Does WinSCP Trust Amazon Trust Services? :: Support Forum

TadaakiKutsuna
Joined:: 2020-09-17
Posts:: 2

Does WinSCP Trust Amazon Trust Services?

2020-09-17 06:59

Hi,

I'm currently using WinSCP on AWS S3 in ap-northeast-1 region.
The other day I received the following email from AWS.

Email body from AWS

Hello,

In 2018, AWS announced a broad migration of AWS services’ SSL/TLS certificates to our own Certificate Authority, Amazon Trust Services. Consistent with this change, and beginning March 2021, Amazon S3 and Amazon CloudFront will begin migrating the Certificate Authority for each services’ default certificate. Using our own Certificate Authority, AWS services can better manage the security practices used to handle our default certificates.

Your action may be required to ensure your applications continue normal operation after this change. If you already use other AWS services, your application most likely already trusts Amazon Trust Services as many AWS services have already migrated. Visit https://www.amazontrust.com/repository/ for more information about Amazon Trust Services.

I would like to know if WinSCP will not cause any problems when switching to Amazon Trust Services.
Do I need to upgrade them to the latest version?

Thanks in advance,
Tadaaki

Reply with quote

martin◆ Site Admin
Joined:: 2002-12-10
Posts:: 41,468
Location:: Prague, Czechia

Re: Does WinSCP Trust Amazon Trust Services?

2020-09-18

If I understand it correctly, they are switching to a different root certificate. WinSCP uses Windows certificate store to validate the certificates. So if your Windows certificate store trusts the new Amazon certificate, WinSCP will too.

Reply with quote