SSL errors on rpi4

Help and Support Raspberry Pi
1

Getting SSL errors but only on a few websites, eg
curl “https://audiobookbay.lu”
curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to audiobookbay.lu:443

The same curl command works perfectly on my Vero V

Is this a known issue with a workaround, or any idea where to start looking, thanks

2

Could be outdated SSL certs, try staging

Hi

Hopefully the issue is now addressed with the following commit:

I’d appreciate it if you could test this and provide feedback before we potentially release this as an update to other users. To test this update:

  1. Login via the command line
  2. Run the following command to add the staging repository:
    echo 'deb http://apt.osmc.tv bullseye-devel main' | sudo tee /etc/apt/sources.list.d/osmc-devel.list
  3. Run the following commands to update: sudo apt-get update && sudo apt-get dist-upgrade && reboot
  4. Your system should have have received the update.

Please see if the issue is resolved.

I also recommend you remove /etc/apt/sources.list.d/osmc-devel.list after updating.

This will deactivate the staging repository. You can do so with the following command:
sudo rm /etc/apt/sources.list.d/osmc-devel.list.

Please note that we will automatically disable this update channel after 14 days on your device in case you forget to do so to ensure that your system reverts to the stable update channel.

3

Is the time correct on your Pi 4?

4

Good advice, but this will lead to an HTTPS mirror (if I recall correctly), so won’t work.

What version of OSMC are you running on the Pi 4?

I know there is a CloudFlare issue causing SSL issues under Kodi for some time now and it is actively being discussed there.

Sam

5

Linux kodi 5.15.92-1-osmc #1 SMP PREEMPT Tue Jul 25 00:03:42 UTC 2023 aarch64 GNU/Linux

Time is correct

Weird that it’s only affecting some sites, other SSL connections are fine. The Vero V is on the same network and has no SSL issues

6

Thanks for confirming.

Same servers? Resolving to same IPs?

If so, ping the hostname on a Vero and ping it on a Pi 4 and see if DNS resolves the same.

Sam

7

Hmm, interesting. Ping isn’t working on either machine for this site…

PING audiobookbay.lu (176.97.124.219) 56(84) bytes of data.

— audiobookbay.lu ping statistics —
8 packets transmitted, 0 received, 100% packet loss, time 7312ms

curl “https://audiobookbay.lu”
works as expected on Vero V and returns html,
SSL errors on pi4

Both machines resolve to the same IP address

9

What happens if you use curl -k https://audiobookbay.lu

10

Same response
osmc@kodi:~$ curl -k https://audiobookbay.lu
curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to audiobookbay.lu:443

Also fails with IP instead of hostname
curl -k https://176.97.124.219
curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to 176.97.124.219:443