Jump to content

Images not found intermittantly

Luticus

By Luticus
in Linux

 Share

Recommended Posts

  • 3 months later...
adam.niescierowicz

adam.niescierowicz   6

Posted
Posted

Hi,

there is also error with AniDB provider. Server time and date are fine.
Using wget I can download image

Logs

Quote

2023-07-24 14:53:39.420 Info HttpClient: GET http://img7.anidb.net/pics/anime/17039.jpg
2023-07-24 14:53:39.602 Error HttpClient: Error getting response from http://img7.anidb.net/pics/anime/17039.jpg
       *** Error Report ***
       Version: 4.7.13.0
       Command line: /opt/emby-server/system/EmbyServer.dll -programdata /var/lib/emby-server -ffdetect /opt/emby-server/bin/ffdetect -ffmpeg /opt/emby-server/bin/ffmpeg -ffprobe /opt/emby-server/bin/ffprobe -restartexitcode 3 -updatepackage emby-server-deb_{version}_amd64.deb
       Operating system: Linux version 4.15.0-1-amd64 (debian-kernel@lists.debian.org) (gcc version 7.3.0 (Debian 7.3.0-3)) #1 SMP Debian 4.15.4-1 (2018-02-18)
       Framework: .NET 6.0.14
       OS/Process: x64/x64
       Runtime: opt/emby-server/system/System.Private.CoreLib.dll
       Processor count: 20
       Data path: /var/lib/emby-server
       Application path: /opt/emby-server/system
       System.Net.Http.HttpRequestException: System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
        ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid
          at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception)
          at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)
          at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm)
          at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)
          --- End of inner exception stack trace ---
          at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)
          at System.Net.Http.HttpConnectionPool.ConnectAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
          at System.Net.Http.HttpConnectionPool.CreateHttp11ConnectionAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
          at System.Net.Http.HttpConnectionPool.AddHttp11ConnectionAsync(HttpRequestMessage request)
          at System.Threading.Tasks.TaskCompletionSourceWithCancellation`1.WaitWithCancellationAsync(CancellationToken cancellationToken)
          at System.Net.Http.HttpConnectionPool.GetHttp11ConnectionAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
          at System.Net.Http.HttpConnectionPool.SendWithVersionDetectionAndRetryAsync(HttpRequestMessage request, Boolean async, Boolean doRequestAuth, CancellationToken cancellationToken)
          at System.Net.Http.DiagnosticsHandler.SendAsyncCore(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
          at System.Net.Http.RedirectHandler.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
          at System.Net.Http.DecompressionHandler.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
          at System.Net.Http.HttpClient.<SendAsync>g__Core|83_0(HttpRequestMessage request, HttpCompletionOption completionOption, CancellationTokenSource cts, Boolean disposeCts, CancellationTokenSource pendingRequestsCts, CancellationToken originalCancellationToken)
          at Emby.Server.Implementations.HttpClientManager.CoreHttpClientManager.SendAsyncInternal(HttpRequestOptions options, String httpMethod)
       Source: System.Net.Http
       TargetSite: Void MoveNext()
       InnerException: System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid
       Source: System.Private.CoreLib
       TargetSite: Void Throw()
          at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception)
          at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)
          at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm)
          at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)

 

Link to comment
Share on other sites
Luke Emby Team

Luke   37094

Posted
Posted
7 hours ago, adam.niescierowicz said:

Hi,

there is also error with AniDB provider. Server time and date are fine.
Using wget I can download image

Logs

 

Strange, but usually it that error is time related. I would give it a day and see if it is still am issue.

Link to comment
Share on other sites
adam.niescierowicz

adam.niescierowicz   6

Posted
Posted (edited)

Next day problem still there, this time logs from tmdb

@Lukeis there a chance to create some kind debug script that we can check what is causing this problem?

If you can catch error NotTimeValid, can you dump cert details in the logs with date etc.?

 

Quote

2023-07-25 09:24:41.461 Error HttpClient: Error getting response from https://image.tmdb.org/t/p/original/fyInDgBLeqc9XfB0BN0SIBFKlzh.jpg
       *** Error Report ***
       Version: 4.7.13.0
       Command line: /opt/emby-server/system/EmbyServer.dll -programdata /var/lib/emby-server -ffdetect /opt/emby-server/bin/ffdetect -ffmpeg /opt/emby-server/bin/ffmpeg -ffprobe /opt/emby-server/bin/ffprobe -restartexitcode 3 -updatepackage emby-server-deb_{version}_amd64.deb
       Operating system: Linux version 4.15.0-1-amd64 (debian-kernel@lists.debian.org) (gcc version 7.3.0 (Debian 7.3.0-3)) #1 SMP Debian 4.15.4-1 (2018-02-18)
       Framework: .NET 6.0.14
       OS/Process: x64/x64
       Runtime: opt/emby-server/system/System.Private.CoreLib.dll
       Processor count: 20
       Data path: /var/lib/emby-server
       Application path: /opt/emby-server/system
       System.Net.Http.HttpRequestException: System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
        ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid
          at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception)
          at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)
          at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm)
          at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)
          --- End of inner exception stack trace ---
          at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)
          at System.Net.Http.HttpConnectionPool.ConnectAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
          at System.Net.Http.HttpConnectionPool.CreateHttp11ConnectionAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
          at System.Net.Http.HttpConnectionPool.AddHttp11ConnectionAsync(HttpRequestMessage request)
          at System.Threading.Tasks.TaskCompletionSourceWithCancellation`1.WaitWithCancellationAsync(CancellationToken cancellationToken)
          at System.Net.Http.HttpConnectionPool.GetHttp11ConnectionAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
          at System.Net.Http.HttpConnectionPool.SendWithVersionDetectionAndRetryAsync(HttpRequestMessage request, Boolean async, Boolean doRequestAuth, CancellationToken cancellationToken)
          at System.Net.Http.DiagnosticsHandler.SendAsyncCore(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
          at System.Net.Http.RedirectHandler.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
          at System.Net.Http.DecompressionHandler.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
          at System.Net.Http.HttpClient.<SendAsync>g__Core|83_0(HttpRequestMessage request, HttpCompletionOption completionOption, CancellationTokenSource cts, Boolean disposeCts, CancellationTokenSource pendingRequestsCts, CancellationToken originalCancellationToken)
          at Emby.Server.Implementations.HttpClientManager.CoreHttpClientManager.SendAsyncInternal(HttpRequestOptions options, String httpMethod)
       Source: System.Net.Http
       TargetSite: Void MoveNext()
       InnerException: System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid
       Source: System.Private.CoreLib
       TargetSite: Void Throw()
          at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception)
          at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)
          at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm)
          at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)

 

 

Edited by adam.niescierowicz
Link to comment
Share on other sites
ChaoOos

ChaoOos   2

Posted
Posted

Hi,

i have the same Problem with Synology 7.2 (i know its linux too 🙂 ) 

2023-07-26 11:37:27.329 Error HttpClient: Error getting response from https://image.tmdb.org/t/p/original/8BNky5updEmoOPerYU9h5RgqM4H.jpg
	*** Error Report ***
	Version: 4.7.13.0
	Command line: /volume1/@appstore/EmbyServer/system/EmbyServer.dll -programdata /var/packages/EmbyServer/var -ffdetect /var/packages/EmbyServer/target/bin/ffdetect -ffmpeg /var/packages/EmbyServer/target/bin/ffmpeg -ffprobe /var/packages/EmbyServer/target/bin/ffprobe -nolocalportconfig -ignore_vaapi_enabled_flag -pidfile /var/packages/EmbyServer/var/EmbyServer.pid -defaultdirectory /volume1/Public -updatepackage emby-server-synology72_{version}_x86_64.spk -noautorunwebapp
	Operating system: Linux version 4.4.302+ (root@build7) (gcc version 12.2.0 (GCC) ) #64570 SMP Tue Jun 13 21:40:17 CST 2023
	Framework: .NET 6.0.14
	OS/Process: x64/x64
	Runtime: volume1/@appstore/EmbyServer/system/System.Private.CoreLib.dll
	Processor count: 4
	Data path: /var/packages/EmbyServer/var
	Application path: /volume1/@appstore/EmbyServer/system
	System.Net.Http.HttpRequestException: System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
	 ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid
	   at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception)
	   at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)
	   at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm)
	   at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)
	   --- End of inner exception stack trace ---
	   at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)
	   at System.Net.Http.HttpConnectionPool.ConnectAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
	   at System.Net.Http.HttpConnectionPool.CreateHttp11ConnectionAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
	   at System.Net.Http.HttpConnectionPool.AddHttp11ConnectionAsync(HttpRequestMessage request)
	   at System.Threading.Tasks.TaskCompletionSourceWithCancellation`1.WaitWithCancellationAsync(CancellationToken cancellationToken)
	   at System.Net.Http.HttpConnectionPool.GetHttp11ConnectionAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
	   at System.Net.Http.HttpConnectionPool.SendWithVersionDetectionAndRetryAsync(HttpRequestMessage request, Boolean async, Boolean doRequestAuth, CancellationToken cancellationToken)
	   at System.Net.Http.DiagnosticsHandler.SendAsyncCore(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
	   at System.Net.Http.RedirectHandler.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
	   at System.Net.Http.DecompressionHandler.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
	   at System.Net.Http.HttpClient.<SendAsync>g__Core|83_0(HttpRequestMessage request, HttpCompletionOption completionOption, CancellationTokenSource cts, Boolean disposeCts, CancellationTokenSource pendingRequestsCts, CancellationToken originalCancellationToken)
	   at Emby.Server.Implementations.HttpClientManager.CoreHttpClientManager.SendAsyncInternal(HttpRequestOptions options, String httpMethod)
	Source: System.Net.Http
	TargetSite: Void MoveNext()
	InnerException: System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid
	Source: System.Private.CoreLib
	TargetSite: Void Throw()
	   at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception)
	   at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)
	   at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm)
	   at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)
	
2023-07-26 11:37:27.334 Error Server: Error processing request
	*** Error Report ***
	Version: 4.7.13.0
	Command line: /volume1/@appstore/EmbyServer/system/EmbyServer.dll -programdata /var/packages/EmbyServer/var -ffdetect /var/packages/EmbyServer/target/bin/ffdetect -ffmpeg /var/packages/EmbyServer/target/bin/ffmpeg -ffprobe /var/packages/EmbyServer/target/bin/ffprobe -nolocalportconfig -ignore_vaapi_enabled_flag -pidfile /var/packages/EmbyServer/var/EmbyServer.pid -defaultdirectory /volume1/Public -updatepackage emby-server-synology72_{version}_x86_64.spk -noautorunwebapp
	Operating system: Linux version 4.4.302+ (root@build7) (gcc version 12.2.0 (GCC) ) #64570 SMP Tue Jun 13 21:40:17 CST 2023
	Framework: .NET 6.0.14
	OS/Process: x64/x64
	Runtime: volume1/@appstore/EmbyServer/system/System.Private.CoreLib.dll
	Processor count: 4
	Data path: /var/packages/EmbyServer/var
	Application path: /volume1/@appstore/EmbyServer/system
	System.Net.Http.HttpRequestException: System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
	 ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid
	   at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception)
	   at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)
	   at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm)
	   at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)
	   --- End of inner exception stack trace ---
	   at Emby.Server.Implementations.HttpClientManager.CoreHttpClientManager.SendAsyncInternal(HttpRequestOptions options, String httpMethod)
	   at Emby.Server.Implementations.HttpClientManager.CoreHttpClientManager.SendAsync(HttpRequestOptions options, String httpMethod)
	   at Emby.Providers.Manager.ProviderManager.SaveImageFromRemoteUrl(BaseItem item, LibraryOptions libraryOptions, String url, ImageType type, Nullable`1 imageIndex, Boolean isFallbackImage, CancellationToken cancellationToken)
	   at Emby.Server.Implementations.Library.LibraryManager.ConvertImageToLocal(BaseItem item, ItemImageInfo image, Int32 imageIndex, CancellationToken cancellationToken)
	   at Emby.Drawing.ImageProcessor.ProcessImage(ImageProcessingOptions options, CancellationToken cancellationToken)
	   at Emby.Api.Images.ImageService.GetImage(ImageRequest request, Int64 itemId, BaseItem item, Boolean isHeadRequest)
	   at Emby.Server.Implementations.Services.ServiceController.GetTaskResult(Task task)
	   at Emby.Server.Implementations.Services.ServiceHandler.ProcessRequestAsync(HttpListenerHost httpHost, IServerApplicationHost appHost, IRequest httpReq, IResponse httpRes, RestPath restPath, String responseContentType, CancellationToken cancellationToken)
	   at Emby.Server.Implementations.HttpServer.HttpListenerHost.RequestHandler(IRequest httpReq, ReadOnlyMemory`1 urlString, ReadOnlyMemory`1 localPath, CancellationToken cancellationToken)
	Source: System.Net.Http
	TargetSite: Void MoveNext()
	InnerException: System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid
	Source: System.Private.CoreLib
	TargetSite: Void Throw()
	   at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception)
	   at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)
	   at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm)
	   at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)

my Certificate is new and ok. (i hope). i created my .p12 cert in the beginning of july.

AniDB errors i have too 😉

Link to comment
Share on other sites
Luke Emby Team

Luke   37094

Posted
Posted
On 7/25/2023 at 4:58 AM, adam.niescierowicz said:

Next day problem still there, this time logs from tmdb

@Lukeis there a chance to create some kind debug script that we can check what is causing this problem?

If you can catch error NotTimeValid, can you dump cert details in the logs with date etc.?

 

 

Is this impacting all Moviedb requests?

Link to comment
Share on other sites
adam.niescierowicz

adam.niescierowicz   6

Posted
Posted
Quote

Is this impacting all Moviedb requests?

For 23 to tmdb 12 has errors(today stats), logs below

Quote

2023-07-28 09:05:24.273 Info HttpClient: GET https://image.tmdb.org/t/p/original/j9eoGICQKRJq5FSq3i1ZV55kf1H.jpg
2023-07-28 09:05:24.366 Error HttpClient: Error getting response from https://image.tmdb.org/t/p/original/j9eoGICQKRJq5FSq3i1ZV55kf1H.jpg
2023-07-28 10:44:00.291 Info HttpClient: GET https://image.tmdb.org/t/p/original/ompc0zqqG9ZV34ymLO4UwBOH0Q7.jpg
2023-07-28 10:44:00.291 Info HttpClient: GET https://image.tmdb.org/t/p/original/siFE5F4ReT1krbu3kPseVx0OO6T.jpg
2023-07-28 10:44:00.384 Error HttpClient: Error getting response from https://image.tmdb.org/t/p/original/siFE5F4ReT1krbu3kPseVx0OO6T.jpg
2023-07-28 10:44:29.405 Info HttpClient: GET https://image.tmdb.org/t/p/original/hQDz5QYioH6FbcftHi1C7smUyhV.jpg
2023-07-28 10:44:47.165 Info HttpClient: GET https://image.tmdb.org/t/p/original/3hmcqU1OfLZ5kbvl7url63VuWMJ.jpg
2023-07-28 11:22:19.552 Info HttpClient: GET https://image.tmdb.org/t/p/original/dqSkdg0buh8zpf9UfOoovsDjJwX.jpg
2023-07-28 11:22:19.620 Error HttpClient: Error getting response from https://image.tmdb.org/t/p/original/dqSkdg0buh8zpf9UfOoovsDjJwX.jpg
2023-07-28 11:22:23.041 Info HttpClient: GET https://image.tmdb.org/t/p/original/AtzhmC87QIgrIVoblaj6TVNbM6I.jpg
2023-07-28 11:23:59.997 Info HttpClient: GET https://image.tmdb.org/t/p/original/13tqYbaMCSLco7ST0MoME9docwK.jpg
2023-07-28 11:24:00.063 Error HttpClient: Error getting response from https://image.tmdb.org/t/p/original/13tqYbaMCSLco7ST0MoME9docwK.jpg
2023-07-28 11:26:28.763 Info HttpClient: GET https://image.tmdb.org/t/p/original/7iEugfZ8imAI6GSWIfZvhg1ZZoc.jpg
2023-07-28 11:26:28.833 Error HttpClient: Error getting response from https://image.tmdb.org/t/p/original/7iEugfZ8imAI6GSWIfZvhg1ZZoc.jpg
2023-07-28 11:28:35.622 Info HttpClient: GET https://image.tmdb.org/t/p/original/d030uTB6ATYw9GHduuuE1E8eO4g.jpg
2023-07-28 11:30:52.401 Info HttpClient: GET https://image.tmdb.org/t/p/original/tHkCm58B5021QXuoelMXuFzg238.jpg
2023-07-28 11:30:52.480 Error HttpClient: Error getting response from https://image.tmdb.org/t/p/original/tHkCm58B5021QXuoelMXuFzg238.jpg
2023-07-28 11:32:56.258 Info HttpClient: GET https://image.tmdb.org/t/p/original/ucALpX43MFp2nkvWGihEwHWhwIp.jpg
2023-07-28 11:34:36.890 Info HttpClient: GET https://image.tmdb.org/t/p/original/tH7a08Mj39gXpRstGl1qs6vJpHU.jpg
2023-07-28 11:36:39.125 Info HttpClient: GET https://image.tmdb.org/t/p/original/pqdmeQZ0Xa4dPUhUznlrzQuveoT.jpg
2023-07-28 11:36:39.191 Error HttpClient: Error getting response from https://image.tmdb.org/t/p/original/pqdmeQZ0Xa4dPUhUznlrzQuveoT.jpg
2023-07-28 11:38:09.516 Info HttpClient: GET https://image.tmdb.org/t/p/original/plzxedJrWfbH1XGqcx2z7l6QOhw.jpg
2023-07-28 11:39:55.076 Info HttpClient: GET https://image.tmdb.org/t/p/original/zHBe20HMFFKlSd9vm1EbYzvwOHO.jpg
2023-07-28 11:39:55.158 Error HttpClient: Error getting response from https://image.tmdb.org/t/p/original/zHBe20HMFFKlSd9vm1EbYzvwOHO.jpg
2023-07-28 11:41:19.670 Info HttpClient: GET https://image.tmdb.org/t/p/original/iYoMZYVD775MtBYJfv6OGY1FsnL.jpg
2023-07-28 11:41:19.738 Error HttpClient: Error getting response from https://image.tmdb.org/t/p/original/iYoMZYVD775MtBYJfv6OGY1FsnL.jpg
2023-07-28 12:05:32.053 Info HttpClient: GET https://image.tmdb.org/t/p/original/cP9CJ9nvPT3cnnBSlGFgwq7odIR.jpg
2023-07-28 12:05:32.130 Error HttpClient: Error getting response from https://image.tmdb.org/t/p/original/cP9CJ9nvPT3cnnBSlGFgwq7odIR.jpg
2023-07-28 12:21:37.801 Info HttpClient: GET https://image.tmdb.org/t/p/original/kJxqdEfInoai6Ca2tUEWbelveUP.jpg
2023-07-28 12:21:37.863 Error HttpClient: Error getting response from https://image.tmdb.org/t/p/original/kJxqdEfInoai6Ca2tUEWbelveUP.jpg
2023-07-28 12:36:09.514 Info HttpClient: GET https://image.tmdb.org/t/p/original/35EG2nZhvVF7Cf317wWpIJfQwWl.jpg
2023-07-28 13:28:50.965 Info HttpClient: GET https://image.tmdb.org/t/p/original/cZLbagRQKtyvl8o4SE0JhA1nNYZ.png
2023-07-28 13:28:51.053 Error HttpClient: Error getting response from https://image.tmdb.org/t/p/original/cZLbagRQKtyvl8o4SE0JhA1nNYZ.png
2023-07-28 14:23:20.401 Info HttpClient: GET https://image.tmdb.org/t/p/original/9lNSJ7l6Dc7aXVrywBlFxhNqXeF.jpg

 

 

 
Link to comment
Share on other sites
Q-Droid

Q-Droid   652

Posted
Posted

Another thing to check - this one is an oldie...

Do you have any files under ~emby/.dotnet/corefx/cryptography/x509stores/ca?

 

Link to comment
Share on other sites
adam.niescierowicz

adam.niescierowicz   6

Posted
Posted (edited)
Quote

Have you tried changing your DNS resolver on the Emby server? Just as a test.

Correct me if I'm wrong but if the problem is with DNS so the wget also shouldn't work, yes?

 

Quote

Do you have any files under ~emby/.dotnet/corefx/cryptography/x509stores/ca?

Yes, 3

Quote

33E4E80807204C2B6182A3A14B591ACD25B5F0DB.pfx  

48504E974C0DAC5B5CD476C8202274B24C8C7172.pfx  

E6A3B45B062D509B3382282D196EFE97D5956CCB.pfx
 

 

Edited by adam.niescierowicz
Link to comment
Share on other sites
Q-Droid

Q-Droid   652

Posted
Posted
44 minutes ago, adam.niescierowicz said:

Correct me if I'm wrong but if the problem is with DNS so the wget also shouldn't work, yes?

 

Yes, 3

 

I don't think the problem is with DNS and my suggestion was more of an exercise of elimination. But let's start with the last thing.

Do you have dates on those files?  Not important but I'm curious.

Regarding those files, what you can do with them is:
1. Stop the emby server.
2. Move those files to another directory, doesn't matter where as long as they're gone from this one.
3. Start the emby server.

I suggest you move them just so that we can see their contents after. Then let Emby run and fetch images for a while to see if the errors come back.

TL;DR for below - Different DNS service could respond with different endpoints for the cloud/CDN holding the images.

Back to DNS.  Connections from wget might not be using the same truststore as Emby. In fact I think they don't. The major public DNS providers (maybe all) use anycast addressing for their services. For example, if you and I both used Google DNS from different parts of the country our queries would go to different servers. Servers that are closer to us - in internet terms. The image.tmdb.org service is highly distributed over multiple cloud and CDN providers across the US and maybe even the world. Another feature of DNS services is to respond with the most advantageous addresses for our queries. So a DNS server closer to you is going to respond with CDN/cloud endpoints that are also closer to you.

Below are the stats from 500 nslookups from four of the big DNS players. There are a few things you can take from these:
1. They all respond differently.
2. There is overlap in their responses.
3. There may be uniqueness in their responses.
4. Trying a different one might exclude or reduce responses that send your connection to a service with the cert(s) that are failing for your server.

image.tmdb.org.cloudflare
Total: 153
IPv6: 138
IPv4: 15

image.tmdb.org.google
Total: 138
IPv6: 129
IPv4: 9

image.tmdb.org.opendns
Total: 164
IPv6: 144
IPv4: 20

image.tmdb.org.quad9
Total: 133
IPv6: 102
IPv4: 31

Total unique: 227
Unique IPv6: 191
Unique IPv4: 36
 

  • Thanks 1
Link to comment
Share on other sites
adam.niescierowicz

adam.niescierowicz   6

Posted
Posted
Quote

Do you have dates on those files?  Not important but I'm curious.

Yes, first column format: `year.month.day`

Quote

2018.09.09 E6A3B45B062D509B3382282D196EFE97D5956CCB.pfx
2019.12.21 33E4E80807204C2B6182A3A14B591ACD25B5F0DB.pfx
2020.12.31 48504E974C0DAC5B5CD476C8202274B24C8C7172.pfx
 

 

Quote

Regarding those files, what you can do with them is:
1. Stop the emby server.
2. Move those files to another directory, doesn't matter where as long as they're gone from this one.
3. Start the emby server.

Done

Quote

Back to DNS

I thnik it can be easy checked. I will install DNS cache server so for 2-3 days one domain will be having the same ip address(from cache server).

If problem is with DNS when emby can't receive file also wget shouldn't.

 

Link to comment
Share on other sites
Q-Droid

Q-Droid   652

Posted
Posted (edited)
1 hour ago, adam.niescierowicz said:

Yes, first column format: `year.month.day`

2018.09.09 E6A3B45B062D509B3382282D196EFE97D5956CCB.pfx
2019.12.21 33E4E80807204C2B6182A3A14B591ACD25B5F0DB.pfx
2020.12.31 48504E974C0DAC5B5CD476C8202274B24C8C7172.pfx
 

I thnik it can be easy checked. I will install DNS cache server so for 2-3 days one domain will be having the same ip address(from cache server).

If problem is with DNS when emby can't receive file also wget shouldn't.

 

Yeah, those files are pretty old.

I wouldn't move on DNS quite yet. Let's see if the pfx removal makes a difference. Caching could change things but in reality unless you override the DNS response TTL it will not be days and most cases a few minutes. Unless you mean to set static entries for this domain.

As I said before the DNS change was more of an experiment to see if the failure rate was different from one resolver to another but not a fix or the way forward. The actual problem is with the certs presented by some of the cloud/CDN service endpoints and why it's intermittent. Without detailed connection and handshake info in the logs it's a guess as to which of them was failing.

 

Edited by Q-Droid
Link to comment
Share on other sites
ChaoOos

ChaoOos   2

Posted
Posted
On 8/3/2023 at 8:21 AM, adam.niescierowicz said:

Just checked, after changing certs errors didn't appear. Looks good.

same for me

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing
×
×
  • Create New...