Luticus 13 Posted December 14, 2022 Author Posted December 14, 2022 (edited) @Luke Yep, it's still an issue. Edited December 14, 2022 by Luticus
Luticus 13 Posted December 14, 2022 Author Posted December 14, 2022 (edited) It seems specific to TheMovieDB from what I can tell. @Natilus13 In my case I don't think it's a permissions issue as some pictures from some providers do work, and sometimes all pictures work (I think). I would think if it were a permissions issue that no images would work at any point. It's a very strange issue. Also in my case my server is a Debian machine that is dedicated to Emby. It runs nothing else but Emby and the underlying OS and no changes are made to it really except for security patches. Certainly not permissions to shares or anything like that. So unfortunately, I don't think this is going to help me out. Edited December 14, 2022 by Luticus
Slennox 0 Posted December 30, 2022 Posted December 30, 2022 I experience the same exact issue... Latest Debian 11.
Luke 42077 Posted January 2, 2023 Posted January 2, 2023 On 12/30/2022 at 2:26 PM, Slennox said: I experience the same exact issue... Latest Debian 11. Hi there, can you please describe the issue that you're having? Thanks.
Luticus 13 Posted January 19, 2023 Author Posted January 19, 2023 I'm still seeing the problem. I think it's mostly the TheMovieDB now. Other sources seem to work but occasionally I see something that's broken because the only working source is the movie db. Still not sure what the cause is, and I'm not even 100% sure what the true scope is as it's intermittent. I know that this all used to work fine, but unfortunately I'm not entirely sure when that changed, except to say sometime last year around when I made the original post. I'm just kind of living with it for now.
Neminem 1518 Posted January 19, 2023 Posted January 19, 2023 Hmm look at this, faced with the same issue. did google blacklist them ? or have they moved something. If i do a nslookup image.tmdb.org I get this Try to access via web browser. SSL Certificate look bad or they dont have http to https conversion setup. It might be me barking up the wrong tree.
Happy2Play 9780 Posted January 19, 2023 Posted January 19, 2023 (edited) 1 hour ago, jaycedk said: did google blacklist them ? or have they moved something. Possibly or Geo-location C:\Windows\System32>nslookup image.tmdb.org Server: dns.google Address: 8.8.8.8 Non-authoritative answer: Name: dsag3w1du2cu2.cloudfront.net Addresses: 2600:9000:200f:9800:14:41bb:de80:93a1 2600:9000:200f:8600:14:41bb:de80:93a1 2600:9000:200f:d200:14:41bb:de80:93a1 2600:9000:200f:e400:14:41bb:de80:93a1 2600:9000:200f:ac00:14:41bb:de80:93a1 2600:9000:200f:7600:14:41bb:de80:93a1 2600:9000:200f:fa00:14:41bb:de80:93a1 2600:9000:200f:3800:14:41bb:de80:93a1 143.244.49.183 Aliases: image.tmdb.org ISP DNS C:\Windows\System32>nslookup image.tmdb.org Server: UnKnown Address: 192.168.151.1 Non-authoritative answer: Name: dsag3w1du2cu2.cloudfront.net Addresses: 2600:9000:234d:e00:14:41bb:de80:93a1 2600:9000:234d:bc00:14:41bb:de80:93a1 2600:9000:234d:9400:14:41bb:de80:93a1 2600:9000:234d:ea00:14:41bb:de80:93a1 2600:9000:234d:7a00:14:41bb:de80:93a1 2600:9000:234d:800:14:41bb:de80:93a1 2600:9000:234d:8c00:14:41bb:de80:93a1 2600:9000:234d:5200:14:41bb:de80:93a1 18.65.229.63 18.65.229.80 18.65.229.28 18.65.229.107 Aliases: image.tmdb.org Edited January 19, 2023 by Happy2Play
Neminem 1518 Posted January 20, 2023 Posted January 20, 2023 Ok just changed my dns to to 1.1.1.1 and 1.0.0.1. And the errors have stopped
bo83_emby 3 Posted April 10, 2023 Posted April 10, 2023 Well ... not for me. My synology / DSM6 was already set for these dns'es and still getting these errors for months. Version: 4.7.11.0 Command line: /volume1/@appstore/EmbyServer/system/EmbyServer.dll -programdata /volume1/Emby -ffdetect /var/packages/EmbyServer/target/bin/ffdetect -ffmpeg /var/packages/EmbyServer/target/bin/ffmpeg -ffprobe /var/packages/EmbyServer/target/bin/ffprobe -nolocalportconfig -ignore_vaapi_enabled_flag -pidfile /volume1/Emby/EmbyServer.pid -defaultdirectory /volume1/Public -updatepackage emby-server-synology_{version}_x86_64.spk -noautorunwebapp Operating system: Linux version 3.10.105 (root@build1) (gcc version 4.9.3 20150311 (prerelease) (crosstool-NG 1.20.0) ) #25556 SMP Sat Aug 28 02:14:22 CST 2021 Framework: .NET 6.0.8 OS/Process: x64/x64 Runtime: volume1/@appstore/EmbyServer/system/System.Private.CoreLib.dll Processor count: 4 Data path: /volume1/Emby Application path: /volume1/@appstore/EmbyServer/system System.Net.Http.HttpRequestException: System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception) at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions) at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm) at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken) --- End of inner exception stack trace --- at Emby.Server.Implementations.HttpClientManager.CoreHttpClientManager.SendAsyncInternal(HttpRequestOptions options, String httpMethod) at Emby.Server.Implementations.HttpClientManager.CoreHttpClientManager.SendAsync(HttpRequestOptions options, String httpMethod) at Emby.Providers.Manager.ProviderManager.SaveImageFromRemoteUrl(BaseItem item, LibraryOptions libraryOptions, String url, ImageType type, Nullable`1 imageIndex, Boolean isFallbackImage, CancellationToken cancellationToken) at Emby.Server.Implementations.Library.LibraryManager.ConvertImageToLocal(BaseItem item, ItemImageInfo image, Int32 imageIndex, CancellationToken cancellationToken) at Emby.Drawing.ImageProcessor.ProcessImage(ImageProcessingOptions options, CancellationToken cancellationToken) at Emby.Api.Images.ImageService.GetImage(ImageRequest request, Int64 itemId, BaseItem item, Boolean isHeadRequest) at Emby.Server.Implementations.Services.ServiceController.GetTaskResult(Task task) at Emby.Server.Implementations.Services.ServiceHandler.ProcessRequestAsync(HttpListenerHost appHost, IRequest httpReq, IResponse httpRes, RestPath restPath, String responseContentType, CancellationToken cancellationToken) at Emby.Server.Implementations.HttpServer.HttpListenerHost.RequestHandler(IRequest httpReq, ReadOnlyMemory`1 urlString, ReadOnlyMemory`1 localPath, CancellationToken cancellationToken) Source: System.Net.Http TargetSite: Void MoveNext() InnerException: System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid Source: System.Private.CoreLib TargetSite: Void Throw() at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception) at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions) at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm) at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken) 2023-04-10 14:16:44.357 Error HttpClient: Error getting response from https://image.tmdb.org/t/p/original/lNkT2VPAyaD301a6nPCYTDMPlOY.jpg *** Error Report ***
Happy2Play 9780 Posted April 10, 2023 Posted April 10, 2023 10 hours ago, bo83_emby said: Well ... not for me. My synology / DSM6 was already set for these dns'es and still getting these errors for months. Version: 4.7.11.0 Command line: /volume1/@appstore/EmbyServer/system/EmbyServer.dll -programdata /volume1/Emby -ffdetect /var/packages/EmbyServer/target/bin/ffdetect -ffmpeg /var/packages/EmbyServer/target/bin/ffmpeg -ffprobe /var/packages/EmbyServer/target/bin/ffprobe -nolocalportconfig -ignore_vaapi_enabled_flag -pidfile /volume1/Emby/EmbyServer.pid -defaultdirectory /volume1/Public -updatepackage emby-server-synology_{version}_x86_64.spk -noautorunwebapp Operating system: Linux version 3.10.105 (root@build1) (gcc version 4.9.3 20150311 (prerelease) (crosstool-NG 1.20.0) ) #25556 SMP Sat Aug 28 02:14:22 CST 2021 Framework: .NET 6.0.8 OS/Process: x64/x64 Runtime: volume1/@appstore/EmbyServer/system/System.Private.CoreLib.dll Processor count: 4 Data path: /volume1/Emby Application path: /volume1/@appstore/EmbyServer/system System.Net.Http.HttpRequestException: System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception) at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions) at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm) at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken) --- End of inner exception stack trace --- at Emby.Server.Implementations.HttpClientManager.CoreHttpClientManager.SendAsyncInternal(HttpRequestOptions options, String httpMethod) at Emby.Server.Implementations.HttpClientManager.CoreHttpClientManager.SendAsync(HttpRequestOptions options, String httpMethod) at Emby.Providers.Manager.ProviderManager.SaveImageFromRemoteUrl(BaseItem item, LibraryOptions libraryOptions, String url, ImageType type, Nullable`1 imageIndex, Boolean isFallbackImage, CancellationToken cancellationToken) at Emby.Server.Implementations.Library.LibraryManager.ConvertImageToLocal(BaseItem item, ItemImageInfo image, Int32 imageIndex, CancellationToken cancellationToken) at Emby.Drawing.ImageProcessor.ProcessImage(ImageProcessingOptions options, CancellationToken cancellationToken) at Emby.Api.Images.ImageService.GetImage(ImageRequest request, Int64 itemId, BaseItem item, Boolean isHeadRequest) at Emby.Server.Implementations.Services.ServiceController.GetTaskResult(Task task) at Emby.Server.Implementations.Services.ServiceHandler.ProcessRequestAsync(HttpListenerHost appHost, IRequest httpReq, IResponse httpRes, RestPath restPath, String responseContentType, CancellationToken cancellationToken) at Emby.Server.Implementations.HttpServer.HttpListenerHost.RequestHandler(IRequest httpReq, ReadOnlyMemory`1 urlString, ReadOnlyMemory`1 localPath, CancellationToken cancellationToken) Source: System.Net.Http TargetSite: Void MoveNext() InnerException: System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid Source: System.Private.CoreLib TargetSite: Void Throw() at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception) at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions) at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm) at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken) 2023-04-10 14:16:44.357 Error HttpClient: Error getting response from https://image.tmdb.org/t/p/original/lNkT2VPAyaD301a6nPCYTDMPlOY.jpg *** Error Report *** Are you using a VPN? Have you validated your system datetime? NotTimeValid
bo83_emby 3 Posted April 12, 2023 Posted April 12, 2023 Not using VPN. System time and emby server time is fine (as you can see from the log timestamp)
bo83_emby 3 Posted April 12, 2023 Posted April 12, 2023 One important detail i just discovered. This happens only if I access the server through the external ip through the reverse proxy (HAproxy) If I access through the LAN then i don't have the issue and even all images will download/cached without problems.
bo83_emby 3 Posted April 12, 2023 Posted April 12, 2023 The errors show up in logs even if i trigger from LAN missing library metadata refresh. And it's not only images but also other info links.
Luke 42077 Posted April 12, 2023 Posted April 12, 2023 On 4/10/2023 at 8:34 AM, bo83_emby said: Well ... not for me. My synology / DSM6 was already set for these dns'es and still getting these errors for months. Version: 4.7.11.0 Command line: /volume1/@appstore/EmbyServer/system/EmbyServer.dll -programdata /volume1/Emby -ffdetect /var/packages/EmbyServer/target/bin/ffdetect -ffmpeg /var/packages/EmbyServer/target/bin/ffmpeg -ffprobe /var/packages/EmbyServer/target/bin/ffprobe -nolocalportconfig -ignore_vaapi_enabled_flag -pidfile /volume1/Emby/EmbyServer.pid -defaultdirectory /volume1/Public -updatepackage emby-server-synology_{version}_x86_64.spk -noautorunwebapp Operating system: Linux version 3.10.105 (root@build1) (gcc version 4.9.3 20150311 (prerelease) (crosstool-NG 1.20.0) ) #25556 SMP Sat Aug 28 02:14:22 CST 2021 Framework: .NET 6.0.8 OS/Process: x64/x64 Runtime: volume1/@appstore/EmbyServer/system/System.Private.CoreLib.dll Processor count: 4 Data path: /volume1/Emby Application path: /volume1/@appstore/EmbyServer/system System.Net.Http.HttpRequestException: System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception) at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions) at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm) at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken) --- End of inner exception stack trace --- at Emby.Server.Implementations.HttpClientManager.CoreHttpClientManager.SendAsyncInternal(HttpRequestOptions options, String httpMethod) at Emby.Server.Implementations.HttpClientManager.CoreHttpClientManager.SendAsync(HttpRequestOptions options, String httpMethod) at Emby.Providers.Manager.ProviderManager.SaveImageFromRemoteUrl(BaseItem item, LibraryOptions libraryOptions, String url, ImageType type, Nullable`1 imageIndex, Boolean isFallbackImage, CancellationToken cancellationToken) at Emby.Server.Implementations.Library.LibraryManager.ConvertImageToLocal(BaseItem item, ItemImageInfo image, Int32 imageIndex, CancellationToken cancellationToken) at Emby.Drawing.ImageProcessor.ProcessImage(ImageProcessingOptions options, CancellationToken cancellationToken) at Emby.Api.Images.ImageService.GetImage(ImageRequest request, Int64 itemId, BaseItem item, Boolean isHeadRequest) at Emby.Server.Implementations.Services.ServiceController.GetTaskResult(Task task) at Emby.Server.Implementations.Services.ServiceHandler.ProcessRequestAsync(HttpListenerHost appHost, IRequest httpReq, IResponse httpRes, RestPath restPath, String responseContentType, CancellationToken cancellationToken) at Emby.Server.Implementations.HttpServer.HttpListenerHost.RequestHandler(IRequest httpReq, ReadOnlyMemory`1 urlString, ReadOnlyMemory`1 localPath, CancellationToken cancellationToken) Source: System.Net.Http TargetSite: Void MoveNext() InnerException: System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid Source: System.Private.CoreLib TargetSite: Void Throw() at System.Net.Security.SslStream.SendAuthResetSignal(ProtocolToken message, ExceptionDispatchInfo exception) at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions) at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](TIOAdapter adapter, Boolean receiveFirst, Byte[] reAuthenticationData, Boolean isApm) at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken) 2023-04-10 14:16:44.357 Error HttpClient: Error getting response from https://image.tmdb.org/t/p/original/lNkT2VPAyaD301a6nPCYTDMPlOY.jpg *** Error Report *** What DNS entries did you add? Maybe try resetting those back to default?
bo83_emby 3 Posted April 12, 2023 Posted April 12, 2023 The cloudflare ones. It's not an error because of not finding the url, it's some kind of ssl bug. "InnerException: System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid"
bo83_emby 3 Posted April 12, 2023 Posted April 12, 2023 2023-04-12 19:43:46.243 Info HttpClient: GET https://image.tmdb.org/t/p/original/kuFyGa2HZB7hAQTUn3WKlgKAVjm.jpg 2023-04-12 19:43:46.244 Info HttpClient: GET https://image.tmdb.org/t/p/original/sM9DG77jUjmIsW09li5qGX80Pc2.jpg 2023-04-12 19:43:46.248 Info HttpClient: GET https://image.tmdb.org/t/p/original/gYzfVDwWI6A955MEtX1ZqfZIuN2.jpg 2023-04-12 19:43:46.322 Info HttpClient: GET https://image.tmdb.org/t/p/original/jy660w9HAkjcvDQn274N80RUW2Q.jpg 2023-04-12 19:43:46.393 Info HttpClient: GET https://image.tmdb.org/t/p/original/pAJVhACBtGVARuj9EGq3TJYovWa.jpg 2023-04-12 19:43:46.394 Info HttpClient: GET https://image.tmdb.org/t/p/original/4jBTetCltbdL921Cj9DO8nLJplt.jpg 2023-04-12 19:43:46.420 Info HttpClient: GET https://image.tmdb.org/t/p/original/zh1WAlju5bn0K8fUiKutnzRFv95.jpg 2023-04-12 19:43:46.429 Info HttpClient: GET https://image.tmdb.org/t/p/original/pyrpNdcfT63snOu8RGszWbJ3mYe.jpg 2023-04-12 19:43:46.430 Info HttpClient: GET https://image.tmdb.org/t/p/original/cuws9k6IvV2AC6SXnFNrpCB0gCJ.jpg 2023-04-12 19:43:46.540 Error HttpClient: Error getting response from https://image.tmdb.org/t/p/original/cuws9k6IvV2AC6SXnFNrpCB0gCJ.jpg *** Error Report *** Version: 4.7.11.0 Command line: /volume1/@appstore/EmbyServer/system/EmbyServer.dll -programdata /volume1/Emby -ffdetect /var/packages/EmbyServer/target/bin/ffdetect -ffmpeg /var/packages/EmbyServer/target/bin/ffmpeg -ffprobe /var/packages/EmbyServer/target/bin/ffprobe -nolocalportconfig -ignore_vaapi_enabled_flag -pidfile /volume1/Emby/EmbyServer.pid -defaultdirectory /volume1/Public -updatepackage emby-server-synology_{version}_x86_64.spk -noautorunwebapp Operating system: Linux version 3.10.105 (root@build1) (gcc version 4.9.3 20150311 (prerelease) (crosstool-NG 1.20.0) ) #25556 SMP Sat Aug 28 02:14:22 CST 2021 Framework: .NET 6.0.8 OS/Process: x64/x64 Runtime: volume1/@appstore/EmbyServer/system/System.Private.CoreLib.dll Processor count: 4 Data path: /volume1/Emby Application path: /volume1/@appstore/EmbyServer/system System.Net.Http.HttpRequestException: System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid And as you can see above, some of them don't fail. Could it be some rate-limiting on the image.tmdb.org server side?
Luke 42077 Posted April 12, 2023 Posted April 12, 2023 I would check the time and time zone of your server machine and make sure that's correct. That could cause the NotTimeValid error. I would also read through this:
Q-Droid 989 Posted April 12, 2023 Posted April 12, 2023 Another thing to consider as part of the equation is that image.tmdb.org resolves to dozens of different IPv4 and IPv6 addresses and multiple CDNs. It's random (they rotate) which might coincide with the intermittent nature of the problem. The error could be thrown only by one or a few out of the many endpoints but without knowing where the call went (specific endpoint) it's hard to narrow it down.
bo83_emby 3 Posted April 12, 2023 Posted April 12, 2023 Thanks for the hint about the other post which is identical. I wasn't aware of the possibility to update to DSM7. Trying now the upgrade ... fingers crossed.
Happy2Play 9780 Posted April 12, 2023 Posted April 12, 2023 5 minutes ago, bo83_emby said: Thanks for the hint about the other post which is identical. I wasn't aware of the possibility to update to DSM7. Trying now the upgrade ... fingers crossed. Hopefully you have looks over this topic as DSM 7 is a major change.
bo83_emby 3 Posted April 12, 2023 Posted April 12, 2023 Fully upgraded and seems to work now! ... for now Thanks. 1 1
Carlo 4560 Posted April 13, 2023 Posted April 13, 2023 @bo83_embyDid you use the "DSM 6 to DSM 7 Emby Migration Instructions" guide mentioned above?
Happy2Play 9780 Posted April 14, 2023 Posted April 14, 2023 Suggests DSM 6 certificates/SSL features are no longer compatible or at least its Let's Encrypt certs. Or this was needed as updating DSM will update all certs. How to register or renew the Let’s Encrypt certificate on Synology DSM 6.2.3 and below
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now