S3 TLS Config

[Voldemat]

How to set custom pem private key and certificate for Aws::S3::S3Client?

[sbiscigl]

https://docs.aws.amazon.com/sdk-for-cpp/v1/developer-guide/client-config.html

please refer to the section caPath, caFile

[Voldemat]

this is root certificate, but I`m talking about specifying one specific certificate and corresponding key for connecting to s3. Without relying on trust store at all. here is example golang code I used to do the same thing:

func (config *S3Config) CreateClient() (*s3.Client, error) {
	var customClient *http.Client = nil
	if config.TLS != nil {
		cert, err := tls.X509KeyPair([]byte(config.TLS.Cert), []byte(config.TLS.Key))
		if err != nil {
			return nil, err
		}
		tr := &http.Transport{
			TLSClientConfig: &tls.Config{
				Certificates: []tls.Certificate{cert},
			},
			ForceAttemptHTTP2: true,
		}
		customClient = &http.Client{Transport: tr}
	}
	conf := aws.NewConfig()
	if customClient != nil {
		conf.HTTPClient = customClient
	}
	conf.Region = config.Region
	conf.BaseEndpoint = aws.String(config.Endpoint.String())
	conf.Credentials = credentials.NewStaticCredentialsProvider(
		config.AccessKey, config.SecretKey, "",
	)
	return s3.NewFromConfig(*conf, func(o *s3.Options) {
		o.UsePathStyle = true
	}), nil
}

[Voldemat]

Found a way to set it in curl:
curl_easy_setopt(curl, CURLOPT_SSLKEY_BLOB, key);
curl_easy_setopt(curl, CURLOPT_SSLCERT_BLOB, cert);