Certificate error when using real AWS SQS/SNS

[smoesai]

Basic information

• On-premises:
  yes
• Cloud-Provider:
  I want to use AWS only for SNS/SQS
• Installation type:
  Production
• Kubernetes version:
  Client Version: version.Info{Major:"1", Minor:"14", GitVersion:"v1.14.2", GitCommit:"66049e3b21efe110454d67df4fa62b08ea79a19b", GitTreeState:"clean", BuildDate:"2019-05-16T16:23:09Z", GoVersion:"go1.12.5", Compiler:"gc", Platform:"linux/amd64"}
  Server Version: version.Info{Major:"1", Minor:"14", GitVersion:"v1.14.2", GitCommit:"66049e3b21efe110454d67df4fa62b08ea79a19b", GitTreeState:"clean", BuildDate:"2019-05-16T16:14:56Z", GoVersion:"go1.12.5", Compiler:"gc", Platform:"linux/amd64"
• Helm version:
  Client: &version.Version{SemVer:"v2.13.1", GitCommit:"618447cbf203d147601b4b9bd7f8c37a5d39fbb4", GitTreeState:"clean"}
  Server: &version.Version{SemVer:"v2.13.1", GitCommit:"618447cbf203d147601b4b9bd7f8c37a5d39fbb4", GitTreeState:"clean"}
• Installed with Kubespray:
  no
• (Helm) Charts version:
• List of installed top-level charts:
• Other related technologies + version:

How did you install Wire?

I followed every step from docs.wire.com.
Installed on Ubuntu 18.04
I installed comodo wildcard in kubernetes.

Question

Hi,

I have certificate errors when I try to use real AWS SNS/SQS.

This is what I get when changing from fake aws in gundeck configuration to real aws.

1:I,6:logger,1:=,17:cassandra.gundeck,125:Known hosts: [datacenter1:rack1:myipaddress:9042,datacenter1:rack1:myipaddress:9042,datacenter1:rack1:myipaddress:9042],
1:I,6:logger,1:=,17:cassandra.gundeck,73:New control connection: datacenter1:rack1:myipaddress:9042#<socket: 11>,
service: GeneralError (TransportError (HttpExceptionRequest Request {
host = "sqs.eu-central-1.amazonaws.com"
port = 443
secure = True
requestHeaders = [("Host","sqs.eu-central-1.amazonaws.com"),("X-Amz-Date","20200912T165236Z"),("X-Amz-Content-SHA256","db03523f1116689f2c131edbe45eb0063f167a419c956bc9f59ba9bb75e67c61"),("Content-Type","application/x-www-form-urlencoded; charset=utf-8"),("Authorization","")]
path = "/"
queryString = ""
method = "POST"
proxy = Nothing
rawBody = False
redirectCount = 0
responseTimeout = ResponseTimeoutMicro 70000000
requestVersion = HTTP/1.1
}
(InternalException (HandshakeFailed (Error_Protocol ("certificate rejected: [NameMismatch "sqs.eu-central-1.amazonaws.com"]",True,CertificateUnknown))))))

---

Here is my gundeck configuration:

gundeck:
replicaCount: 3

config:
cassandra:
host: cassandra-external
aws:
# change if using real AWS
account: "633735454791"
region: "eu-central-1"
arnEnv: integration
queueName: gundeck-events
sqsEndpoint: https://sqs.eu-central-1.amazonaws.com
snsEndpoint: https://sns.eu-central-1.amazonaws.com

Can someone please help me?

Thanks,
Shaif