     curl_easy_setopt(curl, curlopt_ssl_verifyhost, false);     curl_easy_setopt(curl, curlopt_nosignal, 1);      curl_easy_setopt(curl, curlopt_tcp_keepalive, true);     curl_easy_setopt(curl, curlopt_tcp_keepidle, 30);     curl_easy_setopt(curl, curlopt_tcp_keepintvl, 5);      curl_easy_setopt(curl, curlopt_verbose, 1);     curl_easy_setopt(curl, curlopt_range, "0-");     curl_easy_setopt(curl, curlopt_sslversion, curl_sslversion_tlsv1_2);      curl_easy_setopt(curl, curlopt_tcp_keepintvl, 2);      // urldownload call fails. awsurldownload call successful.     curl_easy_setopt(curl, curlopt_url, urldownload);      curlcode error = curl_easy_perform(curl);      curl_easy_reset(curl);      return 0; }

the debug informations when downloading aws:

*   trying ip... * tcp_nodelay set * connected x.amazonaws.com (ip) port 443 (#0) * tls 1.2 connection using tls_ecdhe_rsa_with_aes_128_gcm_sha256 * server certificate: *.x.amazonaws.com * server certificate: digicert baltimore ca-2 g2 * server certificate: baltimore cybertrust root > /file?x-amz-expires=431861&x-amz-algorithm=aws4-hmac-sha256&x-amz-credential=aq/20170814/aws4_request&x-amz-date=20170814t090903z&x-amz-signedheaders=host&x-amz-signature=0eb http/1.1 host: x.amazonaws.com range: bytes=0-100 accept: */*  < http/1.1 206 partial content < x-amz-id-2: q/0/xjrh4tnkcju= < x-amz-request-id: 92cea7a5e6ab < date: mon, 14 aug 2017 14:32:46 gmt < last-modified: tue, 16 may 2017 22:15:57 gmt < etag: "9d57e32d88c89a-55" < x-amz-meta-cb-modifiedtime: tue, 16 may 2017 22:13:27 gmt < accept-ranges: bytes < content-range: bytes 0-100/566567658 < content-type: application/octet-stream < content-length: 101 < server: amazons3 < \246ՙ\30\363\360т.c\375\205\211\327\327\343\204\320\224\3404\327dͩ\3362\\306\354%%\214}"\3171\216\362}la\245u\304}\260\223\205\332\335 ]\314\330\300 * curl_http_done: called premature == 0 * connection #0 host x.amazonaws.com left intact

the debug informations when downloading cloudfront:

*   trying ip... * tcp_nodelay set * connected x.cloudfront.net (ip) port 443 (#0) * ssl peer handshake failed, server requires client certificate connect * curl_http_done: called premature == 1 * closing connection 0

the 2 calls made exact same linked library


Comments

Post a Comment

Popular posts from this blog

android - InAppBilling registering BroadcastReceiver in AndroidManifest -

i'm implementing inapp billing in android app. works well, however, i'm trying decouple broadcast receiver activity manifest. suggestion in android's trivialdrive sample: // important: dynamically register broadcast messages updated purchases. // register receiver here instead of <receiver> in manifest // because call getpurchases() @ startup, therefore can ignore // broadcasts sent while app isn't running. // note: registering listener in activity bad idea, done here // because sample. regardless, receiver must registered after // iabhelper setup, before first call getpurchases(). currently there's class extends broadcastreceiver : public class iabbroadcastreceiver extends broadcastreceiver { /** * intent action receiver should filter for. */ public static final string action = "com.android.vending.billing.purchases_updated"; private final iabbroadcastlistener mlistener; public iabbroadcastreceiver(iabbroadcastlistener listener) { m...
Read more

python Tkinter Capturing keyboard events save as one single string -

is possible store keyboard events 1 string? code below stores 1 char , prints it. card reader or bar code reader, contains collection of character/ string not 1 character @ time. goal save char pressed text variable. from tkinter import * root = tk() def key(event): text= event.char text+= event.char print ("pressed", text) def callback(event): frame.focus_set() print ("clicked at", event.x, event.y) frame = frame(root, width=100, height=100) frame.bind("<key>", key) frame.bind("<button-1>", callback) frame.pack() root.mainloop() currently, creating text variable , everytime key() function gets called, , text stores last character typed. you can define text module level variable , , use module level text inside key function - text = '' def key(event): global text text+= event.char print("pressed", text)
Read more

sql server - Why does Linq-to-SQL add unnecessary COUNT()? -

here tables: create table customer ( cid int primary key, name varchar(32) ) create table ord ( oid int primary key, cid int foreign key references customer, address varchar(20) ) here's linq-to-sql statement: var aaa = c in db.customer select new { c, o = c.ord.tolist() }; and here's inexplicable query generated linq-to-sql: select [t0].[cid] [cid], [t0].[name] [name], [t1].[oid] [oid], [t1].[cid] [cid2], [t1].[address] [address], (select count(*) [dbo].[ord] [t2] [t2].[cid] = [t0].[cid]) [value] [dbo].[customer] [t0] left outer join [dbo].[ord] [t1] on [t1].[cid] = [t0].[cid] order [t0].[cid], [t1].[oid] i want understand how rid of count(*) part. it's entirely uncalled for! linq needs count(*) in order determine number of entries returned o = c.ord.tolist() .
Read more