--no-check-certificate error:

What is the problem you are having with rclone?

I'm getting below error when using --no-check-certificate
NOTICE: Failed to ls: operation error S3: ListBuckets, https response error StatusCode: 501, RequestID: 5214-241028215430, HostID: , api error NotImplemented: The requested action is not implemented

Run the command 'rclone version' and share the full output of the command.

rclone v1.68.1

  • os/version: Microsoft Windows Server 2019 Standard 1809 (64 bit)
  • os/kernel: 10.0.17763.6414 (x86_64)
  • os/type: windows
  • os/arch: amd64
  • go/version: go1.23.1
  • go/linking: static
  • go/tags: cmount

Which cloud storage system are you using? (eg Google Drive)

s3. (nasuni s3 edge, the edge appliance have self-signed certificate)

The command you were trying to run (eg rclone copy /tmp remote:tmp)

rclone ls nasuni: --no-check-certificate

Please run 'rclone config redacted' and share the full output. If you get command not found, please make sure to update rclone.

[nasuni]
type = s3
provider = Other
access_key_id = XXX
secret_access_key = XXX
endpoint = https://100.120.12.105/s3/

A log from the command that you were trying to run with the -vv flag

2024/10/29 03:14:18 DEBUG : rclone: Version "v1.68.1" starting with parameters ["rclone" "ls" "nasuni:" "--no-check-certificate" "-vv"]
2024/10/29 03:14:18 DEBUG : Creating backend with remote "nasuni:"
2024/10/29 03:14:18 DEBUG : Using config file from "C:\\Users\\xxx1\\AppData\\Roaming\\rclone\\rclone.conf"
2024/10/29 03:14:20 DEBUG : 2 go routines active
2024/10/29 03:14:20 NOTICE: Failed to ls: operation error S3: ListBuckets, https response error StatusCode: 501, RequestID: 5212-241029151420, HostID: , api error NotImplemented: The requested action is not implemented.
1 Like

I would imagine this is self descriptive... Looks like limitation of your S3 provider.

Try to ls some bucket instead:

rclone ls nasuni:bucket_name --no-check-certificate

This is working fine using CyberDuck. I get the option to skip with certificate. And same command if I use without --no-check-certificate I get below error:

"Failed to ls: operation error S3: ListBuckets, exceeded maximum number of attempts, 10, https response error StatusCode: 0, RequestID: , HostID: , request send failed, Get "https://xxxxxx/s3/?x-id=ListBuckets": tls: failed to verify certificate: x509: certificate signed by unknown authority"

try to add --s3-no-check-bucket and/or --s3-no-head-object

both the commands not skipping the certificate check, and same error. "tls: failed to verify certificate: x509: certificate signed by unknown authority"

You need no check cert as well.

so when I add --no-check-certificate it gives error, tried all combimation.
501, RequestID: 5214-241029181438, HostID: , api error NotImplemented: The requested action is not implemented

for a deeper look, use the --dump flags.

2024/10/30 01:40:11 NOTICE: Automatically setting -vv as --dump is enabled
--- start filters ---
--- File filter rules ---
--- Directory filter rules ---
--- end filters ---
2024/10/30 01:40:11 DEBUG : rclone: Version "v1.68.1" starting with parameters ["rclone" "ls" "nasuni:" "--no-check-certificate" "--s3-no-check-bucket" "--dump" "filters"]
2024/10/30 01:40:11 DEBUG : Creating backend with remote "nasuni:"
2024/10/30 01:40:11 DEBUG : Using config file from "C:\Users\jebin.pk1\AppData\Roaming\rclone\rclone.conf"
2024/10/30 01:40:11 DEBUG : nasuni: detected overridden config - adding "{Dn7qA}" suffix to name
2024/10/30 01:40:11 DEBUG : fs cache: renaming cache item "nasuni:" to be canonical "nasuni{Dn7qA}:"
2024/10/30 01:40:12 DEBUG : 2 go routines active
2024/10/30 01:40:12 NOTICE: Failed to ls: operation error S3: ListBuckets, https response error StatusCode: 501, RequestID: 5211-241030134012, HostID: , api error NotImplemented: The requested action is not implemented.

Not sure what you need filters info for as you do not use them, use --dump headers

2024/10/30 03:57:17 NOTICE: Automatically setting -vv as --dump is enabled
2024/10/30 03:57:17 DEBUG : rclone: Version "v1.68.1" starting with parameters ["rclone" "ls" "nasuni:" "--no-check-certificate" "--s3-no-check-bucket" "--dump" "headers"]
2024/10/30 03:57:17 DEBUG : Creating backend with remote "nasuni:"
2024/10/30 03:57:17 DEBUG : Using config file from "C:\Users\jebin.pk1\AppData\Roaming\rclone\rclone.conf"
2024/10/30 03:57:17 DEBUG : nasuni: detected overridden config - adding "{Dn7qA}" suffix to name
2024/10/30 03:57:17 DEBUG : You have specified to dump information. Please be noted that the Accept-Encoding as shown may not be correct in the request and the response may not show Content-Encoding if the go standard libraries auto gzip encoding was in effect. In this case the body of the request will be gunzipped before showing it.
2024/10/30 03:57:17 DEBUG : You have specified to dump information. Please be noted that the Accept-Encoding as shown may not be correct in the request and the response may not show Content-Encoding if the go standard libraries auto gzip encoding was in effect. In this case the body of the request will be gunzipped before showing it.
2024/10/30 03:57:17 DEBUG : fs cache: renaming cache item "nasuni:" to be canonical "nasuni{Dn7qA}:"
2024/10/30 03:57:17 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2024/10/30 03:57:17 DEBUG : HTTP REQUEST (req 0xc000376500)
2024/10/30 03:57:17 DEBUG : GET /s3/?x-id=ListBuckets HTTP/1.1
Host: 100.120.12.105
User-Agent: rclone/v1.68.1
Accept-Encoding: identity
Amz-Sdk-Invocation-Id: 2db88cf8-d9cc-4727-baaf-7a34515fbeb4
Amz-Sdk-Request: attempt=1; max=10
Authorization: XXXX
X-Amz-Content-Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
X-Amz-Date: 20241030T075717Z

2024/10/30 03:57:17 DEBUG : >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
2024/10/30 03:57:18 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2024/10/30 03:57:18 DEBUG : HTTP RESPONSE (req 0xc000376500)
2024/10/30 03:57:18 DEBUG : HTTP/1.1 501 Not Implemented
Connection: close
Content-Length: 216
Content-Security-Policy: report-uri /fs/cspalerts; default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' 'unsafe-eval'; font-src 'self' 'report-sample'; img-src 'self' data: 'report-sample'; connect-src 'self' 'report-sample'; form-action 'self' 'report-sample'; media-src 'self' 'report-sample'; child-src 'self' 'report-sample'; base-uri 'self' 'report-sample'; frame-src 'self' 'report-sample'; frame-ancestors 'self';
Content-Type: application/json
Date: Wed, 30 Oct 2024 07:57:17 GMT
Nasuni-Nea-Version: 9.15.3-78
Nasuni-S3-Config: 2024-10-25T11:50:24Z
Nasuni-S3-Version: 1.0.0
Server: Apache
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN

2024/10/30 03:57:18 DEBUG : <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
2024/10/30 03:57:18 DEBUG : 2 go routines active
2024/10/30 03:57:18 NOTICE: Failed to ls: operation error S3: ListBuckets, https response error StatusCode: 501, RequestID: 5215-241030155717, HostID: , api error NotImplemented: The requested action is not implemented.

v1.68.0 switched from AWS SDK v1 to AWS SDK v2
to eliminate that as an issue, test v1.67.0

I can confirm --no-check-certificate working on version 1.67.0 Big Thanks!

Would you mind to create github issue about it? Great that it works with old rclone but it should with the latest SDK as well.

hey, a github issue about what?

so IMO there is an issue to be fixed.

It should work with the latest rclone as well.

ok, but what is the issue that needs to be fixed?

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.