<p>My Elasticsearch7.8.0 is running in OCI OKE (Kubernetes running in Oracle Cloud). I want to setup Elasticsearch backup snapshot with OCI Object store using OCI Amazon S3 Compatibility API. Added repository-s3 plugin and configured ACCESS_KEY and SECRET_KEY in the PODs. While repository, I am getting &quot;s_s_l_peer_unverified_exception&quot;</p>
<pre><code>PUT /_snapshot/s3-repository

{
  &quot;type&quot;: &quot;s3&quot;,
  &quot;settings&quot;: {
    &quot;client&quot;: &quot;default&quot;,
    &quot;region&quot;: &quot;OCI_REGION&quot;,
    &quot;endpoint&quot;: &quot;OCI_TENANCY.compat.objectstorage.OCI_REGION.oraclecloud.com&quot;,
     &quot;bucket&quot;: &quot;es-backup&quot;    
  }
}
</code></pre>
<p>Respose :</p>
<pre><code>{
  &quot;error&quot; : {
    &quot;root_cause&quot; : [
      {
        &quot;type&quot; : &quot;repository_verification_exception&quot;,
        &quot;reason&quot; : &quot;[s3-repository] path  is not accessible on master node&quot;
      }
    ],
    &quot;type&quot; : &quot;repository_verification_exception&quot;,
    &quot;reason&quot; : &quot;[s3-repository] path  is not accessible on master node&quot;,
    &quot;caused_by&quot; : {
      &quot;type&quot; : &quot;i_o_exception&quot;,
      &quot;reason&quot; : &quot;Unable to upload object [tests-0J3NChNRT9WIQJknHAssKg/master.dat] using a single upload&quot;,
      &quot;caused_by&quot; : {
        &quot;type&quot; : &quot;sdk_client_exception&quot;,
        &quot;reason&quot; : &quot;Unable to execute HTTP request: Certificate for &lt;es-backup.OCI_TENANCY.compat.objectstorage.OCI_REGION.oraclecloud.com&gt; doesn't match any of the subject alternative names: [swiftobjectstorage.us-ashburn-1.oraclecloud.com]&quot;,
        &quot;caused_by&quot; : {
          &quot;type&quot; : &quot;s_s_l_peer_unverified_exception&quot;,
          &quot;reason&quot; : &quot;Certificate for &lt;es-backup.OCI_TENANCY.compat.objectstorage.OCI_REGION.oraclecloud.com&gt; doesn't match any of the subject alternative names: [swiftobjectstorage.us-ashburn-1.oraclecloud.com]&quot;
        }
      }
    }
  },
  &quot;status&quot; : 500
}
</code></pre>

<p>I hope you are aware of when to use S3 Compatible API.</p>
<blockquote>
<p>&quot;endpoint&quot;:&quot;OCI_TENANCY.compat.objectstorage.OCI_REGION.oraclecloud.com&quot;</p>
</blockquote>
<p>Please modify OCI_TENANCY to TENANCY_NAMESPACE. Please refer to <a href="https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/s3compatibleapi.htm" rel="nofollow noreferrer">this link</a> for more information.</p>
<p>You can find your tenancy namespace information in Administration -&gt; Tenancy Details page.</p>
