Sonarr/Radarr (probably other *arr) jails unable to verify SSL certificates after latest update

[mainstream]

This solved my issues, thanks a ton. This costed me a few days lol.

 

[julesq]

for some reason this problem just popped up for me....thanks @SlackerDude that fix worked perfectly, saved me a lot of headache!

 

[ramib]

This is known issue with the FreeBSD's Mono 6.8 package that is missing it's root CA store, as the cert-sync and mozroots tools write to /usr/share (which is mounted as RO in jails) - https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=258709

A quick fix for this is to copy the trusted root store from a jail after using cert-sync or mozroots for example:

iocage console sonarr
mozsync --import --sync
logout
cp -R /mnt/iocage/jails/sonarr/root/root/.config/.mono/* /mnt/iocage/releases/12.2-RELEASE/root/usr/share/.mono

I expect this is NOT a good fix, but it works around the issue in the interim; the bugzilla changes the path to usr/local/share, I am not

There was a similar thread opened and was incorrectly closed, hence a this thread.

I copied the following
/usr/local/share/sonarr
/usr/local/sonarr
/usr/local/etc/rc.d/sonarr
removed mono and sonarr and install mono 5.10
put the directories back , workaround but works fine
Ignore the warning to update to mono 5.20 (might work also but I don't care now)

 

[paradoxiom]

I found this worked for me:
Certificate fix for Jackett, Sonarr, & Radarr
Run these two lines from inside the jail shell: ( wget was not installed in my jails)

Code:

pkg install wget

Code:

wget -O - https://curl.haxx.se/ca/cacert.pem | cert-sync --user /dev/stdin

Stop the jail
and then...
This from inside the TrueNAS shell:

Code:

cp -R /mnt/media/iocage/jails/jackett_2021/root/root/.config/.mono/ /mnt/media/iocage/releases/12.2-RELEASE/root/usr/share/.mono

Code:

cp -R /mnt/media/iocage/jails/radarr_2021/root/root/.config/.mono/ /mnt/media/iocage/releases/12.2-RELEASE/root/usr/share/.mono

Code:

cp -R /mnt/media/iocage/jails/sonarr_2021/root/root/.config/.mono/ /mnt/media/iocage/releases/12.2-RELEASE/root/usr/share/.mono

I get to the commands outside the shell;

I have tried changing 12.2-RELEASE to 13 and so on.

 

[Jonus3000]

I get to the commands outside the shell;
View attachment 53669

I have tried changing 12.2-RELEASE to 13 and so on.

you need to replace "media" with the name of your storage pool for this to work and "Sonarr_new" with your jail name. I followed this and was back up and running.

 

[Xenouniv3rse]

I found this worked for me:
Certificate fix for Jackett, Sonarr, & Radarr
Run these two lines from inside the jail shell: ( wget was not installed in my jails)

Code:

pkg install wget

Code:

wget -O - https://curl.haxx.se/ca/cacert.pem | cert-sync --user /dev/stdin

Stop the jail
and then...
This from inside the TrueNAS shell:

Code:

cp -R /mnt/media/iocage/jails/jackett_2021/root/root/.config/.mono/ /mnt/media/iocage/releases/12.2-RELEASE/root/usr/share/.mono

Code:

cp -R /mnt/media/iocage/jails/radarr_2021/root/root/.config/.mono/ /mnt/media/iocage/releases/12.2-RELEASE/root/usr/share/.mono

Code:

cp -R /mnt/media/iocage/jails/sonarr_2021/root/root/.config/.mono/ /mnt/media/iocage/releases/12.2-RELEASE/root/usr/share/.mono

Hi. I assume we have to modify directories to match our systems right ?

 

[paradoxiom]

you need to replace "media" with the name of your storage pool for this to work and "Sonarr_new" with your jail name. I followed this and was back up and running.

Thanks, obvious mistake, I've done it now but it didn't seem to change anything for me.

 

[Xenouniv3rse]

Thanks, obvious mistake, I've done it now but it didn't seem to change anything for me.

This also didnt work for me. Below is how I got it working.

I created a fresh Jail inside Truenas and called it Sonarr+Jackett with standard setting using DHCP.

I followed the following link to install Sonarr inside that jail:
https://www.digimoot.com/truenas-sonarr-v3/

Then i followed the following link to install Jakkett in the same jail:
https://www.digimoot.com/truenas-jackett-manual-install/

In my experience installing with the plugins dont work as great.

I also changed the link to localhost.

I hope this helps

 

[paradoxiom]

This also didnt work for me. Below is how I got it working.

I created a fresh Jail inside Truenas and called it Sonarr+Jackett with standard setting using DHCP.

I followed the following link to install Sonarr inside that jail:
https://www.digimoot.com/truenas-sonarr-v3/

Then i followed the following link to install Jakkett in the same jail:
https://www.digimoot.com/truenas-jackett-manual-install/

In my experience installing with the plugins dont work as great.

I also changed the link to localhost.
View attachment 53822

I hope this helps

Thanks I'll give it a go. However, I use Prowlarr not Jackett - is that why I'm getting these errors? I don't get them in Radarr w/Prowlarr.

 

[Xenouniv3rse]

Thanks I'll give it a go. However, I use Prowlarr not Jackett - is that why I'm getting these errors? I don't get them in Radarr w/Prowlarr.

I have no idea, never user Prowlarr. I guess as long as you can copy a Torznas link and the API key you should be fine

 

[paradoxiom]

that method is really old and tedious, does anyone know why pkg install sonarr is broken like this?

 

[mistermanko]

that method is really old and tedious, does anyone know why pkg install sonarr is broken like this?

Is it? Did you try switching to the "latest" release channel?

 

[paradoxiom]

That's the first thing I am doing every time I make a jail in v13 now - (why is it not latest by default btw?)

 

[Xenouniv3rse]

W

that method is really old and tedious, does anyone know why pkg install sonarr is broken like this?

What do you mean really old? Little over 6 month ago. And its not tedious. Copy and paste and it works. pkg install sonarr works perfectly fine

 

[paradoxiom]

I just tried again, and I'm getting this ssl certificate error using the latest pkg repo. So.. I mean isn't that what that this thread is about? it's not like i'm coming here with some new issue.

Just tried again from scratch, soon as I load it up I see this;

installed from latest pkg

 

[msbxa]

For all the above methods I couldn't be able to make it work and the only way that works was to refer back to

Mono v5.20. Maybe try them later when I have time.

 

[mistermanko]

installing the pkg via the latest channel is working flawless for me.

pkg info sonarr:

 

[paradoxiom]

Mine was working with encryption turned on for a while but a couple updates and it broke again so I had to turn it off. Everything else is fine otherwise.

 

[Ray Walker]

@SlackerDude legend, thankyou. This was very frustrating and your solution elegant and thorough.

Cheers.

 

[Devin]

I found this worked for me:
Certificate fix for Jackett, Sonarr, & Radarr
Run these two lines from inside the jail shell: ( wget was not installed in my jails)

Code:

pkg install wget

Code:

wget -O - https://curl.haxx.se/ca/cacert.pem | cert-sync --user /dev/stdin

Stop the jail
and then...
This from inside the TrueNAS shell:

Code:

cp -R /mnt/media/iocage/jails/jackett_2021/root/root/.config/.mono/ /mnt/media/iocage/releases/12.2-RELEASE/root/usr/share/.mono

Code:

cp -R /mnt/media/iocage/jails/radarr_2021/root/root/.config/.mono/ /mnt/media/iocage/releases/12.2-RELEASE/root/usr/share/.mono

Code:

cp -R /mnt/media/iocage/jails/sonarr_2021/root/root/.config/.mono/ /mnt/media/iocage/releases/12.2-RELEASE/root/usr/share/.mono

Went to the trouble of a full password reset and logging into the forums for the first time in years just to say THANK YOU. This was the fix and many thanks for saving me time and stress!