Jump to content


Photo

Error in MusicBrainz (System.Net.WebException: Error: TrustFailure)

freebsd

  • Please log in to reply
7 replies to this topic

#1 Duffyx OFFLINE  

Duffyx

    Advanced Member

  • Members
  • 41 posts
  • Local time: 07:21 AM
  • LocationBelgium

Posted 18 January 2020 - 06:29 AM

Hi,

 

In the last update I have a problem getting musicbrainz to download any artwork.

The log is in attachments, seem a regression with mono to obtain a trust anchor for HTTPS?

 

Regards,

Dries

 

Attached Files

  • Attached File  log.txt   164.26KB   5 downloads

Edited by Duffyx, 18 January 2020 - 06:31 AM.


#2 Duffyx OFFLINE  

Duffyx

    Advanced Member

  • Members
  • 41 posts
  • Local time: 07:21 AM
  • LocationBelgium

Posted 18 January 2020 - 06:30 AM

Hmm I posted too soon ..., title would better be: "Error App: Error in MusicBrainz"



#3 Luke OFFLINE  

Luke

    System Architect

  • Administrators
  • 149390 posts
  • Local time: 01:21 AM

Posted 18 January 2020 - 05:00 PM

Hi, we changed our musicbrainz mirror and for some reason FreeBSD is not accepting our SSL certificate. It could be that your certificate store does not trust it. In any case we'll look at forcing it for the next release. Thanks.



#4 Duffyx OFFLINE  

Duffyx

    Advanced Member

  • Members
  • 41 posts
  • Local time: 07:21 AM
  • LocationBelgium

Posted 28 January 2020 - 03:27 PM

On FreeBSD we use the Firefox NSS root CA's. The following errors I get when trying to reach it manually from my system:
[/usr/home/dries]$ fetch https://musicbrainz.emby.tv
Certificate verification failed for /OU=Domain Control Validated/OU=PositiveSSL Wildcard/CN=*.emby.tv
34370523136:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
fetch: https://musicbrainz.emby.tv:Authentication error
 
When I use Chrome on Windows 10 I can surf to it perfectly fine. Checking with SSL labs it should be trusted by Mozilla ...
It seems the full chain cert is not served to clients (chain incomplete) & wrong HSTS header policy. Not sure if any of those have anything to do with it. Forcing it is one solution although not the correct one IMO.

  • Baenwort likes this

#5 Luke OFFLINE  

Luke

    System Architect

  • Administrators
  • 149390 posts
  • Local time: 01:21 AM

Posted 30 January 2020 - 12:11 AM

Yes we are looking into the certificate chain as well. Thanks for the feedback.


  • Duffyx likes this

#6 Luke OFFLINE  

Luke

    System Architect

  • Administrators
  • 149390 posts
  • Local time: 01:21 AM

Posted 07 February 2020 - 03:13 AM

Can you give it another try? Thanks !



#7 Duffyx OFFLINE  

Duffyx

    Advanced Member

  • Members
  • 41 posts
  • Local time: 07:21 AM
  • LocationBelgium

Posted 07 February 2020 - 08:41 AM

Seems good! Logs are clean and metadata is being downloaded for music. Thanks!



#8 Luke OFFLINE  

Luke

    System Architect

  • Administrators
  • 149390 posts
  • Local time: 01:21 AM

Posted 07 February 2020 - 09:22 AM

Thanks for the feedback !





Also tagged with one or more of these keywords: freebsd

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users