LinHES Forums
http://forum.linhes.org/

SSL Error in Kodi
http://forum.linhes.org/viewtopic.php?f=21&t=24204
Page 1 of 1

Author:  nicom [ Fri Jul 17, 2015 6:42 pm ]
Post subject:  SSL Error in Kodi

I have recently discovered the wonders of using Kodi for TV catchup services here in Australia. All channels work well except for channel 7 (Plus7) for which I get the following error
Code:
<urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate
verify failed (_ssl.c:581)>
make_series_list (31) - Unable to fetch series listing
Would you like the automatically report this error?
It also generated the attached crash log file.

I also have 2 other computers running Linux Mint and in both of them the system in Kodi works fine. Their version of openSSL is 1.0.1f whereas the LinHES version is 1.0.1j. During my initial investigations someone suggested the problem was with the newer versions of openSSL so I tried installing version 1.0.1g from the LinHES R8.1 repo but that did not help.

Has anyone else had similar issues streaming in Kodi?
Does LinHES need a different version of openSSL?

Author:  nicom [ Sun Jul 26, 2015 12:55 am ]
Post subject:  Re: SSL Error in Kodi

Well I think I have solved it. From my reading on the subject I gather there is a problem with the way python handles SSL after the heartbleed vulnerability. So my way around it was to downgrade python from 2.7.9 to 2.7.3. Both versions are in the core repo so it was very easy.

I have only done it on a test version running in virtualbox. Can anyone see any problems with doing this on my working machine?

Author:  graysky [ Sun Jul 26, 2015 5:03 am ]
Post subject:  Re: SSL Error in Kodi

Does kodi need to be rebuilt against the new package maybe?

Author:  mattbatt [ Sun Jul 26, 2015 8:07 am ]
Post subject:  Re: SSL Error in Kodi

Did you mean a new version of python or OpenSSL Graysky?

With all the security vulnerabilities discovered in the last 2 years I'd prefer it on a newer version of Open SSL. Amazon went so far as to write their own to reduce the code from 500,000 lines to 70,000 lines https://blogs.aws.amazon.com/security/p ... ementation

Author:  nicom [ Sun Jul 26, 2015 4:58 pm ]
Post subject:  Re: SSL Error in Kodi

In my research of the subject I found this. http://stackoverflow.com/a/27826829/3081018
I am afraid it is well beyond my understanding but does describe the way certificates should be handled. The last sentence
Quote:
This is a long known bug and there exist patches and hopefully the issue if finally addressed in OpenSSL 1.0.2 with the introduction of the X509_V_FLAG_TRUSTED_FIRST option.

indicates that maybe a newer version of OpenSSL would solve it. I tried that on a machine with Linux Mint by compiling it myself and totally broke the installation so I won't attempt it in LinHES.

Page 1 of 1 All times are UTC - 6 hours
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/