Boto S3 - Boto [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed while connecting to S3

[cmdrrobin]

When using S3 storage solution for Netbox and a custom CA, it gives an error message when trying to upload a script.

Boto [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed while connecting to S3

We use the Netbox Helm chart, for deploying Netbox into our environment. With storage backend storages.backends.s3.S3Storage, we have add the options endpoint_url, use_ssl, bucket_name, and verify. Also added extra environment variables (extraEnvs) to de deployment, to include REQUESTS_CA_BUNDLE, SSL_CERT_FILE and even AWS_CA_BUNDLE. Unfortunately this doesn't work for Boto.

As far as I know Boto uses certifi, for SSL support.

$ python -m certifi
/opt/netbox/venv/lib/python3.12/site-packages/certifi/cacert.pem

Is there a way to point certifi to the local CA file, (in my case /etc/ssl/certs/ca-certificates.crt), or does anybody know how to fix this?

Currently running Netbox v4.3.6.

[llamafilm]

I haven't tried but it sounds like this might be a bug with AWS SDK. See here: aws/aws-cli#9016

Does it work if you replace the cacert.pem file inside the certifi lib? Obviously that's not a scalable solution but it might work in a pinch.

[cmdrrobin]

Yes. That works, although not ideal.