Error in MusicBrainz (System.Net.WebException: Error: TrustFailure)

[Duffyx 25]

Hi,

 

In the last update I have a problem getting musicbrainz to download any artwork.

The log is in attachments, seem a regression with mono to obtain a trust anchor for HTTPS?

 

Regards,

Dries

 

log.txt

Edited January 18, 2020 by Duffyx

[Duffyx 25]

Hmm I posted too soon ..., title would better be: "Error App: Error in MusicBrainz"

[Luke 39400]

Hi, we changed our musicbrainz mirror and for some reason FreeBSD is not accepting our SSL certificate. It could be that your certificate store does not trust it. In any case we'll look at forcing it for the next release. Thanks.

[Duffyx 25]

On FreeBSD we use the Firefox NSS root CA's. The following errors I get when trying to reach it manually from my system:

[/usr/home/dries]$ fetch https://musicbrainz.emby.tv

Certificate verification failed for /OU=Domain Control Validated/OU=PositiveSSL Wildcard/CN=*.emby.tv

34370523136:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915:

fetch: https://musicbrainz.emby.tv:Authentication error

 

When I use Chrome on Windows 10 I can surf to it perfectly fine. Checking with SSL labs it should be trusted by Mozilla ...

It seems the full chain cert is not served to clients (chain incomplete) & wrong HSTS header policy. Not sure if any of those have anything to do with it. Forcing it is one solution although not the correct one IMO.

[Luke 39400]

Yes we are looking into the certificate chain as well. Thanks for the feedback.

[Luke 39400]

Can you give it another try? Thanks !

[Duffyx 25]

Seems good! Logs are clean and metadata is being downloaded for music. Thanks!

[Luke 39400]

Thanks for the feedback !