Jump to content

Images not found intermittantly

Luticus

By Luticus
in Linux

 Share

Recommended Posts

Luticus

Luticus 13

Posted
  • Author
Posted (edited)

It seems specific to TheMovieDB from what I can tell. @Natilus13 In my case I don't think it's a permissions issue as some pictures from some providers do work, and sometimes all pictures work (I think). I would think if it were a permissions issue that no images would work at any point. It's a very strange issue. Also in my case my server is a Debian machine that is dedicated to Emby. It runs nothing else but Emby and the underlying OS and no changes are made to it really except for security patches. Certainly not permissions to shares or anything like that. So unfortunately, I don't think this is going to help me out.

Edited by Luticus
Link to comment
Share on other sites
  • 2 weeks later...
Luke Emby Team

Luke 38342

Posted
Posted
On 12/30/2022 at 2:26 PM, Slennox said:

I experience the same exact issue... 

Latest Debian 11.

Hi there, can you please describe the issue that you're having? Thanks.

Link to comment
Share on other sites
  • 3 weeks later...
Luticus

Luticus 13

Posted
  • Author
Posted

I'm still seeing the problem. I think it's mostly the TheMovieDB now. Other sources seem to work but occasionally I see something that's broken because the only working source is the movie db. Still not sure what the cause is, and I'm not even 100% sure what the true scope is as it's intermittent. I know that this all used to work fine, but unfortunately I'm not entirely sure when that changed, except to say sometime last year around when I made the original post.

I'm just kind of living with it for now.  :)

Link to comment
Share on other sites
Neminem

Neminem 589

Posted
Posted

Hmm look at this, faced with the same issue.

did google blacklist them ? or have they moved something.

If i do a nslookup image.tmdb.org

I get this

image.png.88d277f5955ccc2298d2a61af5667adb.png

Try to access via web browser.

SSL Certificate look bad or they dont have http to https conversion setup.

It might be me barking up the wrong tree.

image.thumb.png.01e23707a05f7d10b9e91c7fb4cca52b.png

 

Link to comment
Share on other sites
Happy2Play

Happy2Play 9025

Posted
Posted (edited)
1 hour ago, jaycedk said:

did google blacklist them ? or have they moved something.

Possibly or Geo-location 

C:\Windows\System32>nslookup image.tmdb.org
Server:  dns.google
Address:  8.8.8.8

Non-authoritative answer:
Name:    dsag3w1du2cu2.cloudfront.net
Addresses:  2600:9000:200f:9800:14:41bb:de80:93a1
          2600:9000:200f:8600:14:41bb:de80:93a1
          2600:9000:200f:d200:14:41bb:de80:93a1
          2600:9000:200f:e400:14:41bb:de80:93a1
          2600:9000:200f:ac00:14:41bb:de80:93a1
          2600:9000:200f:7600:14:41bb:de80:93a1
          2600:9000:200f:fa00:14:41bb:de80:93a1
          2600:9000:200f:3800:14:41bb:de80:93a1
          143.244.49.183
Aliases:  image.tmdb.org

 

ISP DNS 

C:\Windows\System32>nslookup image.tmdb.org
Server:  UnKnown
Address:  192.168.151.1

Non-authoritative answer:
Name:    dsag3w1du2cu2.cloudfront.net
Addresses:  2600:9000:234d:e00:14:41bb:de80:93a1
          2600:9000:234d:bc00:14:41bb:de80:93a1
          2600:9000:234d:9400:14:41bb:de80:93a1
          2600:9000:234d:ea00:14:41bb:de80:93a1
          2600:9000:234d:7a00:14:41bb:de80:93a1
          2600:9000:234d:800:14:41bb:de80:93a1
          2600:9000:234d:8c00:14:41bb:de80:93a1
          2600:9000:234d:5200:14:41bb:de80:93a1
          18.65.229.63
          18.65.229.80
          18.65.229.28
          18.65.229.107
Aliases:  image.tmdb.org

 

Edited by Happy2Play
Link to comment
Share on other sites
  • 2 months later...
bo83_emby

bo83_emby 3

Posted
Posted

Well ... not for me. My synology / DSM6 was already set for these dns'es and still getting these errors for months. 

Version: 4.7.11.0
Command line: /volume1/@appstore/EmbyServer/system/EmbyServer.dll -programdata /volume1/Emby -ffdetect /var/packages/EmbyServer/target/bin/ffdetect -ffmpeg /var/packages/EmbyServer/target/bin/ffmpeg -ffprobe /var/packages/EmbyServer/target/bin/ffprobe -nolocalportconfig -ignore_vaapi_enabled_flag -pidfile /volume1/Emby/EmbyServer.pid -defaultdirectory /volume1/Public -updatepackage emby-server-synology_{version}_x86_64.spk -noautorunwebapp
Operating system: Linux version 3.10.105 (root@build1) (gcc version 4.9.3 20150311 (prerelease) (crosstool-NG 1.20.0) ) #25556 SMP Sat Aug 28 02:14:22 CST 2021
Framework: .NET 6.0.8
OS/Process: x64/x64
Runtime: volume1/@appstore/EmbyServer/system/System.Private.CoreLib.dll
Processor count: 4
Data path: /volume1/Emby
Application path: /volume1/@appstore/EmbyServer/system
System.Net.Http.HttpRequestException: System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid
at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception)
at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)
at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm)
at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)
--- End of inner exception stack trace ---
at Emby.Server.Implementations.HttpClientManager.CoreHttpClientManager.SendAsyncInternal(HttpRequestOptions options, String httpMethod)
at Emby.Server.Implementations.HttpClientManager.CoreHttpClientManager.SendAsync(HttpRequestOptions options, String httpMethod)
at Emby.Providers.Manager.ProviderManager.SaveImageFromRemoteUrl(BaseItem item, LibraryOptions libraryOptions, String url, ImageType type, Nullable`1 imageIndex, Boolean isFallbackImage, CancellationToken cancellationToken)
at Emby.Server.Implementations.Library.LibraryManager.ConvertImageToLocal(BaseItem item, ItemImageInfo image, Int32 imageIndex, CancellationToken cancellationToken)
at Emby.Drawing.ImageProcessor.ProcessImage(ImageProcessingOptions options, CancellationToken cancellationToken)
at Emby.Api.Images.ImageService.GetImage(ImageRequest request, Int64 itemId, BaseItem item, Boolean isHeadRequest)
at Emby.Server.Implementations.Services.ServiceController.GetTaskResult(Task task)
at Emby.Server.Implementations.Services.ServiceHandler.ProcessRequestAsync(HttpListenerHost appHost, IRequest httpReq, IResponse httpRes, RestPath restPath, String responseContentType, CancellationToken cancellationToken)
at Emby.Server.Implementations.HttpServer.HttpListenerHost.RequestHandler(IRequest httpReq, ReadOnlyMemory`1 urlString, ReadOnlyMemory`1 localPath, CancellationToken cancellationToken)
Source: System.Net.Http
TargetSite: Void MoveNext()
InnerException: System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid
Source: System.Private.CoreLib
TargetSite: Void Throw()
at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception)
at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)
at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm)
at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)
2023-04-10 14:16:44.357 Error HttpClient: Error getting response from https://image.tmdb.org/t/p/original/lNkT2VPAyaD301a6nPCYTDMPlOY.jpg
*** Error Report ***

 

Link to comment
Share on other sites
Happy2Play

Happy2Play 9025

Posted
Posted
10 hours ago, bo83_emby said:

Well ... not for me. My synology / DSM6 was already set for these dns'es and still getting these errors for months. 

Version: 4.7.11.0
Command line: /volume1/@appstore/EmbyServer/system/EmbyServer.dll -programdata /volume1/Emby -ffdetect /var/packages/EmbyServer/target/bin/ffdetect -ffmpeg /var/packages/EmbyServer/target/bin/ffmpeg -ffprobe /var/packages/EmbyServer/target/bin/ffprobe -nolocalportconfig -ignore_vaapi_enabled_flag -pidfile /volume1/Emby/EmbyServer.pid -defaultdirectory /volume1/Public -updatepackage emby-server-synology_{version}_x86_64.spk -noautorunwebapp
Operating system: Linux version 3.10.105 (root@build1) (gcc version 4.9.3 20150311 (prerelease) (crosstool-NG 1.20.0) ) #25556 SMP Sat Aug 28 02:14:22 CST 2021
Framework: .NET 6.0.8
OS/Process: x64/x64
Runtime: volume1/@appstore/EmbyServer/system/System.Private.CoreLib.dll
Processor count: 4
Data path: /volume1/Emby
Application path: /volume1/@appstore/EmbyServer/system
System.Net.Http.HttpRequestException: System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid
at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception)
at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)
at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm)
at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)
--- End of inner exception stack trace ---
at Emby.Server.Implementations.HttpClientManager.CoreHttpClientManager.SendAsyncInternal(HttpRequestOptions options, String httpMethod)
at Emby.Server.Implementations.HttpClientManager.CoreHttpClientManager.SendAsync(HttpRequestOptions options, String httpMethod)
at Emby.Providers.Manager.ProviderManager.SaveImageFromRemoteUrl(BaseItem item, LibraryOptions libraryOptions, String url, ImageType type, Nullable`1 imageIndex, Boolean isFallbackImage, CancellationToken cancellationToken)
at Emby.Server.Implementations.Library.LibraryManager.ConvertImageToLocal(BaseItem item, ItemImageInfo image, Int32 imageIndex, CancellationToken cancellationToken)
at Emby.Drawing.ImageProcessor.ProcessImage(ImageProcessingOptions options, CancellationToken cancellationToken)
at Emby.Api.Images.ImageService.GetImage(ImageRequest request, Int64 itemId, BaseItem item, Boolean isHeadRequest)
at Emby.Server.Implementations.Services.ServiceController.GetTaskResult(Task task)
at Emby.Server.Implementations.Services.ServiceHandler.ProcessRequestAsync(HttpListenerHost appHost, IRequest httpReq, IResponse httpRes, RestPath restPath, String responseContentType, CancellationToken cancellationToken)
at Emby.Server.Implementations.HttpServer.HttpListenerHost.RequestHandler(IRequest httpReq, ReadOnlyMemory`1 urlString, ReadOnlyMemory`1 localPath, CancellationToken cancellationToken)
Source: System.Net.Http
TargetSite: Void MoveNext()
InnerException: System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid
Source: System.Private.CoreLib
TargetSite: Void Throw()
at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception)
at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)
at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm)
at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)
2023-04-10 14:16:44.357 Error HttpClient: Error getting response from https://image.tmdb.org/t/p/original/lNkT2VPAyaD301a6nPCYTDMPlOY.jpg
*** Error Report ***

 

Are you using a VPN?

Have you validated your system datetime? 

NotTimeValid

 

Link to comment
Share on other sites
bo83_emby

bo83_emby 3

Posted
Posted

One important detail i just discovered.

This happens only if I access the server through the external ip through the reverse proxy (HAproxy)

If I access through the LAN then i don't have the issue and even all images will download/cached without problems. 

Link to comment
Share on other sites
bo83_emby

bo83_emby 3

Posted
Posted

The errors show up in logs even if i trigger from LAN missing library metadata refresh. And it's not only images but also other info links.

Link to comment
Share on other sites
Luke Emby Team

Luke 38342

Posted
Posted
On 4/10/2023 at 8:34 AM, bo83_emby said:

Well ... not for me. My synology / DSM6 was already set for these dns'es and still getting these errors for months. 

Version: 4.7.11.0
Command line: /volume1/@appstore/EmbyServer/system/EmbyServer.dll -programdata /volume1/Emby -ffdetect /var/packages/EmbyServer/target/bin/ffdetect -ffmpeg /var/packages/EmbyServer/target/bin/ffmpeg -ffprobe /var/packages/EmbyServer/target/bin/ffprobe -nolocalportconfig -ignore_vaapi_enabled_flag -pidfile /volume1/Emby/EmbyServer.pid -defaultdirectory /volume1/Public -updatepackage emby-server-synology_{version}_x86_64.spk -noautorunwebapp
Operating system: Linux version 3.10.105 (root@build1) (gcc version 4.9.3 20150311 (prerelease) (crosstool-NG 1.20.0) ) #25556 SMP Sat Aug 28 02:14:22 CST 2021
Framework: .NET 6.0.8
OS/Process: x64/x64
Runtime: volume1/@appstore/EmbyServer/system/System.Private.CoreLib.dll
Processor count: 4
Data path: /volume1/Emby
Application path: /volume1/@appstore/EmbyServer/system
System.Net.Http.HttpRequestException: System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid
at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception)
at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)
at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm)
at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)
--- End of inner exception stack trace ---
at Emby.Server.Implementations.HttpClientManager.CoreHttpClientManager.SendAsyncInternal(HttpRequestOptions options, String httpMethod)
at Emby.Server.Implementations.HttpClientManager.CoreHttpClientManager.SendAsync(HttpRequestOptions options, String httpMethod)
at Emby.Providers.Manager.ProviderManager.SaveImageFromRemoteUrl(BaseItem item, LibraryOptions libraryOptions, String url, ImageType type, Nullable`1 imageIndex, Boolean isFallbackImage, CancellationToken cancellationToken)
at Emby.Server.Implementations.Library.LibraryManager.ConvertImageToLocal(BaseItem item, ItemImageInfo image, Int32 imageIndex, CancellationToken cancellationToken)
at Emby.Drawing.ImageProcessor.ProcessImage(ImageProcessingOptions options, CancellationToken cancellationToken)
at Emby.Api.Images.ImageService.GetImage(ImageRequest request, Int64 itemId, BaseItem item, Boolean isHeadRequest)
at Emby.Server.Implementations.Services.ServiceController.GetTaskResult(Task task)
at Emby.Server.Implementations.Services.ServiceHandler.ProcessRequestAsync(HttpListenerHost appHost, IRequest httpReq, IResponse httpRes, RestPath restPath, String responseContentType, CancellationToken cancellationToken)
at Emby.Server.Implementations.HttpServer.HttpListenerHost.RequestHandler(IRequest httpReq, ReadOnlyMemory`1 urlString, ReadOnlyMemory`1 localPath, CancellationToken cancellationToken)
Source: System.Net.Http
TargetSite: Void MoveNext()
InnerException: System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid
Source: System.Private.CoreLib
TargetSite: Void Throw()
at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception)
at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)
at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm)
at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)
2023-04-10 14:16:44.357 Error HttpClient: Error getting response from https://image.tmdb.org/t/p/original/lNkT2VPAyaD301a6nPCYTDMPlOY.jpg
*** Error Report ***

 

What DNS entries did you add? Maybe try resetting those back to default?

Link to comment
Share on other sites
bo83_emby

bo83_emby 3

Posted
Posted

The cloudflare ones. It's not an error because of not finding the url, it's some kind of ssl bug.

"InnerException: System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid"

 

Link to comment
Share on other sites
bo83_emby

bo83_emby 3

Posted
Posted 
2023-04-12 19:43:46.243 Info HttpClient: GET https://image.tmdb.org/t/p/original/kuFyGa2HZB7hAQTUn3WKlgKAVjm.jpg
2023-04-12 19:43:46.244 Info HttpClient: GET https://image.tmdb.org/t/p/original/sM9DG77jUjmIsW09li5qGX80Pc2.jpg
2023-04-12 19:43:46.248 Info HttpClient: GET https://image.tmdb.org/t/p/original/gYzfVDwWI6A955MEtX1ZqfZIuN2.jpg
2023-04-12 19:43:46.322 Info HttpClient: GET https://image.tmdb.org/t/p/original/jy660w9HAkjcvDQn274N80RUW2Q.jpg
2023-04-12 19:43:46.393 Info HttpClient: GET https://image.tmdb.org/t/p/original/pAJVhACBtGVARuj9EGq3TJYovWa.jpg
2023-04-12 19:43:46.394 Info HttpClient: GET https://image.tmdb.org/t/p/original/4jBTetCltbdL921Cj9DO8nLJplt.jpg
2023-04-12 19:43:46.420 Info HttpClient: GET https://image.tmdb.org/t/p/original/zh1WAlju5bn0K8fUiKutnzRFv95.jpg
2023-04-12 19:43:46.429 Info HttpClient: GET https://image.tmdb.org/t/p/original/pyrpNdcfT63snOu8RGszWbJ3mYe.jpg
2023-04-12 19:43:46.430 Info HttpClient: GET https://image.tmdb.org/t/p/original/cuws9k6IvV2AC6SXnFNrpCB0gCJ.jpg
2023-04-12 19:43:46.540 Error HttpClient: Error getting response from https://image.tmdb.org/t/p/original/cuws9k6IvV2AC6SXnFNrpCB0gCJ.jpg
	*** Error Report ***
	Version: 4.7.11.0
	Command line: /volume1/@appstore/EmbyServer/system/EmbyServer.dll -programdata /volume1/Emby -ffdetect /var/packages/EmbyServer/target/bin/ffdetect -ffmpeg /var/packages/EmbyServer/target/bin/ffmpeg -ffprobe /var/packages/EmbyServer/target/bin/ffprobe -nolocalportconfig -ignore_vaapi_enabled_flag -pidfile /volume1/Emby/EmbyServer.pid -defaultdirectory /volume1/Public -updatepackage emby-server-synology_{version}_x86_64.spk -noautorunwebapp
	Operating system: Linux version 3.10.105 (root@build1) (gcc version 4.9.3 20150311 (prerelease) (crosstool-NG 1.20.0) ) #25556 SMP Sat Aug 28 02:14:22 CST 2021
	Framework: .NET 6.0.8
	OS/Process: x64/x64
	Runtime: volume1/@appstore/EmbyServer/system/System.Private.CoreLib.dll
	Processor count: 4
	Data path: /volume1/Emby
	Application path: /volume1/@appstore/EmbyServer/system
	System.Net.Http.HttpRequestException: System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
	 ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid

And as you can see above, some of them don't fail. Could it be some rate-limiting on the image.tmdb.org server side?

Link to comment
Share on other sites
Luke Emby Team

Luke 38342

Posted
Posted

I would check the time and time zone of your server machine and make sure that's correct. That could cause the NotTimeValid error. I would also read through this:

 

Link to comment
Share on other sites
Q-Droid

Q-Droid 784

Posted
Posted

Another thing to consider as part of the equation is that image.tmdb.org resolves to dozens of different IPv4 and IPv6 addresses and multiple CDNs. It's random (they rotate) which might coincide with the intermittent nature of the problem. The error could be thrown only by one or a few out of the many endpoints but without knowing where the call went (specific endpoint) it's hard to narrow it down.

 

Link to comment
Share on other sites
bo83_emby

bo83_emby 3

Posted
Posted

Thanks for the hint about the other post which is identical. 

I wasn't aware of the possibility to update to DSM7. Trying now the upgrade ... fingers crossed.

Link to comment
Share on other sites
Happy2Play

Happy2Play 9025

Posted
Posted
5 minutes ago, bo83_emby said:

Thanks for the hint about the other post which is identical. 

I wasn't aware of the possibility to update to DSM7. Trying now the upgrade ... fingers crossed.

Hopefully you have looks over this topic as DSM 7 is a major change.

 

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing
×
×
  • Create New...