Sonarr - Failing SSL to Indexer

[djh_au]

Hi All,

I upgraded Sonar today under 12.0U6 and have hit the following issue.

2021-10-13 12:03:30.8|Error|X509CertificateValidationService|Certificate validation for https://api.nzbgeek.info/api?t=caps&apikey=(removed) failed. RemoteCertificateChainErrors
2021-10-13 12:03:32.5|Error|X509CertificateValidationService|Certificate validation for https://api.nzbgeek.info/api?t=caps&apikey=(removed) failed. RemoteCertificateChainErrors
2021-10-13 12:03:32.5|Warn|Newznab|Unable to connect to indexer

[v3.0.6.1342] System.Net.WebException: Error: TrustFailure (Authentication failed, see inner exception.): 'https://api.nzbgeek.info/api?t=caps&apikey=(removed) ---> System.Net.WebException: Error: TrustFailure (Authentication failed, see inner exception.) ---> System.Security.Authentication.AuthenticationException: Authentication failed, see inner exception. ---> Mono.Btls.MonoBtlsException: Ssl error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
at /wrkdirs/usr/ports/lang/mono6.8/work/mono-6.8.0.123/external/boringssl/ssl/handshake_client.c:1132
at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00048] in <2deb8ccd8f0546038e28d46e7bcc1998>:0
at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status, System.Boolean renegotiate) [0x000da] in <2deb8ccd8f0546038e28d46e7bcc1998>:0
at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus,bool)
at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <2deb8ccd8f0546038e28d46e7bcc1998>:0
at Mono.Net.Security.AsyncProtocolRequest.ProcessOperation (System.Threading.CancellationToken cancellationToken) [0x000fc] in <2deb8ccd8f0546038e28d46e7bcc1998>:0
--- End of inner exception stack trace ---


Is this a certificate issue in the Sonarr plugin or is it the nzbgeek site that is broken?

Ta

 

[jgreco]

I don't really know anything about Sonarr, but this is going to be related to the OpenSSL 1.0.2 problem with LetsEncrypt.

Forum discussion on this is being held over at:

SSL certificate problem: certificate has expired -- the OpenSSL 1.0.2 vs LetsEncrypt issue

Posted in response to a staff request, this is intended to help answer the "certificate is expired" issues. SSL underpins most network session security on the Internet. Historically, this was implemented with self-signed certificates (a bad idea), or through commercial certificate authorities...

www.truenas.com

and I'm going to ask you to continue any discussion there, so that everyone can easily get answers for all their package-related issues in addition.