Unable to 'git clone' AWS CodeCommit repository

[flexion]

I'm using AWS CodeCommit (git) to store all my code and I tried to clone a repo on IRIX by using 'git clone' (Ver 2.22.0 from the SGUG-RSE installation), but git always reports a 403 error. Credentials are 100% correct, same procedure is working fine on a linux box.

What could be wrong here?


log output when performing git clone: (GIT_CURL_VERBOSE=1)

Cloning into 'ch.flexion.000000'...
* Connected to git-codecommit.eu-central-1.amazonaws.com (52.94.204.165) port 443 (#0)
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /usr/sgug/etc/pki/tls/certs/ca-bundle.crt
CApath: none
* SSL connection using TLSv1.2 / ECDHE-RSA-AES128-SHA
* ALPN, server did not agree to a protocol
* Server certificate:
* subject: CN=git-codecommit.eu-central-1.amazonaws.com
* start date: Aug 17 00:00:00 2020 GMT
* expire date: Jul 26 12:00:00 2021 GMT
* subjectAltName: host "git-codecommit.eu-central-1.amazonaws.com" matched cert's "git-codecommit.eu-central-1.amazonaws.com"
* issuer: C=US; O=Amazon; OU=Server CA 1B; CN=Amazon
* SSL certificate verify ok.
> GET /v1/repos/ch.flexion.000000/info/refs?service=git-upload-pack HTTP/1.1

Host: git-codecommit.eu-central-1.amazonaws.com
User-Agent: git/2.22.0
Accept: */*
Accept-Encoding: deflate, gzip
Pragma: no-cache

< HTTP/1.1 401
< x-amzn-RequestId: 5eb6cfd4-000000000000-fc34a7861cb6
< WWW-Authenticate: Basic realm=""
< Content-Type: text/xml
< Content-Length: 95
< Date: Sat, 15 May 2021 04:59:07 GMT
<
* Connection #0 to host git-codecommit.eu-central-1.amazonaws.com left intact

Username for 'https://git-codecommit.eu-central-1.amazonaws.com':
Password for 'https://[email protected]':

* Couldn't find host git-codecommit.eu-central-1.amazonaws.com in the .netrc file; using defaults
* Connection 0 seems to be dead!
* Closing connection 0
* Hostname git-codecommit.eu-central-1.amazonaws.com was found in DNS cache
* Trying 52.94.204.165...
* TCP_NODELAY set
* Connected to git-codecommit.eu-central-1.amazonaws.com (52.94.204.165) port 443 (#1)
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /usr/sgug/etc/pki/tls/certs/ca-bundle.crt
CApath: none
* SSL re-using session ID
* SSL connection using TLSv1.2 / ECDHE-RSA-AES128-SHA
* ALPN, server did not agree to a protocol
* old SSL session ID is stale, removing
* Server certificate:
* subject: CN=git-codecommit.eu-central-1.amazonaws.com
* start date: Aug 17 00:00:00 2020 GMT
* expire date: Jul 26 12:00:00 2021 GMT
* subjectAltName: host "git-codecommit.eu-central-1.amazonaws.com" matched cert's "git-codecommit.eu-central-1.amazonaws.com"
* issuer: C=US; O=Amazon; OU=Server CA 1B; CN=Amazon
* SSL certificate verify ok.
* Server auth using Basic with user '000000000000'
> GET /v1/repos/ch.flexion.0000000000/info/refs?service=git-upload-pack HTTP/1.1
Host: git-codecommit.eu-central-1.amazonaws.com
Authorization: Basic 0000000000000000000000000000K2xXQUs=
User-Agent: git/2.22.0
Accept: */*
Accept-Encoding: deflate, gzip
Pragma: no-cache

< HTTP/1.1 403
< x-amzn-RequestId: dd1e96c8-00000000000-69477ae21869
< Content-Type: text/xml
< Content-Length: 138
< Date: Sat, 15 May 2021 04:59:26 GMT
<
* Connection #1 to host git-codecommit.eu-central-1.amazonaws.com left intact
fatal: unable to access 'https://git-codecommit.eu-central-1.amazonaws.com/v1/repos/ch.flexion.0000000/': The requested URL returned error: 403

 

[Elf]

Edit: With apologies, I no longer wish to have involvement with SGUG or SGI communities in general,
and have also chosen to remove all of my content. Many things have changed since I co-founded, named, and ultimately
then left SGUG. There are many good people around, to whom I apologize for frustrating by removing these things, and
also many petty people that over the years whittled down both the enjoyment as well as sense of obligation I used to
feel to anyone else regarding what was ultimately just a hobby. Unfortunately one of the latter now writes the rules
and so it is time for me to take my things and go.

This message will replace all of my previous forum posts because deleting threads that I started would have removed
other peoples' posts.

 

[flexion]

good idea, thanks! I've decoded and compared the Authorization headers, and it turns out on the SGI machine the pwd part is cut off after exactly 32 characters!
Credentials are generated by AWS IAM, so there is no way to change the password to a shorter one...

 

[flexion]

Added username and password to the clone URL instead of being asked, and encoded the password with encodeURIComponent() due to special chars.
now it's working!

 

[Elf]

Edit: With apologies, I no longer wish to have involvement with SGUG or SGI communities in general,
and have also chosen to remove all of my content. Many things have changed since I co-founded, named, and ultimately
then left SGUG. There are many good people around, to whom I apologize for frustrating by removing these things, and
also many petty people that over the years whittled down both the enjoyment as well as sense of obligation I used to
feel to anyone else regarding what was ultimately just a hobby. Unfortunately one of the latter now writes the rules
and so it is time for me to take my things and go.

This message will replace all of my previous forum posts because deleting threads that I started would have removed
other peoples' posts.