Certificate error when using real AWS SQS/SNS

Basic information

• On-premises:
  yes
• Cloud-Provider:
  I want to use AWS only for SNS/SQS
• Installation type:
  Production
• Kubernetes version:
  Client Version: version.Info{Major:"1", Minor:"14", GitVersion:"v1.14.2", GitCommit:"66049e3b21efe110454d67df4fa62b08ea79a19b", GitTreeState:"clean", BuildDate:"2019-05-16T16:23:09Z", GoVersion:"go1.12.5", Compiler:"gc", Platform:"linux/amd64"}
  Server Version: version.Info{Major:"1", Minor:"14", GitVersion:"v1.14.2", GitCommit:"66049e3b21efe110454d67df4fa62b08ea79a19b", GitTreeState:"clean", BuildDate:"2019-05-16T16:14:56Z", GoVersion:"go1.12.5", Compiler:"gc", Platform:"linux/amd64"
• Helm version:
  Client: &version.Version{SemVer:"v2.13.1", GitCommit:"618447cbf203d147601b4b9bd7f8c37a5d39fbb4", GitTreeState:"clean"}
  Server: &version.Version{SemVer:"v2.13.1", GitCommit:"618447cbf203d147601b4b9bd7f8c37a5d39fbb4", GitTreeState:"clean"}
• Installed with Kubespray:
  no
• (Helm) Charts version:
• List of installed top-level charts:
• Other related technologies + version:

How did you install Wire?

I followed every step from docs.wire.com.
Installed on Ubuntu 18.04
I installed comodo wildcard in kubernetes.

Question

Hi,

I have certificate errors when I try to use real AWS SNS/SQS.

This is what I get when changing from fake aws in gundeck configuration to real aws.

1:I,6:logger,1:=,17:cassandra.gundeck,125:Known hosts: [datacenter1:rack1:myipaddress:9042,datacenter1:rack1:myipaddress:9042,datacenter1:rack1:myipaddress:9042],
1:I,6:logger,1:=,17:cassandra.gundeck,73:New control connection: datacenter1:rack1:myipaddress:9042#<socket: 11>,
service: GeneralError (TransportError (HttpExceptionRequest Request {
host = "sqs.eu-central-1.amazonaws.com"
port = 443
secure = True
requestHeaders = [("Host","sqs.eu-central-1.amazonaws.com"),("X-Amz-Date","20200912T165236Z"),("X-Amz-Content-SHA256","db03523f1116689f2c131edbe45eb0063f167a419c956bc9f59ba9bb75e67c61"),("Content-Type","application/x-www-form-urlencoded; charset=utf-8"),("Authorization","")]
path = "/"
queryString = ""
method = "POST"
proxy = Nothing
rawBody = False
redirectCount = 0
responseTimeout = ResponseTimeoutMicro 70000000
requestVersion = HTTP/1.1
}
(InternalException (HandshakeFailed (Error_Protocol ("certificate rejected: [NameMismatch "sqs.eu-central-1.amazonaws.com"]",True,CertificateUnknown))))))

Here is my gundeck configuration:

gundeck:
replicaCount: 3

config:
cassandra:
host: cassandra-external
aws:
# change if using real AWS
account: "633735454791"
region: "eu-central-1"
arnEnv: integration
queueName: gundeck-events
sqsEndpoint: https://sqs.eu-central-1.amazonaws.com
snsEndpoint: https://sns.eu-central-1.amazonaws.com

Can someone please help me?

Thanks,
Shaif

Start with the AWS SNS/SQS settings in the gundeck configuration and the installation guide referenced in the issue. Reproduce the certificate handshake against the configured SQS and SNS endpoints, then determine what deployment or certificate configuration change resolves the reported hostname mismatch.