# Unsecured presigned object urls in openvidu3.3.0 + managing latest minio

**URL:** https://openvidu.discourse.group/t/unsecured-presigned-object-urls-in-openvidu3-3-0-managing-latest-minio/5387
**Category:** Issues developing apps
**Created:** [July 2, 2025, 10:52am UTC](https://openvidu.discourse.group/t/unsecured-presigned-object-urls-in-openvidu3-3-0-managing-latest-minio/5387 "2025-07-02T10:52:33Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![misha](https://yyz2.discourse-cdn.com/free1/user_avatar/openvidu.discourse.group/misha/32/2541_2.png) [@misha](https://openvidu.discourse.group/u/misha)
#### Post date: [July 2, 2025, 10:52am UTC](https://openvidu.discourse.group/t/unsecured-presigned-object-urls-in-openvidu3-3-0-managing-latest-minio/5387/1 "2025-07-02T10:52:33Z")

</div>

Hello everyone, recently we have updated our openvidu single instance from 3.0.0 to 3.3.0 and so far most of things are working except for managing the minio instance. We noticed two issues. (1) The minio console is now way different from how it was and for instance it is now impossible to create app access keys so that our backend apps (minio client instance on nodejs) can for example generate presigned object urls. (2) Speaking of which, we created access key before in openvidu 3.0.0. and it still works but for some reason when we create minio client instance on nodejs like this:

```auto
const minioClient = new Minio.Client({
  endPoint: process.env.MINIO_ENDPOINT,
  port: 9000,
  useSSL: true,
  accessKey: process.env.MINIO_ACCESS_KEY,
  secretKey: process.env.MINIO_SECRET_KEY
});

```

We get following error in nodejs logs:

```auto
Error generating URL for LargeChatArea4-2025-07-01T193202-RM_sDkM5SFQD6ry.mp4: Error: write EPROTO 00DF980002000000:error:0A00010B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:355: at WriteWrap.onWriteComplete [as oncomplete] (node:internal/stream_base_commons:94:16) {
  errno: -100,
  code: 'EPROTO',
  syscall: 'write'
}

```

but when we set useSSL to false, it generates the link correctly but over http instead of https. Making https via code or manually changing makes the link unusable. The page just opens with the message that server responded with invalid response.

The nodejs code uses minio 8.0.5 package.

Clarification on how to use the minio dashboard and generating download links with latest version would be really appreciated.

---

<div class="post-metadata">

### Author: ![cruizba](https://yyz2.discourse-cdn.com/free1/user_avatar/openvidu.discourse.group/cruizba/32/18_2.png) [@cruizba](https://openvidu.discourse.group/u/cruizba)
#### Post date: [July 2, 2025, 11:38am UTC](https://openvidu.discourse.group/t/unsecured-presigned-object-urls-in-openvidu3-3-0-managing-latest-minio/5387/2 "2025-07-02T11:38:43Z")

</div>

Yes, I think this is a regression, to fix a wrong redirection we removed the SSL from the minio exposed server. Let me see what you need to add to your `caddy.yaml` config file to enable it again.

I will take it into account to fix it in 3.4.0

---

<div class="post-metadata">

### Author: ![misha](https://yyz2.discourse-cdn.com/free1/user_avatar/openvidu.discourse.group/misha/32/2541_2.png) [@misha](https://openvidu.discourse.group/u/misha)
#### Post date: [July 2, 2025, 11:44am UTC](https://openvidu.discourse.group/t/unsecured-presigned-object-urls-in-openvidu3-3-0-managing-latest-minio/5387/3 "2025-07-02T11:44:25Z")

</div>

@cruizba, thank you for your attention to this matter. I will be waiting for your response. At the moment our caddy.yaml is the default config that comes after installing the openvidu. We did clean installation.

---

<div class="post-metadata">

### Author: ![cruizba](https://yyz2.discourse-cdn.com/free1/user_avatar/openvidu.discourse.group/cruizba/32/18_2.png) [@cruizba](https://openvidu.discourse.group/u/cruizba)
#### Post date: [July 2, 2025, 11:48am UTC](https://openvidu.discourse.group/t/unsecured-presigned-object-urls-in-openvidu3-3-0-managing-latest-minio/5387/4 "2025-07-02T11:48:23Z")

</div>

What type of certificate are you using? You can check it in `/opt/openvidu/deployment-info.yaml`

---

<div class="post-metadata">

### Author: ![misha](https://yyz2.discourse-cdn.com/free1/user_avatar/openvidu.discourse.group/misha/32/2541_2.png) [@misha](https://openvidu.discourse.group/u/misha)
#### Post date: [July 2, 2025, 12:04pm UTC](https://openvidu.discourse.group/t/unsecured-presigned-object-urls-in-openvidu3-3-0-managing-latest-minio/5387/5 "2025-07-02T12:04:09Z")

</div>

letsencrypt  
I have ran this command to install the openvidu

```auto
sh <(curl -fsSL http://get.openvidu.io/community/singlenode/latest/install.sh) \
    --no-tty --install \
    --domain-name=' *****' \
    --enabled-modules='observability,app' \
    --turn-domain-name='' \
    --experimental-turn-tls-with-main-domain \
    --livekit-api-key=' ****' \
    --livekit-api-secret=' ****' \
    --dashboard-admin-user=' *****' \
    --dashboard-admin-password=' *****' \
    --redis-password=' *****' \
    --minio-access-key=' *****' \
    --minio-secret-key=' *****' \
    --mongo-admin-user=' *****' \
    --mongo-admin-password=' *****' \
    --mongo-replica-set-key=' *****' \
    --grafana-admin-user=' *****' \
    --grafana-admin-password=' *****' \
    --default-app-user='user' \
    --default-app-password=' *****' \
    --default-app-admin-user=' *****' \
    --default-app-admin-password=' *****' \
    --certificate-type='letsencrypt' \
    --letsencrypt-email=' *****'

```

---

<div class="post-metadata">

### Author: ![cruizba](https://yyz2.discourse-cdn.com/free1/user_avatar/openvidu.discourse.group/cruizba/32/18_2.png) [@cruizba](https://openvidu.discourse.group/u/cruizba)
#### Post date: [July 2, 2025, 1:09pm UTC](https://openvidu.discourse.group/t/unsecured-presigned-object-urls-in-openvidu3-3-0-managing-latest-minio/5387/6 "2025-07-02T13:09:42Z")

</div>

@misha follow the following instructions:

1. Open `/opt/openvidu/config/caddy.yaml`

2. Locate the following section:

3. Add the following at the end of the `minio` http server:

Let me know if this fix your issue! 🙂

---

<div class="post-metadata">

### Author: ![misha](https://yyz2.discourse-cdn.com/free1/user_avatar/openvidu.discourse.group/misha/32/2541_2.png) [@misha](https://openvidu.discourse.group/u/misha)
#### Post date: [July 2, 2025, 1:52pm UTC](https://openvidu.discourse.group/t/unsecured-presigned-object-urls-in-openvidu3-3-0-managing-latest-minio/5387/7 "2025-07-02T13:52:33Z")

</div>

It worked  
Thank you @cruizba
