Need help with GCP attachments config

Open zlenmessenger opened this issue 5 years ago • 1 comments

Describe the issue and what do you intend to do GCP attachments call from android gives error

What step did you follow or did not follow Configured Server with google cloud domain, email and private key generated from Google cloud storage service account Android configured properly with google cloud api path in cdn2

Configurations: IS This correct?? config.yml: gcpAttachments: # gcp storage configuration domain: zlen.tech email: [email protected] maxSizeInBytes: 1000000 pathPrefix: / rsaSigningKey: "-----BEGIN PRIVATE KEY-----\nMIIEvgIB...............ADAjiMj3b\n-----END PRIVATE KEY-----\n"

build.gradle: SIGNAL_CDN2_URL", ""https://storage.googleapis.com/zlen.tech""

Screenshots or Log 2021-02-11 21:03:28.671 22699-22757/org.thoughtcrime.securesms I/BaseJob: [JOB::bf09fdb7-3a2a-417c-9395-1222c74bbb0b][ResumableUploadSpecJob] Encountered a retryable exception. (Time Since Submission: 2333290 ms, Lifespan: 86400000 ms, Run Attempt: 2/2) org.whispersystems.signalservice.api.push.exceptions.NonSuccessfulResponseCodeException: Response: Response{protocol=h2, code=403, message=, url=https://storage.googleapis.com/zlen.tech//c_X9vTOX7FYMiUEbnYgw?X-Goog-Algorithm=GOOG4-RSA-SHA256&X-Goog-Credential=for-gcp-attachment%40zlen-signal.iam.gserviceaccount.com%2F20210211%2Fauto%2Fstorage%2Fgoog4_request&X-Goog-Date=20210211T145906Z&X-Goog-Expires=90000&X-Goog-SignedHeaders=host%3Bx-goog-content-length-range%3Bx-goog-resumable&X-Goog-Signature=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} at org.whispersystems.signalservice.internal.push.PushServiceSocket.getResumableUploadUrl(PushServiceSocket.java:1177) at org.whispersystems.signalservice.internal.push.PushServiceSocket.getResumableUploadSpec(PushServiceSocket.java:970) at org.whispersystems.signalservice.api.SignalServiceMessageSender.getResumableUploadSpec(SignalServiceMessageSender.java:466) at org.thoughtcrime.securesms.jobs.ResumableUploadSpecJob.onRun(ResumableUploadSpecJob.java:38)

When trying with POSTMAN got this detailed error:

SignatureDoesNotMatch The request signature we calculated does not match the signature you provided. Check your Google secret key and signing method. GOOG4-RSA-SHA256 20210211T145906Z 20210211/auto/storage/goog4_request 73936d59e97adfa35ef4ba6b57a1bd35469991cbb4782c5d7f89e5fc5015238e POST /zlen.tech//c_X9vTOX7FYMiUEbnYgw X-Goog-Algorithm=GOOG4-RSA-SHA256&X-Goog-Credential=for-gcp-attachment%40zlen-signal.iam.gserviceaccount.com%2F20210211%2Fauto%2Fstorage%2Fgoog4_request&X-Goog-Date=20210211T145906Z&X-Goog-Expires=90000&X-Goog-SignedHeaders=host%3Bx-goog-content-length-range%3Bx-goog-resumable host:storage.googleapis.com x-goog-content-length-range:1,1000000 x-goog-resumable:start

host;x-goog-content-length-range;x-goog-resumable UNSIGNED-PAYLOAD</CanonicalRequest> </Error>

Please help

Feb 11 '21 15:02 zlenmessenger

@zlenmessenger where can I find information about google server setup? I got my AWS CDN working but I couldn't find anything about Google services or storage service..

Feb 14 '21 16:02 mhkhung