Error: BlobstoreVerifier SSL Error when configuring external blobstore in BOSH Director

Products

• VMware Tanzu Platform - Cloud Foundry

Issue/Introduction

When attempting to save the configuration for an external Blobstore under the BOSH Director tile, the task fails with a verification error. This typically occurs during product upgrades or environment recovery tasks. In this scenario tasks were orchestrated via Concourse pipelines.

 

The BOSH Director configuration fails with the following error snippet:

{
  "verifier_errors": [
    "SSL Error https://####.####.####:####, type: BlobstoreVerifier"
  ],
  "status": "Director properties were saved but there were verification errors which may prevent you from deploying",
  "verification_errors": {
    "director_configuration": [
      "SSL Error https://####.####.####:####, type: BlobstoreVerifier"
    ]
  }
}

Environment

• VMware Tanzu Application Service (TAS)
• BOSH Director
• External Blobstore (S3-compatible)

Cause

The BOSH Director does not have the necessary CA certificates to verify the SSL connection to the external blobstore endpoint.

Resolution

To resolve this issue, provide the required certificates in the BOSH Director configuration:

1. Log in to the Ops Manager UI.
2. Navigate to the BOSH Director tile.
3. Select the Direct Config section under Blobstore configurations.
4. Add the correct CA certificates for the external blobstore.
5. Navigate to the Security tab in the BOSH Director tile.
6. Add the same CA certificates to the Trusted Certificates field to ensure the Director can communicate with the endpoint.
7. If using Concourse pipelines, update the director.yml file to include the blobstore ca_cert.
8. Click Save and Apply Changes.

Additional Information

• f the issue persists, verify connectivity between the Ops Manager VM and the blobstore endpoint over the specified port (e.g., 9021).
• For further assistance, see Contact Broadcom Support