TLS certificate verification error when connecting to tigris (t3.storage)?

[luis]

The backend fails to list S3 buckets due to a TLS certificate verification error. The connection to t3.storage.dev is rejected because the x509 certificate is signed by an unknown authority, causing the request to fail after multiple retry attempts.

code example

package main

import (
	"context"
	"fmt"
	"log"
	"time"

	"github.com/aws/aws-sdk-go-v2/aws"
	"github.com/aws/aws-sdk-go-v2/config"
	"github.com/aws/aws-sdk-go-v2/service/s3"
)

func main() {
	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
	defer cancel()

	sdkConfig, err := config.LoadDefaultConfig(ctx)
	if err != nil {
		log.Printf("Couldn't load default configuration. Here's why: %v", err)
		return
	}

	svc := s3.NewFromConfig(sdkConfig, func(o *s3.Options) {
		o.BaseEndpoint = aws.String("https://t3.storage.dev")
		o.Region = "auto"
		o.UsePathStyle = false
	})

	result, err := svc.ListBuckets(ctx, &s3.ListBucketsInput{})
	if err != nil {
		log.Printf("Unable to list buckets. Here's why: %v", err)
		return
	}

	fmt.Println("Buckets:")
	for _, b := range result.Buckets {
		fmt.Printf("* %s created on %s\n",
			aws.ToString(b.Name), aws.ToTime(b.CreationDate))
	}
}

go run main.go
2026/01/17 21:36:01 Unable to list buckets. Here's why: operation error S3: ListBuckets, exceeded maximum number of attempts, 3, https response error StatusCode: 0, RequestID: , HostID: , request send failed, Get "https://t3.storage.dev/?x-id=ListBuckets": tls: failed to verify certificate: x509: certificate signed by unknown authority

PD:

I am in Spain and there is a LaLiga match (football, they block IPs from providers, etc.). Could Fly be affected or is it being affected by this?

[ovaistariq]

It’s possible that the domain might be getting blocked. Are you able to test this outside of Spain?