Page 1 of 1

SSL warning since last update

Posted: February 12th, 2017, 11:05 pm
by Banshee1971
Since the latest release, i notice this error message everytime i access Sabnzb with https
I use starssl certificate. Was working ok, before the latest version of Sabnzb (under Windows 10)
I notice also the same behavior under Sabnzb for synology, after i update Sabnzb.



[12/Feb/2017:22:54:16] ENGINE Error in HTTPServer.tick Traceback (most recent call last): File "cherrypy\wsgiserver\__init__.pyo", line 2024, in start File "cherrypy\wsgiserver\__init__.pyo", line 2091, in tick File "cherrypy\wsgiserver\ssl_builtin.pyo", line 67, in wrap File "ssl.pyo", line 363, in wrap_socket File "ssl.pyo", line 611, in __init__ File "ssl.pyo", line 840, in do_handshake SSLError: [SSL: SSLV3_ALERT_CERTIFICATE_UNKNOWN] sslv3 alert certificate unknown (_ssl.c:661)

Re: SSL warning since last update

Posted: February 13th, 2017, 2:41 am
by safihre
I think it's because StartSSL is not trusted authority anymore after they screwed up:
https://blog.mozilla.org/security/2016/ ... tificates/

Even though you get this warning, it connects just fine?

Re: SSL warning since last update

Posted: July 26th, 2017, 7:45 am
by didierg
I use SABnzbd 2.2.0Beta2 on Fedora 26 and I also get warning message SABnzbd/cherrypy/wsgiserver at startup but I can use SABznbd with no problem.

I had same messages with previous SANnzbd version.

As new user on this forum i can't include these messages in this post "New users are not allowed to post links".

Re: SSL warning since last update

Posted: July 26th, 2017, 7:59 am
by safihre
Try again to post a link? Otherwise remove any http or www parts from the link.
Would like to see the whole error message.

Re: SSL warning since last update

Posted: July 26th, 2017, 8:41 am
by didierg
I am unable to paste warning messages on forum

Remove spaces and prefixe with h-t-t-p-s

paste. fedoraproject. org/paste/fzjCZYle0TS9Wvz0~0zkSg/raw

Re: SSL warning since last update

Posted: July 26th, 2017, 9:29 am
by safihre

Code: Select all

Traceback (most recent call last):
  File "/usr/share/SABnzbd/cherrypy/wsgiserver/__init__.py", line 2025, in start
    self.tick()
  File "/usr/share/SABnzbd/cherrypy/wsgiserver/__init__.py", line 2092, in tick
    s, ssl_env = self.ssl_adapter.wrap(s)
  File "/usr/share/SABnzbd/cherrypy/wsgiserver/ssl_builtin.py", line 67, in wrap
    server_side=True)
  File "/usr/lib64/python2.7/ssl.py", line 363, in wrap_socket
    _context=self)
  File "/usr/lib64/python2.7/ssl.py", line 611, in __init__
    self.do_handshake()
  File "/usr/lib64/python2.7/ssl.py", line 840, in do_handshake
    self._sslobj.do_handshake()
error: [Errno 0] Error
Aah, yes this one we cannot catch. It's because your OpenSSL version is newer than what Python 2.7 knows..

Re: SSL warning since last update

Posted: July 26th, 2017, 9:43 am
by safihre
Correction: we can catch this error and we will.
Will put the patch in 2.2.0.

Re: SSL warning since last update

Posted: July 28th, 2017, 12:52 am
by didierg
I just got SABnzbd-2.2.0RC1 and tested it.

Warning messages are always present.

Re: SSL warning since last update

Posted: July 28th, 2017, 12:58 am
by safihre
Really? Okay then I cannot do anything about it..