# [KB] BR 暂时无法通过 tls 方式将集群备份到 MinIO

## Key Words

BR,backup,tls,MinIO

## Issue

版本信息 v6.1.0

使用 BR 备份集群到 minIO ，日志中存在报错，MinIO 中没有生成备份文件

```
[INFO] [manager.go:243] ["break campaign loop, NewSession failed"] ["owner info"="[bindinfo] /tidb/bindinfo/owner ownerManager 033a0f7b-3cc7-4180-9022-c3e907511d7c"] [error="context canceled"] [errorVerbose="context canceled\ngithub.com/pingcap/errors.AddStack\n\t/go/pkg/mod/github.com/pingcap/errors@v0.11.5-0.20190809092503-95897b64e011/errors.go:174\ngithub.com/pingcap/errors.Trace\n\t/go/pkg/mod/github.com/pingcap/errors@v0.11.5-0.20190809092503-95897b64e011/juju_adaptor.go:15\ngithub.com/pingcap/tidb/owner.contextDone\n\t/go/pkg/mod/github.com/pingcap/tidb@v1.1.0-beta.0.20200223044457-aedea3ec5e1e/owner/manager.go:371\ngithub.com/pingcap/tidb/owner.NewSession\n\t/go/pkg/mod/github.com/pingcap/tidb@v1.1.0-beta.0.20200223044457-aedea3ec5e1e/owner/manager.go:142\ngithub.com/pingcap/tidb/owner.(*ownerManager).campaignLoop\n\t/go/pkg/mod/github.com/pingcap/tidb@v1.1.0-beta.0.20200223044457-aedea3ec5e1e/owner/manager.go:241\nruntime.goexit\n\t/usr/local/go/src/runtime/asm_amd64.s:1357"]
```

## Root Cause

目前 BR 无法使用 tls 方式将集群备份到 MinIO

GitHub issue: [https://github.com/pingcap/tidb-operator/issues/2277](https://github.com/pingcap/tidb-operator/issues/2277)

## Diagnostic Steps

从 br.log 中发现有类似日志

```
[INFO] [manager.go:243] ["break campaign loop, NewSession failed"] ["owner info"="[bindinfo] /tidb/bindinfo/owner ownerManager 033a0f7b-3cc7-4180-9022-c3e907511d7c"] [error="context canceled"] [errorVerbose="context canceled\ngithub.com/pingcap/errors.AddStack\n\t/go/pkg/mod/github.com/pingcap/errors@v0.11.5-0.20190809092503-95897b64e011/errors.go:174\ngithub.com/pingcap/errors.Trace\n\t/go/pkg/mod/github.com/pingcap/errors@v0.11.5-0.20190809092503-95897b64e011/juju_adaptor.go:15\ngithub.com/pingcap/tidb/owner.contextDone\n\t/go/pkg/mod/github.com/pingcap/tidb@v1.1.0-beta.0.20200223044457-aedea3ec5e1e/owner/manager.go:371\ngithub.com/pingcap/tidb/owner.NewSession\n\t/go/pkg/mod/github.com/pingcap/tidb@v1.1.0-beta.0.20200223044457-aedea3ec5e1e/owner/manager.go:142\ngithub.com/pingcap/tidb/owner.(*ownerManager).campaignLoop\n\t/go/pkg/mod/github.com/pingcap/tidb@v1.1.0-beta.0.20200223044457-aedea3ec5e1e/owner/manager.go:241\nruntime.goexit\n\t/usr/local/go/src/runtime/asm_amd64.s:1357"]
```

## Resolution

暂无

## Workaround

修改 Dockerfile 文件

[https://github.com/pingcap/tidb-operator/blob/v1.3.6/images/tidb-backup-manager/Dockerfile](https://github.com/pingcap/tidb-operator/blob/v1.3.6/images/tidb-backup-manager/Dockerfile)

[https://github.com/tikv/tikv/blob/v6.1.0/Dockerfile](https://github.com/tikv/tikv/blob/v6.1.0/Dockerfile)

修改 Dockerfile 文件，在 `ENTRYPOINT` 行之前，追加：

```
COPY dbs-certs/DBSBank-Root-CA.crt /etc/ssl/certs/dbs-certs/DBSBank-Root-CA.crt
RUN cat /etc/ssl/certs/dbs-certs/DBSBank-Root-CA.crt >> /etc/ssl/certs/ca-certificates.crt
```