Issues while uploading document to AWS S3 Bucket from documentum 16.4

Options

Hello Experts ,

We are trying to upload document from DA 16.4 to s3 file store but we are getting below error , I understand this seems to SSL certificate issue,

But from where we can get the certificate or do we need to generate our own certificate to establish SSL handshake ?

2018-04-12 08:14:53,456 INFO [Thread-6955] com.amazonaws.http.AmazonHttpClient - Unable to execute HTTP request: Peer not authenticated
javax.net.ssl.SSLPeerUnverifiedException: Peer not authenticated
at com.rsa.sslj.x.aQ.getPeerCertificates(Unknown Source)
at org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:128)
at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:572)
at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:180)
at org.apache.http.impl.conn.ManagedClientConnectionImpl.open(ManagedClientConnectionImpl.java:294)
at org.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:641)
at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:480)
at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:906)
at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:805)
at com.amazonaws.http.AmazonHttpClient.executeHelper(AmazonHttpClient.java:377)
at com.amazonaws.http.AmazonHttpClient.execute(AmazonHttpClient.java:228)
at com.amazonaws.services.s3.AmazonS3Client.invoke(AmazonS3Client.java:3316)
at com.amazonaws.services.s3.AmazonS3Client.invoke(AmazonS3Client.java:3274)
at com.amazonaws.services.s3.AmazonS3Client.listObjects(AmazonS3Client.java:572)
at com.amazonaws.services.s3.AmazonS3Client.doesBucketExist(AmazonS3Client.java:958)
at com.documentum.content.store.plugin.s3.StoreAccessor.validateBucket(StoreAccessor.java:240)
at com.documentum.content.store.plugin.s3.StoreAccessor.getRestApiClient(StoreAccessor.java:360)
at com.documentum.content.store.plugin.s3.StoreAccessor.start(StoreAccessor.java:432)
at com.documentum.storage.impl.StoreAccessorUtil.start(StoreAccessorUtil.java:22)
at com.documentum.storage.impl.BofStoreAccessorManager.newStoreAccessor(BofStoreAccessorManager.java:56)
at com.documentum.storage.impl.BofStoreAccessorManager.getStoreAccessor(BofStoreAccessorManager.java:33)
at com.documentum.storage.impl.StoreAccessorUtil.getStoreAccessor(StoreAccessorUtil.java:130)
at com.documentum.fc.client.content.impl.ContentAccessorFactory.getStoreAccessor(ContentAccessorFactory.java:73)
at com.documentum.fc.client.content.impl.ContentAccessorFactory.shouldFallbackToContentServer(ContentAccessorFactory.java:49)
at com.documentum.fc.client.content.impl.ContentAccessorFactory.makeStorer(ContentAccessorFactory.java:20)
at com.documentum.fc.client.content.impl.Store.newContentStorer(Store.java:82)
at com.emc.documentum.store.s3.bof.impl.S3Store___PROXY.newContentStorer(S3Store___PROXY.java)
at com.documentum.fc.client.content.impl.StorageApi.newContentStorer(StorageApi.java:130)
at com.documentum.fc.client.content.impl.StorageApi.newContentStorer(StorageApi.java:120)
at com.documentum.acs.coordination.impl.RepositoryContentMgr.processContentWriteRequest(RepositoryContentMgr.java:155)
at com.documentum.acs.coordination.impl.WriteRequestProcessor.impl(WriteRequestProcessor.java:58)
at com.documentum.acs.coordination.impl.WriteRequestProcessor.run(WriteRequestProcessor.java:37)
at java.lang.Thread.run(Thread.java:748)
2018-04-12 08:14:53,456 DEBUG [Thread-6955] com.documentum.content.store.plugin.s3.StoreAccessor - Failed during bucket validation and restApiClient null
2018-04-12 08:14:53,456 ERROR [Thread-6955] com.documentum.content.store.plugin.s3.StoreAccessor - Unable to use bucket: Unable to execute HTTP request: Peer not authenticated
2018-04-12 08:14:53,456 DEBUG [Thread-6955] com.documentum.content.store.plugin.s3.StoreAccessor - validateBucket() method failed..
2018-04-12 08:14:53,456 ERROR [Thread-6955] acs.com.documentum.acs.coordination.impl.RepositoryContentMgr - [ACS_E_ERROR_CONTENT_STORING] Unable to store content in the repository 'bc614e'
StoreAccessorException:: THREAD: Thread-6955; MSG: No StoreAccessor provided, it was null. Failed during 'Store Plugin Initialization'; ERRORCODE: ff; NEXT: null
at com.documentum.storage.StoreAccessorException.newOperationException(StoreAccessorException.java:71)
at com.documentum.storage.StoreAccessorException.newPluginInitializationException(StoreAccessorException.java:52)
at com.documentum.storage.impl.StoreAccessorUtil.getStoreAccessor(StoreAccessorUtil.java:134)
at com.documentum.fc.client.content.impl.ContentAccessorFactory.getStoreAccessor(ContentAccessorFactory.java:73)
at com.documentum.fc.client.content.impl.ContentAccessorFactory.shouldFallbackToContentServer(ContentAccessorFactory.java:49)
at com.documentum.fc.client.content.impl.ContentAccessorFactory.makeStorer(ContentAccessorFactory.java:20)
at com.documentum.fc.client.content.impl.Store.newContentStorer(Store.java:82)
at com.emc.documentum.store.s3.bof.impl.S3Store___PROXY.newContentStorer(S3Store___PROXY.java)
at com.documentum.fc.client.content.impl.StorageApi.newContentStorer(StorageApi.java:130)
at com.documentum.fc.client.content.impl.StorageApi.newContentStorer(StorageApi.java:120)
at com.documentum.acs.coordination.impl.RepositoryContentMgr.processContentWriteRequest(RepositoryContentMgr.java:155)
at com.documentum.acs.coordination.impl.WriteRequestProcessor.impl(WriteRequestProcessor.java:58)
at com.documentum.acs.coordination.impl.WriteRequestProcessor.run(WriteRequestProcessor.java:37)
at java.lang.Thread.run(Thread.java:748)

Comments

  • From DA configuration guide:

    Configuring the store to use SSL: S3 store can be configured to use SSL communication between
    S3 plugin and S3 storage service. Default SSL is achieved by providing SSL URL in base_url
    attribute (for example, https://:443/). If you want to use
    your certificates, then import those certificates to the Java keystore of JDK which the S3 plugin use.

  • Thanks Alvaro_de_Andres,

    We Tried disabling Cert Checking using -Dcom.amazonaws.sdk.disableCertChecking=true,

    Best Regards,
    Akshay

  • Akshay,
    can you describe how you have been able to connect to S3. I created a S3 storage object and researching how to make it as default file store.
    any help is appreciated.

  • your JMS and docbroker and docbases have to be configured with SSL. Create an S3 storage object form storage management.Then you need to construct the S3 URL (http://s3.amazonaws.com/) and enter the access key and secret key. Using the migration content administrative method, migrate a single from any file store and S3 bucket file store. run the job and monitor the acs logs.

  • This topic explains how to use the AWS Management Console to upload one or more files or entire folders to an Amazon S3 bucket. Before you can upload files and folders to an Amazon S3 bucket, you need write permissions for the bucket.