# The S3 backup MySQL Binlogs certificate verification fails

**URL:** <https://forums.percona.com/t/the-s3-backup-mysql-binlogs-certificate-verification-fails/18150>\
**Category:** Percona XtraDB Cluster 8.x\
**Tags:** mysql\
**Created:** [October 23, 2022, 12:43pm UTC](https://forums.percona.com/t/the-s3-backup-mysql-binlogs-certificate-verification-fails/18150 "2022-10-23T12:43:28Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Draken](https://avatars.discourse-cdn.com/v4/letter/d/6bbea6/32.png) [@Draken](https://forums.percona.com/u/Draken)\
**Post date:** [October 23, 2022, 12:43pm UTC](https://forums.percona.com/t/the-s3-backup-mysql-binlogs-certificate-verification-fails/18150/1 "2022-10-23T12:43:28Z")

</div>

Certificate skipping `verifyTLS: false` has no effect， But scheduled backups work

```auto
2022/10/23 12:21:19 ERROR: collect binlog files: get last uploaded gtid set: read last gtid set: Get "https://minio.minio.svc.cluster.local/binlog/last-binlog-set-40837397-52bc-11ed-95c2-1efffc9cf9af": x509: certificate signed by unknown authority

```

**Helm chart snippet:**

```auto
backup:
  enabled: true
  image: ""
  # serviceAccountName: percona-xtradb-cluster-operator
  imagePullPolicy: IfNotPresent
  imagePullSecrets: []
  # - name: private-registry-credentials
  pitr:
    enabled: true
    storageName: s3-binlogs
    timeBetweenUploads: 60
    resources:
      requests: {}
      limits: {}
  storages:
    s3-binlogs:
      type: s3
      verifyTLS: false
      s3:
        bucket: binlog
        credentialsSecret: minio-secret
        region: us-west-2
        endpointUrl: https://minio.minio.svc.cluster.local
    s3-backup:
      type: s3
      verifyTLS: false
      s3:
        bucket: mysql
        credentialsSecret: minio-secret
        region: us-west-2
        endpointUrl: https://minio.minio.svc.cluster.local
  schedule:
    - name: "daily-backup"
      schedule: "00 00 * * *"
      keep: 5
      storageName: s3-backup

```

---

<div class="post-metadata">

**Author:** ![matthewb](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/matthewb/32/34_2.png) [@matthewb](https://forums.percona.com/u/matthewb)\
**Post date:** [October 23, 2022, 1:55pm UTC](https://forums.percona.com/t/the-s3-backup-mysql-binlogs-certificate-verification-fails/18150/2 "2022-10-23T13:55:34Z")

</div>

@Draken,  
If you set `verifyTLS: true` do the backups fail, or does it produce the same message and still succeed? If so, yes, that’s a bug.

---

<div class="post-metadata">

**Author:** ![Draken](https://avatars.discourse-cdn.com/v4/letter/d/6bbea6/32.png) [@Draken](https://forums.percona.com/u/Draken)\
**Post date:** [October 24, 2022, 2:01am UTC](https://forums.percona.com/t/the-s3-backup-mysql-binlogs-certificate-verification-fails/18150/4 "2022-10-24T02:01:57Z")

</div>

@matthewb  
Set `verifyTS: true` Backup still fails, this should be a bug

---

<div class="post-metadata">

**Author:** ![Michael\_Coburn](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/michael_coburn/32/18_2.png) [@Michael\_Coburn](https://forums.percona.com/u/Michael_Coburn)\
**Post date:** [October 24, 2022, 2:28pm UTC](https://forums.percona.com/t/the-s3-backup-mysql-binlogs-certificate-verification-fails/18150/5 "2022-10-24T14:28:08Z")

</div>

Hi @Draken can you please report to [https://jira.percona.com/projects/K8SPXC](https://jira.percona.com/projects/K8SPXC)