downloading subtitle with opensubtitle doesn't work

[V@l123 3]

is there any special carracters that need to be avoid in password ? or \

[Luke 37230]

8 hours ago, V@l123 said:

is there any special carracters that need to be avoid in password ? or \

Not that I'm aware of, no.

[V@l123 3]

I tried to re install emby server but the problem is still the same

[Luke 37230]

On 2/20/2022 at 5:51 AM, V@l123 said:

I tried to re install emby server but the problem is still the same

Hi, did you try changing your open subtitle password and then updating that in emby server?

[V@l123 3]

yes multiple time

[Luke 37230]

On 3/3/2022 at 12:45 PM, V@l123 said:

yes multiple time

Where exactly did you change your password?

[V@l123 3]

First on opensubtitle website and then in emby in the section regarding opensubitle

[Luke 37230]

17 hours ago, V@l123 said:

First on opensubtitle website and then in emby in the section regarding opensubitle

What open subtitle website exactly? What is the address?

[V@l123 3]

the address if opensubtitle website is https://www.opensubtitles.org/

Do you need something else ?

[rbjtech 4324]

This is a really odd one - so you can login to opensubtitles.org (NOT the same username/password as opensubtitles.com btw).

Are you using the same server/workstation as Emby is running on to do the browser login/check - ie, it is the same source IP address ?

I would reset the password again to something silly like 'emby1234' and then ensure you TYPE that into the Emby configuration (don't cut and paste), save and then try again.

There is no issue here for other users, myself included - so it has to be either your account/password with opensubtitles.org OR emby itself cannot reach api.opensubtitles.org for some reason.    

[V@l123 3]

8 hours ago, rbjtech said:

This is a really odd one - so you can login to opensubtitles.org (NOT the same username/password as opensubtitles.com btw).

yes and i also import my account on opensubtitle.com

 

8 hours ago, rbjtech said:

Are you using the same server/workstation as Emby is running on to do the browser login/check - ie, it is the same source IP address ?

I would reset the password again to something silly like 'emby1234' and then ensure you TYPE that into the Emby configuration (don't cut and paste), save and then try again.

The request come from the same ip address (and i can see in the log that the API use .org address)

I reset my password and type it in emby the result is still the same (not working  ) but the error log is a little bit different (see attachement)

8 hours ago, rbjtech said:

 

 

log_opensub_01042022.txt

[BillOatman 502]

Doesn't look like a config issue.  

Quote

System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.

This in theory should fix it.  Probably can add it right in the plugin code itself.

ServicePointManager.ServerCertificateValidationCallback += (o, c, ch, er) => true;

 

 

[Happy2Play 8351]

I guess the real question is why OP's system is throwing the error?  Have you modified the system cipher suites as this looks like system error to me.

	System.Net.Http.HttpRequestException: System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
	 ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.

But have verified they do allow weak ciphers.

A test from my Windows 11.  But get same results testing on Windows 10.

2022-04-01 19:30:21.470 Info HttpClient: POST https://api.opensubtitles.org/xml-rpc
2022-04-01 19:30:21.930 Info SubtitleManager: Saving subtitles to C:\Users\Media\Desktop\Videos\Movies BIF Test\JT LeRoy (2019)\JT LeRoy (2019).en.srt

2022-04-01 19:30:24.869 Info HttpClient: POST https://api.opensubtitles.org/xml-rpc
2022-04-01 19:30:25.358 Info SubtitleManager: Saving subtitles to C:\Users\Media\Desktop\Videos\Movies BIF Test\The Clovehitch Killer (2018)\The Clovehitch Killer (2018).en.srt

 

[V@l123 3]

No i didn't change the cipher suite (or i'm not aware off).

How can I check the list? I found a power shell command but I'm not sure that what I need)

[V@l123 3]

6 hours ago, BillOatman said:

This in theory should fix it.  Probably can add it right in the plugin code itself.

ServicePointManager.ServerCertificateValidationCallback += (o, c, ch, er) => true;

 

How to edit the plugin to test it?

[BillOatman 502]

6 hours ago, V@l123 said:

How to edit the plugin to test it?

It doesn't seem to be open source.  So generally speaking, you can't,  The author (Emby developers I assume) would need to.

[Luke 37230]

Are you running on windows 7?

[V@l123 3]

14 minutes ago, Luke said:

Are you running on windows 7?

No on windows 10

[Luke 37230]

11 minutes ago, V@l123 said:

No on windows 10

Is Windows fully up to date?

[V@l123 3]

51 minutes ago, Luke said:

Windows fully up to date?

I just checked and it's fully up to date 

 

[Q-Droid 670]

Can you try a few things from Windows PowerShell? Do these on the same machine running Emby server.

In PowerShell wget and curl are aliases for iwr, they do the same thing so try:

iwr https://api.opensubtitles.org/xml-rpc

It also looks like curl.exe is now built-in to Windows 10? Not the same as the PS alias for iwr and it also works in the CMD window. So you can try:

curl.exe -v https://api.opensubtitles.org/xml-rpc

There should be more verbose output from the last command.

Edited April 2, 2022 by Q-Droid

[V@l123 3]

15 hours ago, Q-Droid said:

iwr https://api.opensubtitles.org/xml-rpc

The result from PS

 

iwr https://api.opensubtitles.org/xml-rpc
iwr : The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.
At line:1 char:1
+ iwr https://api.opensubtitles.org/xml-rpc
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidOperation: (System.Net.HttpWebRequest:HttpWebRequest) [Invoke-WebRequest], WebExc
   eption
    + FullyQualifiedErrorId : WebCmdletWebResponseException,Microsoft.PowerShell.Commands.InvokeWebRequestCommand

 

and from CMD  

16 hours ago, Q-Droid said:

curl.exe -v https://api.opensubtitles.org/xml-rpc

>curl.exe -v https://api.opensubtitles.org/xml-rpc
*   Trying 92.240.234.122:443...
* Connected to api.opensubtitles.org (92.240.234.122) port 443 (#0)
* schannel: disabled automatic use of client certificate
* schannel: ALPN, offering http/1.1
* schannel: next InitializeSecurityContext failed: CRYPT_E_REVOKED (0x80092010) - The certificate is revoked.
* Closing connection 0
curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_REVOKED (0x80092010) - The certificate is revoked.
 

 

[Q-Droid 670]

This is a bit weird. Your name resolution is sending your connection to an IP (92.240.234.122) that has an expired cert:

        Issuer: C=BE, O=GlobalSign nv-sa, CN=AlphaSSL CA - SHA256 - G2
        Validity
            Not Before: Feb 24 06:06:06 2020 GMT
            Not After : Feb 24 06:06:06 2022 GMT
        Subject: OU=Domain Control Validated, CN=*.opensubtitles.org

Even though the current DNS should resolve to Cloudflare:

Non-authoritative answer:
Name:   opensubtitles.org
Address: 172.64.131.37
Name:   opensubtitles.org
Address: 172.64.130.37
Name:   opensubtitles.org
Address: 2606:4700:e2::ac40:8325
Name:   opensubtitles.org
Address: 2606:4700:e2::ac40:8225
 

Do you have a hard coded hosts entry for opensubtitles on your machine that resolves to the old IP?

ping api.opensubtitles.org

nslookup api.opensubtitles.org

 

[ebr 14958]

I remember seeing a post recently that if your certificate is one of the Let's Encrypt ones with an expired certificate, you cannot connect to opensubtitles.org...

[V@l123 3]

7 hours ago, Q-Droid said:

Do you have a hard coded hosts entry for opensubtitles on your machine that resolves to the old IP?

ping api.opensubtitles.org

nslookup api.opensubtitles.org

 

No i don't have hard coded host entry

 

here is the result of ping and snlookup

ping api.opensubtitles.org

Pinging api.opensubtitles.org [92.240.234.122] with 32 bytes of data:
Reply from 92.240.234.122: bytes=32 time=45ms TTL=117
Reply from 92.240.234.122: bytes=32 time=41ms TTL=117
Reply from 92.240.234.122: bytes=32 time=42ms TTL=117
Reply from 92.240.234.122: bytes=32 time=41ms TTL=117

Ping statistics for 92.240.234.122:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 41ms, Maximum = 45ms, Average = 42ms

C:\Users\Val_multi>

C:\Users\Val_multi>nslookup api.opensubtitles.org
Server:  lan.home
Address:  192.168.1.1

Non-authoritative answer:
Name:    api.opensubtitles.org
Addresses:  2606:4700:3032::6815:164b
          2606:4700:3032::ac43:cb72
          172.67.203.114
          104.21.22.75