0002-00000427

Issue description

The value of the X-Amz-Content-SHA256 request header parameter is invalid.

Cause

The request uses the Amazon S3-compatible V4 signature, but the X-Amz-Content-SHA256 parameter in the request header contains an invalid value.

Sample problem

Your request uses an AWS S3-compatible V4 signature, but the value of the X-Amz-Content-SHA256 parameter is incorrect.

GET /test.txt?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=LTAI****************/20221220/us-east-1/s3/aws4_request&X-Amz-Date=20221220T084818Z&X-Amz-Expires=86400&X-Amz-SignedHeaders=host&X-Amz-Signature=ab2***st HTTP/1.0
Date: Tue, 20 Dec 2022 08:48:18 GMT
Host: oss-example.oss-cn-hangzhou.aliyuncs.com
X-Amz-Content-SHA256: ab***123
x-oss-s3-compat: true

• If the HTTP method of the request is not POST or PUT (for example, GET), the X-Amz-Content-SHA256 field is set to the SHA256 hash of an empty string or UNSIGNED-PAYLOAD.

• If the HTTP method of the request is POST or PUT, the X-Amz-Content-SHA256 field is set to the SHA256 hash of the uploaded content.

Solution

Replace the value of the X-Amz-Content-SHA256 field with UNSIGNED-PAYLOAD. Ensure that all parameters in the URL request are complete and correct. The following code shows an example:

GET /test.txt?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=LTAI****************/20221220/us-east-1/s3/aws4_request&X-Amz-Date=20221220T084818Z&X-Amz-Expires=86400&X-Amz-SignedHeaders=host&X-Amz-Signature=ab2s**** HTTP/1.0
Date: Tue, 20 Dec 2022 08:48:18 GMT
Host: oss-example.oss-cn-hangzhou.aliyuncs.com
X-Amz-Content-SHA256: UNSIGNED-PAYLOAD
x-oss-s3-compat: true

We recommend that you use Amazon S3 SDKs to initiate the request. For more information, see Use Amazon S3 SDKs to access OSS.