Error "Could not validate s3 connection: Unable to execute HTTP request certificate_unknown(46)" while configuring external S3 storage in VCF Operations for Logs.

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

When attempting to configure external storage for logs using an on-premise, non-AWS S3-compatible storage endpoint in VCF Operations for Logs, the connection validation fails with below message:

Could not validate s3 connection: Unable to execute HTTP request certificate_unknown(46)

Environment

VCF Operations 9.1

Cause

This is an expected product behavior and architectural limitation. VCF Operations for Logs does not support the use of self-signed SSL/TLS certificates for S3-compatible storage endpoints.

Resolution

To successfully configure S3 storage endpoint, replace the self-signed SSL certificate on the S3 storage array with a certificate issued by Certificate Authority (CA).