Object Storage as a Backup Target • Failed to retreive certificate - V11

Hello All. I know V11 is no longer supported but we have a V11 install since we have a VM running Windows 2008 R2 that still needs protection until they upgrade in October (I know I am rolling the dice here). We have a linux hardened repo on prem and a SOBR pointing to s3.wasabisys.com which has been working great. On 3/24/2024 we started getting "failed to retrieve certificate from https://s3.wasabisys.com and all SOBR offloads were failing. We have had this issue pop up from time to time and went through the usual troubleshooting but we can not get this to work this time. Now if I create a new Object storage repo in V11 using another service point (s3.us-central-1.wasabisys.com) everything works fine and I do not get the certificate error which leads me to believe it is something with Wasabi itself at the s3.wasabisys.com service point. We did reach out to Wasabi and they said they are looking into it. Note that this is not firewall related since all URL's are whitelisted and packets are being allowed out based on the logs. The firewall is a Sophos XG125.

Question: Is there any way to change the service point of an existing Wasabi Object Repo? It is greyed out in properties. If not then can I add another object repo with a different service point to hit the existing bucket without having to reseed a new bucket? I

Please see below the entries from the Satellites file.?


[PublicCloudCertificateLoader] Loading certificate for 'https://s3.wasabisys.com/'
[09.04.2024 22:29:21] <19> Info [AP] (1c90) command: 'Invoke: Network.RetrieveSslCertificate { (EString) HostName = s3.wasabisys.com; (EInt32) Port = 443; }'
[09.04.2024 22:29:25] <10> Info [AP] (1c90) output: <VCPCommandResult result="false" exception="Failed to retrieve SSL certificate. Underlying error: An existing connection was forcibly closed by the remote host&#x0A;Agent failed to process method {Network.RetrieveSslCertificate}." />
[09.04.2024 22:29:25] <10> Info [AP] (1c90) output: >
[09.04.2024 22:29:25] <19> Error Failed to retrieve SSL certificate. Underlying error: An existing connection was forcibly closed by the remote host (Veeam.Backup.Common.CCppComponentException)
[09.04.2024 22:29:25] <19> Error Agent failed to process method {Network.RetrieveSslCertificate}. (Veeam.Backup.Common.CCppComponentException)
[09.04.2024 22:29:25] <19> Error at Veeam.Backup.Common.CVcpInvoker.Invoke(CVcpStreamBase stream, String command, CVcpCommandArgs inArgs, Boolean noLog)
[09.04.2024 22:29:25] <19> Error at Veeam.Backup.AgentProvider.CClientAgentProtocol.Invoke(String command, CVcpCommandArgs inArgs, Boolean noLog, Boolean agentNoLog)
[09.04.2024 22:29:25] <19> Error at Veeam.Backup.AgentProvider.CBackupClient.Invoke(String command, CVcpCommandArgs inArgs, Boolean noLog)
[09.04.2024 22:29:25] <19> Error --- End of stack trace from previous location where exception was thrown ---
[09.04.2024 22:29:25] <19> Error at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
[09.04.2024 22:29:25] <19> Error at Veeam.Backup.Common.ExceptionFactory.ThrowNecessaryAggregateException(IEnumerable`1 exceptionsCollection)
[09.04.2024 22:29:25] <19> Error at Veeam.Backup.AgentProvider.CBackupClientImpl.ConstructException(Exception exception, String error)
[09.04.2024 22:29:25] <19> Error at Veeam.Backup.AgentProvider.CBackupClient.ConstructException(Exception ex, String error, Object[] args)
[09.04.2024 22:29:25] <19> Error at Veeam.Backup.AgentProvider.CBackupClient.OnInvokeError(Exception e, String command, CVcpCommandArgs inArgs)
[09.04.2024 22:29:25] <19> Error at Veeam.Backup.AgentProvider.CBackupClient.Invoke(String command, CVcpCommandArgs inArgs, Boolean noLog)
[09.04.2024 22:29:25] <19> Error at Veeam.Backup.AgentProvider.CBackupClient.RetrieveSslCertificate(String hostName, Int32 port, String& blob, Boolean& isHostnameVerified)
[09.04.2024 22:29:25] <19> Error at Veeam.Backup.PublicCloud.CPublicCloudCertificateLoader.LoadCertificate(IPublicCloudConnectionApiUri connectionUri, String hostName, Boolean ignoreAgentTrustStatus)
[09.04.2024 22:29:25] <19> Error Failed to check S3 service point (ServicePoint='https://s3.wasabisys.com', TrustedCertificate='18f9a652-d037-440c-9d31-a52619696087')

Statistics: Posted by dhayes16 — Apr 11, 2024 2:39 am

---