Unusual SSL errors

Help and Support
1

Some strange SSL errors and other weirdness just appeared on my Vero4K.
First, when I switched the display to the Vero’s input, I had a blank screen. I rebooted via SSH.
The remote would not work.
I rebooted again via SSH
The log showed some SSL errors.
There was also some cpu errors.
There are 9 movie entries for something called “stream” in the library, will no date.
I clean the library, and it came up with the “keep or delete” message, but no folder name.

Here are the logs, without debug activated.
I’ll try to delete those stream entries first then submit a debug log.
My other Vero appears to not have been affected.

https://paste.osmc.tv/jenazisazu

There was a SSH update on the Ubuntu storage server yesterday, but those shares use NFS, and are still accessible

2

Try reboot your machine.

Usually SSL errors are time related (i.e. time is not correct on the device, so SSL certificate validation fails).

And make sure the time is correct on your device.

Sam

3

What did you see exactly?

Thanks

Sam

4

: GLES: Enabling VSYNC
2022-02-19 20:45:20.985 T:2714 ERROR : CCurlFile::Stat - Failed: SSL peer certificate or SSH remote key was not OK(60) for https://assets.fanart.tv/fanart/movies/476669/movieposter/the-kings-man-5f468bbc989c1.jpg
2022-02-19 20:45:21.073 T:2735 ERROR : CCurlFile::Stat - Failed: SSL peer certificate or SSH remote key was not OK(60) for https://assets.fanart.tv/fanart/movies/5925/movieposter/the-great-escape-52fb8032aefd8.jpg
2022-02-19 20:45:25.175 T:2713 INFO : AddOnLog: pvr.hdhomerun: Create - Creating the PVR HDHomeRun add-on
2022-02-19 20:45:27.099 T:2721 ERROR : OpenConnection - could not opening a connection to the CEC adapter

I tracked the “stream” library entries to one movie on my only win7 samba share. Dismounted it, ran a file check, no errors …but I moved it off the drive anyways, and rebooted the Win7 server.
Ran another clean, and all was good.

Still can’t get any fanart for those 2 movies however…even after refreshing from internet. Looks like the error is on their end.

5

Those two fanart links show me a picture here.

Perhaps it’s DNS related?
Can you access them from your PC?

Could be HDMI cable related or your TV doesn’t support CEC.
You could also try power everything off at the mains for a minute. But if you’re not using CEC – it doesn’t matter.

Sam

6

Ya, I tried those links also, and got the images.
So I just tried refreshing the info via internet, and get the same SSL/SSH errors.
Also did a full system power cycle…same SSL/SSH errors when trying to update information.

I’ll check my other Vero next.

7

Seems some root cert issue if you try wget on OSMC you get error.

wget https://assets.fanart.tv/fanart/movies/476669/movieposter/the-kings-man-5f468bbc989c1.jpg
--2022-02-20 11:54:43--  https://assets.fanart.tv/fanart/movies/476669/movieposter/the-kings-man-5f468bbc989c1.jpg
Resolving assets.fanart.tv (assets.fanart.tv)... 163.172.219.181
Connecting to assets.fanart.tv (assets.fanart.tv)|163.172.219.181|:443... connected.
ERROR: The certificate of ‘assets.fanart.tv’ is not trusted.
ERROR: The certificate of ‘assets.fanart.tv’ doesn't have a known issuer.

And if you do it on Ubuntu you get error

wget https://assets.fanart.tv/fanart/movies/476669/movieposter/the-kings-man-5f468bbc989c1.jpg
--2022-02-20 11:56:04--  https://assets.fanart.tv/fanart/movies/476669/movieposter/the-kings-man-5f468bbc989c1.jpg
Resolving assets.fanart.tv (assets.fanart.tv)... 163.172.219.181
Connecting to assets.fanart.tv (assets.fanart.tv)|163.172.219.181|:443... connected.
ERROR: cannot verify assets.fanart.tv's certificate, issued by ‘CN=ZeroSSL RSA Domain Secure Site CA,O=ZeroSSL,C=AT’:
  Unable to locally verify the issuer's authority.
To connect to assets.fanart.tv insecurely, use `--no-check-certificate'.
8

That’s what I get also.
Guess we just wait it out for now.

9

Yeah a bit strange what’s going on there, let’s see if it sort out itself in 24 hours.

10

Waiting was the right choice.
Looks like Fanart has fixed their SSL certificate.