Jump to content

Error in MusicBrainz (System.Net.WebException: Error: TrustFailure)


Duffyx

Recommended Posts

Hi,

 

In the last update I have a problem getting musicbrainz to download any artwork.

The log is in attachments, seem a regression with mono to obtain a trust anchor for HTTPS?

 

Regards,

Dries

 

log.txt

Edited by Duffyx
Link to comment
Share on other sites

Hi, we changed our musicbrainz mirror and for some reason FreeBSD is not accepting our SSL certificate. It could be that your certificate store does not trust it. In any case we'll look at forcing it for the next release. Thanks.

Link to comment
Share on other sites

  • 2 weeks later...
On FreeBSD we use the Firefox NSS root CA's. The following errors I get when trying to reach it manually from my system:

[/usr/home/dries]$ fetch https://musicbrainz.emby.tv

Certificate verification failed for /OU=Domain Control Validated/OU=PositiveSSL Wildcard/CN=*.emby.tv

34370523136:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915:

fetch: https://musicbrainz.emby.tv:Authentication error

 

When I use Chrome on Windows 10 I can surf to it perfectly fine. Checking with SSL labs it should be trusted by Mozilla ...

It seems the full chain cert is not served to clients (chain incomplete) & wrong HSTS header policy. Not sure if any of those have anything to do with it. Forcing it is one solution although not the correct one IMO.

  • Like 1
Link to comment
Share on other sites

  • 2 weeks later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...