Jump to content

Metadata updates failing after Mono6.8 update on 4.7.0.9

garybellanice

By garybellanice
in FreeBSD

 Share

Recommended Posts

dml33

dml33   23

Posted
Posted (edited)

Hi.

I have just followed your steps:

On 10/5/2021 at 6:38 PM, david.torcivia said:

For those that don't want to install a new jail, there's a workaround that works currently.

Install your emby update like normal but also with the latest mono: 



service emby-server stop
pkg update -f
pkg upgrade
# install latest mono for requirement
pkg install mono6.8
# install latest emby from https://github.com/MediaBrowser/Emby.Releases/releases
pkg add -f https://github.com/MediaBrowser/Emby.Releases/releases/download/4.7.0.13/emby-server-freebsd12_4.7.0.13_amd64.pkg

Substitute emby-server with whatever service name you have, alternatively `ps aux` will show you running processes so you can identify and kill emby with it's PID (command is `kill` then the PID number).

If you start emby here, it won't connect to anything. To fix it: 



# lock emby so you don't get dependency errors
pkg lock emby-server
# install mono 5.2 over mono6.8
pkg install mono5.20-5.20.1.34
# unlock emby so you can update later
pkg unlock emby-server
service emby-server start

And it should work without a hitch. This likely won't work eventually as newer mono features are utilized, but it's been flawless for me on all the latest emby versions. You'll have to do this each time you update, but it's probably faster than reinstalling (in the short term anyway).

But, still fanart.tv gives authentication error and no banner or logo can be retrieved: 

2021-10-07 19:34:46.066 Info HttpClient: HttpClientManager GET: https://webservice.fanart.tv/v3/movies/88794?api_key=5c6b04c68e904cfed1e6cbc9a9e683d4
2021-10-07 19:34:46.219 Error HttpClient: Error TrustFailure getting response from 
	*** Error Report ***
	Version: 4.7.0.13
	Command line: /usr/local/lib/emby-server/system/EmbyServer.exe -os freebsd -ffdetect /usr/local/lib/emby-server/bin/ffdetect -ffmpeg /usr/local/lib/emby-server/bin/ffmpeg -ffprobe /usr/local/lib/emby-server/bin/ffprobe -programdata /var/db/emby-server -updatepackage emby-server-freebsd12_{version}_amd64.pkg
	Operating system: Unix 12.2.7.0 
	Framework: Mono: 5.20.1.34 (5.20.1.34 Wed Sep 22 09:28:35 UTC 2021)
	OS/Process: X64/X64
	Runtime: usr/local/lib/mono/4.5/mscorlib.dll
	Processor count: 4
	Data path: /var/db/emby-server
	Application path: /usr/local/lib/emby-server/system
	System.Net.WebException: System.Net.WebException: Error: TrustFailure (Authentication failed, see inner exception.) ---> System.Security.Authentication.AuthenticationException: Authentication failed, see inner exception. ---> Mono.Btls.MonoBtlsException: Ssl error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
	  at /wrkdirs/usr/ports/lang/mono5.20/work/mono-5.20.1.34/external/boringssl/ssl/handshake_client.c:1132
	  at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00038] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status, System.Boolean renegotiate) [0x000a1] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus,bool)
	  at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at Mono.Net.Security.AsyncProtocolRequest.ProcessOperation (System.Threading.CancellationToken cancellationToken) [0x000ff] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at Mono.Net.Security.AsyncProtocolRequest.StartOperation (System.Threading.CancellationToken cancellationToken) [0x0008b] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	   --- End of inner exception stack trace ---
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessAuthentication (System.Boolean runSynchronously, Mono.Net.Security.MonoSslAuthenticationOptions options, System.Threading.CancellationToken cancellationToken) [0x00252] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Net.WebConnectionTunnel tunnel, System.Threading.CancellationToken cancellationToken) [0x00126] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x001ba] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	   --- End of inner exception stack trace ---
	  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x0021a] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at System.Net.WebConnection.InitConnection (System.Net.WebOperation operation, System.Threading.CancellationToken cancellationToken) [0x00141] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at System.Net.WebOperation.Run () [0x0009a] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at System.Net.WebCompletionSource`1[T].WaitForCompletion () [0x00094] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at System.Net.HttpWebRequest.RunWithTimeoutWorker[T] (System.Threading.Tasks.Task`1[TResult] workerTask, System.Int32 timeout, System.Action abort, System.Func`1[TResult] aborted, System.Threading.CancellationTokenSource cts) [0x000f8] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at System.Net.HttpWebRequest.EndGetResponse (System.IAsyncResult asyncResult) [0x00020] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at System.Threading.Tasks.TaskFactory`1[TResult].FromAsyncCoreLogic (System.IAsyncResult iar, System.Func`2[T,TResult] endFunction, System.Action`1[T] endAction, System.Threading.Tasks.Task`1[TResult] promise, System.Boolean requiresSynchronization) [0x0000f] in <1f645b2b541b49ff937eb42d71cf747b>:0 
	Source: System
	TargetSite: System.Net.WebResponse EndGetResponse(System.IAsyncResult)
	InnerException: System.Security.Authentication.AuthenticationException: Authentication failed, see inner exception.
	Source: mscorlib
	TargetSite: Void Throw()
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessAuthentication (System.Boolean runSynchronously, Mono.Net.Security.MonoSslAuthenticationOptions options, System.Threading.CancellationToken cancellationToken) [0x00252] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Net.WebConnectionTunnel tunnel, System.Threading.CancellationToken cancellationToken) [0x00126] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x001ba] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	InnerException: Mono.Btls.MonoBtlsException: Ssl error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
	  at /wrkdirs/usr/ports/lang/mono5.20/work/mono-5.20.1.34/external/boringssl/ssl/handshake_client.c:1132
	Source: mscorlib
	TargetSite: Void Throw()
	  at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00038] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status, System.Boolean renegotiate) [0x000a1] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus,bool)
	  at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at Mono.Net.Security.AsyncProtocolRequest.ProcessOperation (System.Threading.CancellationToken cancellationToken) [0x000ff] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at Mono.Net.Security.AsyncProtocolRequest.StartOperation (System.Threading.CancellationToken cancellationToken) [0x0008b] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	
2021-10-07 19:34:46.249 Error ProviderManager: FanartMovieImageProvider failed in GetImageInfos for type Movie
	*** Error Report ***
	Version: 4.7.0.13
	Command line: /usr/local/lib/emby-server/system/EmbyServer.exe -os freebsd -ffdetect /usr/local/lib/emby-server/bin/ffdetect -ffmpeg /usr/local/lib/emby-server/bin/ffmpeg -ffprobe /usr/local/lib/emby-server/bin/ffprobe -programdata /var/db/emby-server -updatepackage emby-server-freebsd12_{version}_amd64.pkg
	Operating system: Unix 12.2.7.0 
	Framework: Mono: 5.20.1.34 (5.20.1.34 Wed Sep 22 09:28:35 UTC 2021)
	OS/Process: X64/X64
	Runtime: usr/local/lib/mono/4.5/mscorlib.dll
	Processor count: 4
	Data path: /var/db/emby-server
	Application path: /usr/local/lib/emby-server/system
	MediaBrowser.Model.Net.HttpException: MediaBrowser.Model.Net.HttpException: Error: TrustFailure (Authentication failed, see inner exception.) ---> System.Net.WebException: Error: TrustFailure (Authentication failed, see inner exception.) ---> System.Security.Authentication.AuthenticationException: Authentication failed, see inner exception. ---> Mono.Btls.MonoBtlsException: Ssl error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
	  at /wrkdirs/usr/ports/lang/mono5.20/work/mono-5.20.1.34/external/boringssl/ssl/handshake_client.c:1132
	  at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00038] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status, System.Boolean renegotiate) [0x000a1] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus,bool)
	  at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at Mono.Net.Security.AsyncProtocolRequest.ProcessOperation (System.Threading.CancellationToken cancellationToken) [0x000ff] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at Mono.Net.Security.AsyncProtocolRequest.StartOperation (System.Threading.CancellationToken cancellationToken) [0x0008b] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	   --- End of inner exception stack trace ---
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessAuthentication (System.Boolean runSynchronously, Mono.Net.Security.MonoSslAuthenticationOptions options, System.Threading.CancellationToken cancellationToken) [0x00252] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Net.WebConnectionTunnel tunnel, System.Threading.CancellationToken cancellationToken) [0x00126] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x001ba] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	   --- End of inner exception stack trace ---
	  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x0021a] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at System.Net.WebConnection.InitConnection (System.Net.WebOperation operation, System.Threading.CancellationToken cancellationToken) [0x00141] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at System.Net.WebOperation.Run () [0x0009a] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at System.Net.WebCompletionSource`1[T].WaitForCompletion () [0x00094] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at System.Net.HttpWebRequest.RunWithTimeoutWorker[T] (System.Threading.Tasks.Task`1[TResult] workerTask, System.Int32 timeout, System.Action abort, System.Func`1[TResult] aborted, System.Threading.CancellationTokenSource cts) [0x000f8] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at System.Net.HttpWebRequest.EndGetResponse (System.IAsyncResult asyncResult) [0x00020] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at System.Threading.Tasks.TaskFactory`1[TResult].FromAsyncCoreLogic (System.IAsyncResult iar, System.Func`2[T,TResult] endFunction, System.Action`1[T] endAction, System.Threading.Tasks.Task`1[TResult] promise, System.Boolean requiresSynchronization) [0x0000f] in <1f645b2b541b49ff937eb42d71cf747b>:0 
	   --- End of inner exception stack trace ---
	  at Emby.Server.Implementations.HttpClientManager.HttpClientManager.SendAsyncInternal (MediaBrowser.Common.Net.HttpRequestOptions options, System.String httpMethod) [0x00858] in <8f512a7766cb4a53a474d303f444be73>:0 
	  at Emby.Server.Implementations.HttpClientManager.HttpClientManager.SendAsync (MediaBrowser.Common.Net.HttpRequestOptions options, System.String httpMethod) [0x0009e] in <8f512a7766cb4a53a474d303f444be73>:0 
	  at Fanart.FanartMovieImageProvider.DownloadMovieJson (System.String id, System.Threading.CancellationToken cancellationToken) [0x00282] in <e3b9ed5836a94e07ac62361c1628619f>:0 
	  at Fanart.FanartMovieImageProvider.GetImages (MediaBrowser.Controller.Entities.BaseItem item, MediaBrowser.Model.Configuration.LibraryOptions libraryOptions, System.Threading.CancellationToken cancellationToken) [0x000ec] in <e3b9ed5836a94e07ac62361c1628619f>:0 
	  at MediaBrowser.Providers.Manager.ProviderManager.GetImages (MediaBrowser.Controller.Entities.BaseItem item, MediaBrowser.Model.Configuration.LibraryOptions libraryOptions, System.Threading.CancellationToken cancellationToken, MediaBrowser.Controller.Providers.IRemoteImageProvider provider, System.Int32 providerIndex) [0x000a6] in <e26d1f7b157a42ebbc1e8c5ea708bf1e>:0 
	Source: mscorlib
	TargetSite: Void Throw()
	InnerException: System.Net.WebException: Error: TrustFailure (Authentication failed, see inner exception.)
	Source: System
	TargetSite: System.Net.WebResponse EndGetResponse(System.IAsyncResult)
	  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x0021a] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at System.Net.WebConnection.InitConnection (System.Net.WebOperation operation, System.Threading.CancellationToken cancellationToken) [0x00141] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at System.Net.WebOperation.Run () [0x0009a] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at System.Net.WebCompletionSource`1[T].WaitForCompletion () [0x00094] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at System.Net.HttpWebRequest.RunWithTimeoutWorker[T] (System.Threading.Tasks.Task`1[TResult] workerTask, System.Int32 timeout, System.Action abort, System.Func`1[TResult] aborted, System.Threading.CancellationTokenSource cts) [0x000f8] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at System.Net.HttpWebRequest.EndGetResponse (System.IAsyncResult asyncResult) [0x00020] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at System.Threading.Tasks.TaskFactory`1[TResult].FromAsyncCoreLogic (System.IAsyncResult iar, System.Func`2[T,TResult] endFunction, System.Action`1[T] endAction, System.Threading.Tasks.Task`1[TResult] promise, System.Boolean requiresSynchronization) [0x0000f] in <1f645b2b541b49ff937eb42d71cf747b>:0 
	InnerException: System.Security.Authentication.AuthenticationException: Authentication failed, see inner exception.
	Source: mscorlib
	TargetSite: Void Throw()
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessAuthentication (System.Boolean runSynchronously, Mono.Net.Security.MonoSslAuthenticationOptions options, System.Threading.CancellationToken cancellationToken) [0x00252] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Net.WebConnectionTunnel tunnel, System.Threading.CancellationToken cancellationToken) [0x00126] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x001ba] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	InnerException: Mono.Btls.MonoBtlsException: Ssl error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
	  at /wrkdirs/usr/ports/lang/mono5.20/work/mono-5.20.1.34/external/boringssl/ssl/handshake_client.c:1132
	Source: mscorlib
	TargetSite: Void Throw()
	  at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00038] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status, System.Boolean renegotiate) [0x000a1] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus,bool)
	  at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at Mono.Net.Security.AsyncProtocolRequest.ProcessOperation (System.Threading.CancellationToken cancellationToken) [0x000ff] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	  at Mono.Net.Security.AsyncProtocolRequest.StartOperation (System.Threading.CancellationToken cancellationToken) [0x0008b] in <3cd1e5eafcb04e86ab91ae63b4afeccc>:0 
	
2021-10-07 19:35:35.618 Info Server: http/1.1 GET http://emby.midahome.lan:8096/Users/c5457c63892145d19df26d44a2236de1?X-Emby-Client=Emby Web&X-Emby-Device-Name=Chrome&X-Emby-Device-Id=4dc1938c-d358-4ec8-a619-3b8fba5e967b&X-Emby-Client-Version=4.6.4.0. UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36

Any hints?

Thanks!

Edited by dml33
Link to comment
Share on other sites
dml33

dml33   23

Posted
Posted (edited)

Hi.

I have just reinstalled beta 4.7.0.13 with mono 6.8 as stated in instructions: 

pkg install mono6.8 libass fontconfig freetype2 fribidi gnutls iconv opus sqlite3 libtheora libva ocl-icd libvorbis webp libzvbi libraw ImageMagick6

I run without errors: 

root@Emby:/ # cert-sync /usr/local/share/certs/ca-root-nss.crt
Mono Certificate Store Sync - version 6.8.0.123
Populate Mono certificate store from a concatenated list of certificates.
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.

Importing into legacy system store:
I already trust 143, your new list has 142
Import process completed.

Importing into BTLS system store:
I already trust 143, your new list has 142
Import process completed.

Later: 

pkg add -f https://github.com/MediaBrowser/Emby.Releases/releases/download/4.7.0.13/emby-server-freebsd12_4.7.0.13_amd64.pkg

But, no luck. Emby cannot connect to fanart. There is something wrong with the certificates. In other users, this beta magically worked, but not in my case. Any hints?

Thanks!

 

Edited by dml33
Link to comment
Share on other sites
dml33

dml33   23

Posted
Posted (edited)

And here, the same with mono 5.10.1.57. 

As suggested above, I locked emby-server (beta 4.7.0.13) and reinstalled mono 5.10.1.57, instead of 5.20, just in case.

Again, no luck. Same problem.

I have the same problem with the three mono versions and freebsd11 and freebsd12 emby-server beta 4.7.0.13 packages, and with mono 5.10 and emby-server stable 4.6.4.0. I am lost.

 

Edited by dml33
Link to comment
Share on other sites
dml33

dml33   23

Posted
Posted
On 9/12/2021 at 12:32 PM, alucryd said:

@garybellanicePlease test curl on one of the affected URLs, like https://emby.media/community/index.php?/blog/rss/1-media-browser-developers-blog I posted above.

Is the ca_root_nss package up to date in your jail? Can you try importing the following certificate bundle as root using cert-sync? https://curl.se/ca/cacert.pem

Hi.

I did as you suggested: 

root@Emby:~ # cert-sync /tmp/cacert.pem
Mono Certificate Store Sync - version 5.10.1.57
Populate Mono certificate store from a concatenated list of certificates.
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.

Importing into legacy system store:
I already trust 142, your new list has 127
Certificate added: C=AT, O=e-commerce monitoring GmbH, CN=GLOBALTRUST 2020
Certificate added: OID.2.5.4.5=G63287510, C=ES, O=ANF Autoridad de Certificacion, OU=ANF CA Raiz, CN=ANF Secure Server Root CA
Certificate added: C=PL, O=Asseco Data Systems S.A., OU=Certum Certification Authority, CN=Certum EC-384 CA
Certificate added: C=PL, O=Asseco Data Systems S.A., OU=Certum Certification Authority, CN=Certum Trusted Root CA
4 new root certificates were added to your trust store.
Import process completed.

Importing into BTLS system store:
I already trust 142, your new list has 127
Certificate added: C=AT, O=e-commerce monitoring GmbH, CN=GLOBALTRUST 2020
Certificate added: OID.2.5.4.5=G63287510, C=ES, O=ANF Autoridad de Certificacion, OU=ANF CA Raiz, CN=ANF Secure Server Root CA
Certificate added: C=PL, O=Asseco Data Systems S.A., OU=Certum Certification Authority, CN=Certum EC-384 CA
Certificate added: C=PL, O=Asseco Data Systems S.A., OU=Certum Certification Authority, CN=Certum Trusted Root CA
4 new root certificates were added to your trust store.
Import process completed.

 

But still no luck. Same errors in log:

  

2021-10-11 19:43:06.186 Info HttpClient: HttpClientManager GET: https://api.themoviedb.org/3/configuration?api_key=f6bd687ffa63cd282b6ff2c6877f2669
2021-10-11 19:43:06.315 Info App: MovieDb settings: {"images":{"base_url":"http://image.tmdb.org/t/p/","secure_base_url":"https://image.tmdb.org/t/p/","backdrop_sizes":["w300","w780","w1280","original"],"logo_sizes":["w45","w92","w154","w185","w300","w500","original"],"poster_sizes":["w92","w154","w185","w342","w500","w780","original"],"profile_sizes":["w45","w185","h632","original"],"still_sizes":["w92","w185","w300","original"]},"change_keys":["adult","air_date","also_known_as","alternative_titles","biography","birthday","budget","cast","certifications","character_names","created_by","crew","deathday","episode","episode_number","episode_run_time","freebase_id","freebase_mid","general","genres","guest_stars","homepage","images","imdb_id","languages","name","network","origin_country","original_name","original_title","overview","parts","place_of_birth","plot_keywords","production_code","production_companies","production_countries","releases","revenue","runtime","season","season_number","season_regular","spoken_languages","status","tagline","title","translations","tvdb_id","tvrage_id","type","video","videos"]}
2021-10-11 19:43:06.898 Info HttpClient: HttpClientManager GET: https://image.tmdb.org/t/p/original/39lXk6ud6KiJgGbbWI2PUKS7y2.jpg
2021-10-11 19:43:07.050 Info HttpClient: HttpClientManager GET: https://image.tmdb.org/t/p/original/uvfYk8mwX1DrHoDcTyJLf83mFvl.jpg
2021-10-11 19:43:07.093 Info HttpClient: HttpClientManager GET: https://webservice.fanart.tv/v3/movies/319?api_key=5c6b04c68e904cfed1e6cbc9a9e683d4
2021-10-11 19:43:07.232 Error HttpClient: Error TrustFailure getting response from 
	*** Error Report ***
	Version: 4.7.0.13
	Command line: /usr/local/lib/emby-server/system/EmbyServer.exe -os freebsd -ffdetect /usr/local/lib/emby-server/bin/ffdetect -ffmpeg /usr/local/lib/emby-server/bin/ffmpeg -ffprobe /usr/local/lib/emby-server/bin/ffprobe -programdata /var/db/emby-server -updatepackage emby-server-freebsd12_{version}_amd64.pkg
	Operating system: Unix 12.2.7.0 
	Framework: Mono: 5.10.1.57 (5.10.1.57 Tue Sep 21 07:46:10 UTC 2021)
	OS/Process: X64/X64
	Runtime: usr/local/lib/mono/4.5/mscorlib.dll
	Processor count: 4
	Data path: /var/db/emby-server
	Application path: /usr/local/lib/emby-server/system
	System.Net.WebException: System.Net.WebException: Error: TrustFailure (One or more errors occurred.) ---> System.AggregateException: One or more errors occurred. ---> System.Security.Authentication.AuthenticationException: A call to SSPI failed, see inner exception. ---> Mono.Btls.MonoBtlsException: Ssl error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
	  at /wrkdirs/usr/ports/lang/mono/work/mono-5.10.1.57/external/boringssl/ssl/handshake_client.c:1132
	  at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00038] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status) [0x0003e] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	  at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus)
	  at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	  at Mono.Net.Security.AsyncProtocolRequest+<ProcessOperation>d__24.MoveNext () [0x000ff] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	--- End of stack trace from previous location where exception was thrown ---
	  at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw () [0x0000c] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess (System.Threading.Tasks.Task task) [0x0003e] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification (System.Threading.Tasks.Task task) [0x00028] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.ValidateEnd (System.Threading.Tasks.Task task) [0x00008] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.ConfiguredTaskAwaitable+ConfiguredTaskAwaiter.GetResult () [0x00000] in <0e06830de9a44394a7e366951eabca52>:0 
	  at Mono.Net.Security.AsyncProtocolRequest+<StartOperation>d__23.MoveNext () [0x0008b] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	   --- End of inner exception stack trace ---
	  at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw () [0x0000c] in <0e06830de9a44394a7e366951eabca52>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream+<ProcessAuthentication>d__47.MoveNext () [0x00254] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	   --- End of inner exception stack trace ---
	  at System.Threading.Tasks.Task.ThrowIfExceptional (System.Boolean includeTaskCanceledExceptions) [0x00011] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Threading.Tasks.Task.Wait (System.Int32 millisecondsTimeout, System.Threading.CancellationToken cancellationToken) [0x00043] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Threading.Tasks.Task.Wait () [0x00000] in <0e06830de9a44394a7e366951eabca52>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream.AuthenticateAsClient (System.String targetHost, System.Security.Cryptography.X509Certificates.X509CertificateCollection clientCertificates, System.Security.Authentication.SslProtocols enabledSslProtocols, System.Boolean checkCertificateRevocation) [0x0000d] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Byte[] buffer) [0x0007b] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	  at System.Net.WebConnection.CreateStream (System.Net.HttpWebRequest request) [0x00073] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	   --- End of inner exception stack trace ---
	  at System.Net.HttpWebRequest.EndGetResponse (System.IAsyncResult asyncResult) [0x00058] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	  at System.Threading.Tasks.TaskFactory`1[TResult].FromAsyncCoreLogic (System.IAsyncResult iar, System.Func`2[T,TResult] endFunction, System.Action`1[T] endAction, System.Threading.Tasks.Task`1[TResult] promise, System.Boolean requiresSynchronization) [0x0000f] in <0e06830de9a44394a7e366951eabca52>:0 
	Source: System
	TargetSite: System.Net.WebResponse EndGetResponse(System.IAsyncResult)
	InnerException: System.AggregateException: One or more errors occurred.
	Source: mscorlib
	TargetSite: Void ThrowIfExceptional(Boolean)
	  at System.Threading.Tasks.Task.ThrowIfExceptional (System.Boolean includeTaskCanceledExceptions) [0x00011] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Threading.Tasks.Task.Wait (System.Int32 millisecondsTimeout, System.Threading.CancellationToken cancellationToken) [0x00043] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Threading.Tasks.Task.Wait () [0x00000] in <0e06830de9a44394a7e366951eabca52>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream.AuthenticateAsClient (System.String targetHost, System.Security.Cryptography.X509Certificates.X509CertificateCollection clientCertificates, System.Security.Authentication.SslProtocols enabledSslProtocols, System.Boolean checkCertificateRevocation) [0x0000d] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Byte[] buffer) [0x0007b] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	  at System.Net.WebConnection.CreateStream (System.Net.HttpWebRequest request) [0x00073] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	InnerException: System.Security.Authentication.AuthenticationException: A call to SSPI failed, see inner exception.
	Source: mscorlib
	TargetSite: Void Throw()
	  at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw () [0x0000c] in <0e06830de9a44394a7e366951eabca52>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream+<ProcessAuthentication>d__47.MoveNext () [0x00254] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	InnerException: Mono.Btls.MonoBtlsException: Ssl error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
	  at /wrkdirs/usr/ports/lang/mono/work/mono-5.10.1.57/external/boringssl/ssl/handshake_client.c:1132
	Source: mscorlib
	TargetSite: Void Throw()
	  at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00038] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status) [0x0003e] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	  at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus)
	  at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	  at Mono.Net.Security.AsyncProtocolRequest+<ProcessOperation>d__24.MoveNext () [0x000ff] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	--- End of stack trace from previous location where exception was thrown ---
	  at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw () [0x0000c] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess (System.Threading.Tasks.Task task) [0x0003e] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification (System.Threading.Tasks.Task task) [0x00028] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.ValidateEnd (System.Threading.Tasks.Task task) [0x00008] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.ConfiguredTaskAwaitable+ConfiguredTaskAwaiter.GetResult () [0x00000] in <0e06830de9a44394a7e366951eabca52>:0 
	  at Mono.Net.Security.AsyncProtocolRequest+<StartOperation>d__23.MoveNext () [0x0008b] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	
2021-10-11 19:43:07.249 Error ProviderManager: FanartMovieImageProvider failed in GetImageInfos for type Movie
	*** Error Report ***
	Version: 4.7.0.13
	Command line: /usr/local/lib/emby-server/system/EmbyServer.exe -os freebsd -ffdetect /usr/local/lib/emby-server/bin/ffdetect -ffmpeg /usr/local/lib/emby-server/bin/ffmpeg -ffprobe /usr/local/lib/emby-server/bin/ffprobe -programdata /var/db/emby-server -updatepackage emby-server-freebsd12_{version}_amd64.pkg
	Operating system: Unix 12.2.7.0 
	Framework: Mono: 5.10.1.57 (5.10.1.57 Tue Sep 21 07:46:10 UTC 2021)
	OS/Process: X64/X64
	Runtime: usr/local/lib/mono/4.5/mscorlib.dll
	Processor count: 4
	Data path: /var/db/emby-server
	Application path: /usr/local/lib/emby-server/system
	MediaBrowser.Model.Net.HttpException: MediaBrowser.Model.Net.HttpException: Error: TrustFailure (One or more errors occurred.) ---> System.Net.WebException: Error: TrustFailure (One or more errors occurred.) ---> System.AggregateException: One or more errors occurred. ---> System.Security.Authentication.AuthenticationException: A call to SSPI failed, see inner exception. ---> Mono.Btls.MonoBtlsException: Ssl error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
	  at /wrkdirs/usr/ports/lang/mono/work/mono-5.10.1.57/external/boringssl/ssl/handshake_client.c:1132
	  at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00038] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status) [0x0003e] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	  at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus)
	  at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	  at Mono.Net.Security.AsyncProtocolRequest+<ProcessOperation>d__24.MoveNext () [0x000ff] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	--- End of stack trace from previous location where exception was thrown ---
	  at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw () [0x0000c] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess (System.Threading.Tasks.Task task) [0x0003e] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification (System.Threading.Tasks.Task task) [0x00028] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.ValidateEnd (System.Threading.Tasks.Task task) [0x00008] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.ConfiguredTaskAwaitable+ConfiguredTaskAwaiter.GetResult () [0x00000] in <0e06830de9a44394a7e366951eabca52>:0 
	  at Mono.Net.Security.AsyncProtocolRequest+<StartOperation>d__23.MoveNext () [0x0008b] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	   --- End of inner exception stack trace ---
	  at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw () [0x0000c] in <0e06830de9a44394a7e366951eabca52>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream+<ProcessAuthentication>d__47.MoveNext () [0x00254] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	   --- End of inner exception stack trace ---
	  at System.Threading.Tasks.Task.ThrowIfExceptional (System.Boolean includeTaskCanceledExceptions) [0x00011] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Threading.Tasks.Task.Wait (System.Int32 millisecondsTimeout, System.Threading.CancellationToken cancellationToken) [0x00043] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Threading.Tasks.Task.Wait () [0x00000] in <0e06830de9a44394a7e366951eabca52>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream.AuthenticateAsClient (System.String targetHost, System.Security.Cryptography.X509Certificates.X509CertificateCollection clientCertificates, System.Security.Authentication.SslProtocols enabledSslProtocols, System.Boolean checkCertificateRevocation) [0x0000d] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Byte[] buffer) [0x0007b] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	  at System.Net.WebConnection.CreateStream (System.Net.HttpWebRequest request) [0x00073] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	   --- End of inner exception stack trace ---
	  at System.Net.HttpWebRequest.EndGetResponse (System.IAsyncResult asyncResult) [0x00058] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	  at System.Threading.Tasks.TaskFactory`1[TResult].FromAsyncCoreLogic (System.IAsyncResult iar, System.Func`2[T,TResult] endFunction, System.Action`1[T] endAction, System.Threading.Tasks.Task`1[TResult] promise, System.Boolean requiresSynchronization) [0x0000f] in <0e06830de9a44394a7e366951eabca52>:0 
	   --- End of inner exception stack trace ---
	  at Emby.Server.Implementations.HttpClientManager.HttpClientManager+<SendAsyncInternal>d__19.MoveNext () [0x00858] in <8f512a7766cb4a53a474d303f444be73>:0 
	--- End of stack trace from previous location where exception was thrown ---
	  at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw () [0x0000c] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess (System.Threading.Tasks.Task task) [0x0003e] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification (System.Threading.Tasks.Task task) [0x00028] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.ValidateEnd (System.Threading.Tasks.Task task) [0x00008] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.ConfiguredTaskAwaitable`1+ConfiguredTaskAwaiter[TResult].GetResult () [0x00000] in <0e06830de9a44394a7e366951eabca52>:0 
	  at Emby.Server.Implementations.HttpClientManager.HttpClientManager+<SendAsync>d__16.MoveNext () [0x0009e] in <8f512a7766cb4a53a474d303f444be73>:0 
	--- End of stack trace from previous location where exception was thrown ---
	  at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw () [0x0000c] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess (System.Threading.Tasks.Task task) [0x0003e] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification (System.Threading.Tasks.Task task) [0x00028] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.ValidateEnd (System.Threading.Tasks.Task task) [0x00008] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.ConfiguredTaskAwaitable`1+ConfiguredTaskAwaiter[TResult].GetResult () [0x00000] in <0e06830de9a44394a7e366951eabca52>:0 
	  at Fanart.FanartMovieImageProvider+<DownloadMovieJson>d__25.MoveNext () [0x00282] in <e3b9ed5836a94e07ac62361c1628619f>:0 
	--- End of stack trace from previous location where exception was thrown ---
	  at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw () [0x0000c] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess (System.Threading.Tasks.Task task) [0x0003e] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification (System.Threading.Tasks.Task task) [0x00028] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.ValidateEnd (System.Threading.Tasks.Task task) [0x00008] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.ConfiguredTaskAwaitable+ConfiguredTaskAwaiter.GetResult () [0x00000] in <0e06830de9a44394a7e366951eabca52>:0 
	  at Fanart.FanartMovieImageProvider+<GetImages>d__14.MoveNext () [0x000ec] in <e3b9ed5836a94e07ac62361c1628619f>:0 
	--- End of stack trace from previous location where exception was thrown ---
	  at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw () [0x0000c] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess (System.Threading.Tasks.Task task) [0x0003e] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification (System.Threading.Tasks.Task task) [0x00028] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.ValidateEnd (System.Threading.Tasks.Task task) [0x00008] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.ConfiguredTaskAwaitable`1+ConfiguredTaskAwaiter[TResult].GetResult () [0x00000] in <0e06830de9a44394a7e366951eabca52>:0 
	  at MediaBrowser.Providers.Manager.ProviderManager+<GetImages>d__39.MoveNext () [0x000a6] in <e26d1f7b157a42ebbc1e8c5ea708bf1e>:0 
	Source: mscorlib
	TargetSite: Void Throw()
	InnerException: System.Net.WebException: Error: TrustFailure (One or more errors occurred.)
	Source: System
	TargetSite: System.Net.WebResponse EndGetResponse(System.IAsyncResult)
	  at System.Net.HttpWebRequest.EndGetResponse (System.IAsyncResult asyncResult) [0x00058] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	  at System.Threading.Tasks.TaskFactory`1[TResult].FromAsyncCoreLogic (System.IAsyncResult iar, System.Func`2[T,TResult] endFunction, System.Action`1[T] endAction, System.Threading.Tasks.Task`1[TResult] promise, System.Boolean requiresSynchronization) [0x0000f] in <0e06830de9a44394a7e366951eabca52>:0 
	InnerException: System.AggregateException: One or more errors occurred.
	Source: mscorlib
	TargetSite: Void ThrowIfExceptional(Boolean)
	  at System.Threading.Tasks.Task.ThrowIfExceptional (System.Boolean includeTaskCanceledExceptions) [0x00011] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Threading.Tasks.Task.Wait (System.Int32 millisecondsTimeout, System.Threading.CancellationToken cancellationToken) [0x00043] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Threading.Tasks.Task.Wait () [0x00000] in <0e06830de9a44394a7e366951eabca52>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream.AuthenticateAsClient (System.String targetHost, System.Security.Cryptography.X509Certificates.X509CertificateCollection clientCertificates, System.Security.Authentication.SslProtocols enabledSslProtocols, System.Boolean checkCertificateRevocation) [0x0000d] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Byte[] buffer) [0x0007b] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	  at System.Net.WebConnection.CreateStream (System.Net.HttpWebRequest request) [0x00073] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	InnerException: System.Security.Authentication.AuthenticationException: A call to SSPI failed, see inner exception.
	Source: mscorlib
	TargetSite: Void Throw()
	  at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw () [0x0000c] in <0e06830de9a44394a7e366951eabca52>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream+<ProcessAuthentication>d__47.MoveNext () [0x00254] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	InnerException: Mono.Btls.MonoBtlsException: Ssl error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
	  at /wrkdirs/usr/ports/lang/mono/work/mono-5.10.1.57/external/boringssl/ssl/handshake_client.c:1132
	Source: mscorlib
	TargetSite: Void Throw()
	  at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00038] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status) [0x0003e] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	  at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus)
	  at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	  at Mono.Net.Security.AsyncProtocolRequest+<ProcessOperation>d__24.MoveNext () [0x000ff] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0 
	--- End of stack trace from previous location where exception was thrown ---
	  at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw () [0x0000c] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess (System.Threading.Tasks.Task task) [0x0003e] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification (System.Threading.Tasks.Task task) [0x00028] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.TaskAwaiter.ValidateEnd (System.Threading.Tasks.Task task) [0x00008] in <0e06830de9a44394a7e366951eabca52>:0 
	  at System.Runtime.CompilerServices.ConfiguredTaskAwaitable+ConfiguredTaskAwaiter.GetResult () [0x00000] in <0e06830de9a44394a7e366951eabca52>:0 
	  at Mono.Net.Security.AsyncProtocolRequest+<StartOperation>d__23.MoveNext () [0x0008b] in <b3922b7d60404fa9ae645f1fb97f5b6b>:0

 

Link to comment
Share on other sites
dml33

dml33   23

Posted
Posted

Solved!

The problem is related to Fanart and its Let's Encrypt certificate. Its DST_Root_CA_X3 cert has expired at the end of september and the ISRG Root X1 certificate validates it since October 2021. There are several posts related to it.

To solve it in FreeBSD is not as easy as in Linux. In fact, I did many, many things, but based in this TrueNAS article. I can summarize the steps as follows:

Install latest beta Emby 4.7.0.13 with mono 5.20 as stated before. It seems (but I cannot confirm, since everything is quite confusing) that mono 5.10 could have some issues updating the certificate repo and that is solved in mono 5.20. Besides, mono 6.8 does not work at all at retrieving any metadata. @Luke, please, take a look at it, just in case is Emby-mono compatibility.

Perform the necessary certificate update: 

cert-sync /usr/local/share/certs/ca-root-nss.crt

The thing is that the former DST Root CA X3 is (still) in that file. We have to substitute it with the new ISRG Root X1 certificate. Ideally, this should be fixed one day, but I am not sure if only in mono, in the ca-root-nss certificate (latest cacert.pem, for example, is from 30th of Sept, which is just before the change), in both...

Download new ISRG Root X1 

cd /usr/local/share/certs/
fetch https://letsencrypt.org/certs/isrg-root-x1-cross-signed.pem
cat isrg-root-x1-cross-signed.pem >> ca-root-nss.crt
cert-sync /usr/local/share/certs/ca-root-nss.crt

Now, we have the new ISRG Root X1 too, but we have to get rid of the old DST Root CA X3: 

cd /usr/local/mono/new-certs/Trust
grep -i "DST Root CA X3" *

In my case: 

2e5ac55d.0:        Issuer: O=Digital Signature Trust Co., CN=DST Root CA X3
2e5ac55d.0:        Subject: O=Digital Signature Trust Co., CN=DST Root CA X3

Then, move it to somewhere else (just in case): 

mv 2e5ac55d.0 ~/

Now, reboot the jail (including Emby server) and, perfect!, refresh metadata and everything is fine again: fanart images are retrieved, collections are built up...

I hope it does not break again, soon...

  • Like 2
Link to comment
Share on other sites
Mael

Mael   5

Posted
Posted
On 10/12/2021 at 6:16 AM, dml33 said:

Solved!

The problem is related to Fanart and its Let's Encrypt certificate. Its DST_Root_CA_X3 cert has expired at the end of september and the ISRG Root X1 certificate validates it since October 2021. There are several posts related to it.

 

Thanks! This fixed my Problem

@Luke- What's the long term fix for this issue? Will this be resolved with an update of the Emby plugin, or will we eventually just need to reinstall emby in a new jail when 4.7 is officially released? It feels like the later, but wanted to check. 

Link to comment
Share on other sites
Luke Emby Team

Luke   37006

Posted
Posted
7 hours ago, Mael said:

 

Thanks! This fixed my Problem

@Luke- What's the long term fix for this issue? Will this be resolved with an update of the Emby plugin, or will we eventually just need to reinstall emby in a new jail when 4.7 is officially released? It feels like the later, but wanted to check. 

Hopefully it will. The next plugin release will bump the mono dependency to a higher version.

Link to comment
Share on other sites
  • 1 month later...
Mael

Mael   5

Posted
Posted

Is this still expected to be fixed in 4.7? When is that scheduled for general release? I fixed this by installing a beta version of 4.7 and following the manual steps outlined in the post I linked to earlier. Ideally this could be fixed by installing a GA version of Emby server.  

Link to comment
Share on other sites
Luke Emby Team

Luke   37006

Posted
Posted
49 minutes ago, Mael said:

Is this still expected to be fixed in 4.7? When is that scheduled for general release? I fixed this by installing a beta version of 4.7 and following the manual steps outlined in the post I linked to earlier. Ideally this could be fixed by installing a GA version of Emby server.  

It should be good in the 4.6.7 stable release.

  • Like 1
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing
×
×
  • Create New...