Problem description
Disaster Recovery (DR) restore jobs are failing with the error code INTERNAL 65535.
Cause
The root cause of this failure is an outdated DR proxy and AWS environment. The older environment is unable to validate the SSL certificate presented by the AWS Lambda service endpoint, leading to a CERTIFICATE_VERIFY_FAILED error. This prevents the proxy from communicating with AWS services required for the restore process.
Traceback
The following error is visible in the job logs:
[2025-06-24 02:14:48,191] [ERROR] [123451866597184] Error <class 'botocore.exceptions.SSLError'>:SSL validation failed for https://lambda.ca-central-1.amazonaws.com/2015-03-31/functions [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1123). Traceback -Traceback (most recent call last):
Note:
The URL in the error traceback (e.g., https://lambda.ca-central-1.amazonaws.com/2015-03-31) may vary depending on the destination AWS region of the DR restore.
Resolution
To resolve this issue, please upgrade both the Druva DR AWS environment and the Druva agent on the AWS proxy machine to the latest version.
This ensures that the underlying components have the necessary trusted root certificates and support for current SSL/TLS protocols.
Please follow the detailed steps outlined in the Druva documentation.