aws-sdk-core 3.241.2 → 3.241.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2bb055425607f2a8b6ec90788d038eb14f05f611f705797d31acd04abaf429d0
-  data.tar.gz: defdafdbb1fad35d409e1562e0e2f8cad977901919655ba7fc31fa6f01a0178f
+  metadata.gz: 00ff34b8863f275c077125896abacdd231902a6a6749341c504b23aec8386538
+  data.tar.gz: a850b063cf92edc10d656bfbad52060f109928b38b22e5a6b57429fd4446ed9e
 SHA512:
-  metadata.gz: 1ef77628a938900170ccc335d06d6236ef0b01f438b1253e44c10002064f5bbff6aef8c223a828aec55cd2e85abcd4afcd5d99c54de1929e0d560ee7e2c0a4c7
-  data.tar.gz: 2dd72d4d3542b6798202763f461c1e4d0a39ce285ce03ce409dcbb5bd4168c1c5dddf56fac29f60f9416a3989dabc8595eab4889c11a1b60d377c0d3f7fa2684
+  metadata.gz: 98395234b252340f1b5699ed8647c83dfd974f4e6baf603ac38c12e0dafb4f48acb64c155e6cf57eef8d5a99d7522ce1b9cfc8e13e5a8b7675c01df6350b9183
+  data.tar.gz: 4121894cddfddbc75088516236ab2d5b98b14ca55a2a3d3d80f8a8b289540b07e5ac5d93bd30b085faa42a576193f989ddd0ec2f9bfffbbd0ce2b2c9a7bffa59

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+3.241.3 (2026-01-08)
+------------------
+
+* Issue - Disable request trailer checksums when using non-HTTPs endpoints.
+
 3.241.2 (2026-01-07)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-3.241.2
+3.241.3

data/lib/aws-sdk-core/plugins/checksum_algorithm.rb

@@ -275,8 +275,7 @@ module Aws
         # 1. **No existing checksum in header**: Skips if checksum header already present
         # 2. **Operation support**: Considers model, client configuration and user input.
         def should_calculate_request_checksum?(context)
-          !checksum_provided_as_header?(context.http_request.headers) &&
-            checksum_applicable?(context)
+          !checksum_provided_as_header?(context.http_request.headers) && checksum_applicable?(context)
         end
 
         # Checks if checksum calculation should proceed based on operation requirements and client settings.
@@ -317,12 +316,13 @@ module Aws
         end
 
         def checksum_request_in(context)
-          if context.operation['unsignedPayload'] ||
-             context.operation['authtype'] == 'v4-unsigned-body'
-            'trailer'
-          else
-            'header'
-          end
+          return 'header' unless supports_trailer_checksums?(context.operation)
+
+          should_fallback_to_header?(context) ? 'header' : 'trailer'
+        end
+
+        def supports_trailer_checksums?(operation)
+          operation['unsignedPayload'] || operation['authtype'] == 'v4-unsigned-body'
         end
 
         def calculate_request_checksum(context, checksum_properties)
@@ -331,12 +331,6 @@ module Aws
             headers[algorithm_header] = checksum_properties[:algorithm]
           end
 
-          # Trailer implementation within Mac/JRUBY environment is facing some
-          # network issues that will need further investigation:
-          # * https://github.com/jruby/jruby-openssl/issues/271
-          # * https://github.com/jruby/jruby-openssl/issues/317
-          return apply_request_checksum(context, headers, checksum_properties) if defined?(JRUBY_VERSION)
-
           case checksum_properties[:in]
           when 'header'
             apply_request_checksum(context, headers, checksum_properties)
@@ -347,6 +341,20 @@ module Aws
           end
         end
 
+        def should_fallback_to_header?(context)
+          # Trailer implementation within Mac/JRUBY environment is facing some
+          # network issues that will need further investigation:
+          # * https://github.com/jruby/jruby-openssl/issues/271
+          # * https://github.com/jruby/jruby-openssl/issues/317
+          return true if defined?(JRUBY_VERSION)
+
+          # Chunked signing is currently not supported
+          # Https is required for unsigned payload for security
+          return true if context.http_request.endpoint.scheme == 'http'
+
+          context[:skip_trailer_checksums]
+        end
+
         def apply_request_checksum(context, headers, checksum_properties)
           header_name = checksum_properties[:name]
           headers[header_name] = calculate_checksum(
@@ -422,8 +430,7 @@ module Aws
         end
 
         def add_verify_response_headers_handler(context, checksum_context)
-          validation_list = CHECKSUM_ALGORITHM_PRIORITIES &
-                            operation_response_algorithms(context)
+          validation_list = CHECKSUM_ALGORITHM_PRIORITIES & operation_response_algorithms(context)
           context[:http_checksum][:validation_list] = validation_list
 
           context.http_response.on_headers do |_status, headers|

data/lib/aws-sdk-signin/client.rb

@@ -579,7 +579,7 @@ module Aws::Signin
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-core'
-      context[:gem_version] = '3.241.2'
+      context[:gem_version] = '3.241.3'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-signin.rb

@@ -56,7 +56,7 @@ module Aws::Signin
   autoload :EndpointProvider, 'aws-sdk-signin/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-signin/endpoints'
 
-  GEM_VERSION = '3.241.2'
+  GEM_VERSION = '3.241.3'
 
 end
 

data/lib/aws-sdk-sso/client.rb

@@ -698,7 +698,7 @@ module Aws::SSO
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-core'
-      context[:gem_version] = '3.241.2'
+      context[:gem_version] = '3.241.3'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-sso.rb

@@ -56,7 +56,7 @@ module Aws::SSO
   autoload :EndpointProvider, 'aws-sdk-sso/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-sso/endpoints'
 
-  GEM_VERSION = '3.241.2'
+  GEM_VERSION = '3.241.3'
 
 end
 

data/lib/aws-sdk-ssooidc/client.rb

@@ -1081,7 +1081,7 @@ module Aws::SSOOIDC
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-core'
-      context[:gem_version] = '3.241.2'
+      context[:gem_version] = '3.241.3'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-ssooidc.rb

@@ -56,7 +56,7 @@ module Aws::SSOOIDC
   autoload :EndpointProvider, 'aws-sdk-ssooidc/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-ssooidc/endpoints'
 
-  GEM_VERSION = '3.241.2'
+  GEM_VERSION = '3.241.3'
 
 end
 

data/lib/aws-sdk-sts/client.rb

@@ -2725,7 +2725,7 @@ module Aws::STS
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-core'
-      context[:gem_version] = '3.241.2'
+      context[:gem_version] = '3.241.3'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-sts.rb

@@ -56,7 +56,7 @@ module Aws::STS
   autoload :EndpointProvider, 'aws-sdk-sts/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-sts/endpoints'
 
-  GEM_VERSION = '3.241.2'
+  GEM_VERSION = '3.241.3'
 
 end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-core
 version: !ruby/object:Gem::Version
-  version: 3.241.2
+  version: 3.241.3
 platform: ruby
 authors:
 - Amazon Web Services