greetings @julien-f . the one we have an issue with is not self signed. it is from godaddy. i would not have thought godaddy would fall into the lesser/unknown CAs.

we were able to get backups to work with the s3 beta to minio over http. we have minio deployed with a cert from godaddy which seems to fail when we enabled it.

i tried to import the godaddy certs in case they were not installed as part of ca-certificates package. they import ok, however it is not clear how or if those are used for the s3 access. awscli and mc (minio client) can bypass or has ways to set where to find the proper CA certs. have i missed something?