[HDDS-5964] [S3-TDE] Range Reads not working on encrypted buckets

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.2.0
• Fix Version/s: 1.2.0
• Component/s: S3
• Labels: pull-request-available
• Assignee: Bharat Viswanadham
• Reporter: Soumitra Sulav
• Created: 10/Nov/21 12:29
• Updated: 17/Nov/21 05:58
• Resolved: 17/Nov/21 05:58

Description

Errors were observed on get-object with range option on a key inside an encrypted bucket.

Command 1: Normal upload key

aws s3api --ca-bundle=/usr/local/share/ca-certificates/ca.crt --endpoint https://quasar-byhidn-2.quasar-byhidn.root.hwx.site:9879/ get-object --bucket bucketrange --range bytes=0-215754 --key file1634895936 /tmp/getObjectFile1634895936

An error occurred (500) when calling the GetObject operation (reached max retries: 4): Internal Server Error

Error 1 : ClassCastException Error1_get-object_range

Command 2: Multi part upload key

aws s3api  --ca-bundle=/usr/local/share/ca-certificates/ca.crt --endpoint https://quasar-byhidn-2.quasar-byhidn.root.hwx.site:9879/  get-object --bucket bucketmultiupload  --key file1634895999 --range bytes=0-2157 /tmp/getObjectFile1634895999-range

An error occurred (500) when calling the GetObject operation (reached max retries: 4): Internal Server Error

Error 2 : java.lang.NullPointerException Error2_get-object_range_multiupload

Issue Links

• is related to: HDDS-5501 Support to upload/read keys from encrypted buckets through S3G
• links to: GitHub Pull Request #2827