AWS_IO_FILE_VALIDATION_FAILURE

[wills721]

Describe the bug

Using these commands for the url and certs:

aws iot describe-endpoint --endpoint-type iot:Data-ATS --region ...
aws iot create-keys-and-certificate --set-as-active --certificate-pem-outfile {HOME}/temp/certificate.pem.crt --private-key-outfile {HOME}/temp/private.pem.key --region ...

Doing chmod 600 for *.key, 644 for *.crt and 400 for *.pem the call:

mqtt_connection = mqtt_connection_builder.mtls_from_path(
endpoint=IOT_ENDPOINT,
cert_filepath=f"{HOME}/temp/certificate.pem.crt",
pri_key_filepath=f"{HOME}/temp/private.pem.key",
client_id=f"{random.random()}",
)

continues to fail with:

File "/Users/willspies/Desktop/dump-dynamo/gateway-venv/lib/python3.10/site-packages/awscrt/io.py", line 616, in init
self._binding = _awscrt.client_tls_ctx_new(
RuntimeError: 1038 (AWS_IO_FILE_VALIDATION_FAILURE): A file was read and the input did not match the expected value

Any help appreciated
Will

Regression Issue

• Select this option if this issue appears to be a regression.

Expected Behavior

It succeeds

Current Behavior

Fails with
File "/Users/willspies/Desktop/dump-dynamo/gateway-venv/lib/python3.10/site-packages/awscrt/io.py", line 616, in init
self._binding = _awscrt.client_tls_ctx_new(
RuntimeError: 1038 (AWS_IO_FILE_VALIDATION_FAILURE): A file was read and the input did not match the expected value

Reproduction Steps

call mqtt_connection_builder.mtls_from_path

Possible Solution

No response

Additional Information/Context

awscrt 0.31.1
awsiotsdk 1.28.0
boto3 1.42.33

SDK version used

1.28.0

Environment details (OS name and version, etc.)

Ubuntu and Mac OS

[sbSteveK]

Hi Will.

I've gone through the steps you provided and the certificate and private key that is vended are working as expected.

The error you are listing AWS_IO_FILE_VALIDATION_FAILURE indicates that the file is being found but there is a problem with the contents. Can you separately check that the cert and key are valid using openssl?

Please also provide additional logging. Instructions on getting logs can be found here: https://github.com/aws/aws-iot-device-sdk-python-v2/blob/main/documents/FAQ.md#how-do-i-enable-logging

[wills721]

Yes, cert issue. Ty

[github-actions]

This issue is now closed. Comments on closed issues are hard for our team to see.
If you need more assistance, please open a new issue that references this one.