Support Forum

FWIW: I'm a bit surprised about https://forums.sabnzbd.org/. Of course it's not a NZB source site, but apparantly python 2.7.9 thinks is not a valid SSL certificate, whereas Chromium is not complaining. Curl seems to agree with python 2.7.9: Unfortunately system root certificates for Python are not...

Based on the PEP, I would expect that the platform, so OS/Libaries (and not SABnzbd) should provide and take care of the root certificates? Except when they're not. Also, many platforms don't have 2.7.9 (none of the embedded platforms and not OSX) That leaves recent Ubuntus and maybe Windows (I'll ...

Using SABnzbd in an environment with a captive portal? Somehow that sounds awkward to me, bandwidth-hoggers like SABnzbd in such an environment? :) Let me explain the backstory here :) Sabnzbd also runs on my laptop, while I only download when I'm at home (I automatically pause it when I'm not at h...

It just occurred to me that there's one scenario you might want to keep in mind, captive portals. In some cases you will temporarily see a different certificate without it being permanent. Not sure how you are planning to implement it exactly but mapping a certificate to a domain would probably caus...

Personally I'd like to see the option of storing the certificate on first usage (for unknown/self-signed ones) and just asking again if it would change. But that's probably going to be a lot of work since it also requires user-interface work. Having a configurable list of hostnames excluded from cer...

sander wrote:... but then I have to deep-dive into the SAB code ...

No, it's not that complicated

https://github.com/sabnzbd/sabnzbd/blob ... er.py#L108

OK, workaround created in the SABnzbd code: FYI: the try/except is needed for python versions < 2.7.9 that don't know ssl._create_unverified_context A better solution might be something along the lines of: if hasattr(ssl, '_create_unverified_context'): ... The clean solution would be to put this in...

If that's the case than I wonder why the development version of sabnzbd does download nzb's from this host while the master and 0.7.x branch didn't. Note that I cannot do a full test here, it did download the nzb's but it's not actually downloading through NNTP due to different SSL issues :P Or at l...

Well, initially my problem was an incorrect hostname. After fixing that I got the error because of SNI (I'm guesing) which is apparently fixed in the current develop branch. Perhaps this change fixed it? https://github.com/sabnzbd/sabnzbd/commit/5bed2e6b682c83d83eaaa86218eabca03b72bfb6 Changes to th...

After a bit of research I found out that it's even more widespread. On OS X with Python 2.7.9 it's impossible to download from indexers using self-signed (anything not in the system CA) certificates.

[edit]Just tried the latest develop branch, works without a problem now

Just a heads up, it's not just FreeBSD. I have similar issues on OS X Yosemite, I'll try to debug further but I do think the logging patch should be included in Sabnzbd to make debugging easier. The "No response from indexer, retry after 60 sec" error is just plain wrong. The actual Certif...

Fantastic! I love it, the lack of this extension was one of the main reasons that I still use Chrome regularly.

Works like a charm, thank you!

WoLpH wrote:This looks like a great project binhex.

Just wondering though, where do you have your code repository? Would be nice to be able to fork it to add more features

Bump

Is it available somewhere on github?

This looks like a great project binhex.

Just wondering though, where do you have your code repository? Would be nice to be able to fork it to add more features

Ok, I've got some debug logs now. It's completely filled with messages like this (slightly anonymized) 2011-03-12 01:43:43,197::DEBUG::[trylist:50] Appending ssl.news.server.com:443 to .__try_list 2011-03-12 01:43:43,198::INFO::[decoder:181] => missing from all servers, discarding 2011-03-12 01:43:4...