0005-00000404

Description

The x-oss-meta-client-side-encryption-wrap-alg request header is missing from a PutObject, InitiateMultipartUpload, or UploadPart request in a client-side encryption scenario.

Cause

For client-side encryption, PutObject, InitiateMultipartUpload, and UploadPart requests must include the x-oss-meta-client-side-encryption-wrap-alg request header.

Example problem

The following example shows an InitiateMultipartUpload request:

POST /multipart.data?uploads HTTP/1.1 
Host: oss-example.oss-cn-hangzhou.aliyuncs.com 
Date: Wed, 22 Feb 2012 08:32:21 GMT 
x-oss-storage-class: Archive
Authorization: OSS qn6q**************:77Dv****************
x-oss-meta-client-side-encryption-key: val0
x-oss-meta-client-side-encryption-start: val1
x-oss-meta-client-side-encryption-cek-alg: val2
x-oss-meta-client-side-encryption-magic-number-hmac: val4
x-oss-meta-client-side-encryption-data-size: val5
x-oss-meta-client-side-encryption-part-size: val6

The request fails because it is missing the x-oss-meta-client-side-encryption-wrap-alg request header.

Solution

For client-side encryption, include the x-oss-meta-client-side-encryption-wrap-alg request header in PutObject, InitiateMultipartUpload, and UploadPart requests.

References

• Client-side encryption

• PutObject

• InitiateMultipartUpload

• UploadPart