Blocker With SSE-KMS enabled on S3 buckets, an object's key does not match the ETag leading to this
2020-08-04T17:05:29,782 WARN [http-nio-0.0.0.0-8080-exec-3] [org.nuxeo.ecm.blob.s3.S3BlobStore] Invalid S3 object digest, expected=50da1cb107d84d72caa94e80bdeb8b9d actual=a4e7b0e875e88f786334262c001ac611 2020-08-04T17:05:29,783 ERROR [http-nio-0.0.0.0-8080-exec-3] [org.nuxeo.ecm.core.blob.ManagedBlob] Failed to access file: 50da1cb107d84d72caa94e80bdeb8b9d
This happens with files less than 5 MEGAbytes in size.
harlan@harlan:~$ ./nuxeo-server-10.10-tomcat/bin/nuxeoctl showconf | grep s3 Include template: /home/harlan/nuxeo-server-10.10-tomcat/templates/s3binaries - amazon-s3-direct-upload (version: 1.1.3 - id: amazon-s3-direct-upload-1.1.3 - state: started) - amazon-s3-online-storage (version: 1.9.11 - id: amazon-s3-online-storage-1.9.11 - state: started) Package template: s3binaries nuxeo.core.binarymanager=org.nuxeo.ecm.blob.s3.S3BlobProvider nuxeo.s3storage.bucket=harlan nuxeo.s3storage.crypt.serverside=true nuxeo.s3storage.region=us-east-2 nuxeo.s3storage.transient.bucket=harlan-transient nuxeo.s3storage.transient.crypt.serverside=true nuxeo.s3storage.transient.region=us-east-2 nuxeo.s3storage.transient.roleArn=arn:aws:iam::00000000000:role/harlan nuxeo.s3storage.useDirectUpload=true nuxeo.templates=default,s3binaries
