spksrc icon indicating copy to clipboard operation
spksrc copied to clipboard

Published 20 hours ago • verified publisher icon SynoCommunity

Sonarr 3.0.6.1342 - Certificate validation errors after updating to Mono 5.20.1.34-18

Open mreid-tt opened this issue 2 years ago • 39 comments

Setup

Package Name: Sonarr Package Version: 20210717-19

NAS Model: DS916+ NAS Architecture: INTEL Pentium N3710 DSM version: DSM 7.0.1-42218

Expected behavior

Following the update of Mono to version 5.20.1.34-18, Sonarr is restarted. Once restarted, I should be able to check for updates without error from System -> Updates

Actual behavior

On checking for updates I only get an error: Failed to fetch updates I also note in the System -> Events a number of X509CertificateValidationService and SonarrErrorPipeline errors

Steps to reproduce

1. Update Mono to latest version 5.20.1.34-18 2. Sonarr reboots as a dependent package 3. Errors show in the System -> Events

Package log

_Installer log: find logfile /var/log/packages/{package}.log, for DSM<6: /var/packages/{package}/target/var/{package}_installer.log and protocol in Package Center. You find service log and other log files in /var/packages/{package}/target/var. _

nzbdrone_install.log

Wed Apr 21 20:14:15 -04 2021
===> Step preinst. USER=nzbdrone GROUP=sc-download SHARE_PATH=
Wed Apr 21 20:14:19 -04 2021
===> Step postinst. USER=nzbdrone GROUP=sc-download SHARE_PATH=
Installing service configuration /var/packages/nzbdrone/conf/nzbdrone.sc
Adding 'sc-nzbdrone' to 'sc-download'
Group Name: [sc-download]
Group Type: [AUTH_LOCAL]
Group ID:   [65542]
Group Members: 
0:[sc-transmission]
1:[sc-sabnzbd]
2:[sc-radarr]
3:[sc-nzbdrone]
Invoke service_postinst
Granting 'sc-nzbdrone' unix ownership on /volume1/@appstore/nzbdrone/var/.config
Granting 'sc-nzbdrone' unix ownership on /volume1/@appstore/nzbdrone/var
Thu Apr 22 05:09:28 -04 2021
===> Step preuninst. USER=nzbdrone GROUP=sc-download SHARE_PATH=
Removing service configuration nzbdrone.sc
Thu Apr 22 05:09:31 -04 2021
===> Step postuninst. USER=nzbdrone GROUP=sc-download SHARE_PATH=
Removing user sc-nzbdrone
Thu Apr 22 05:11:53 -04 2021
===> Step preinst. USER=nzbdrone GROUP=sc-download SHARE_PATH=
Thu Apr 22 05:11:55 -04 2021
===> Step postinst. USER=nzbdrone GROUP=sc-download SHARE_PATH=
Installing service configuration /var/packages/nzbdrone/conf/nzbdrone.sc
Adding 'sc-nzbdrone' to 'sc-download'
Group Name: [sc-download]
Group Type: [AUTH_LOCAL]
Group ID:   [65542]
Group Members: 
0:[sc-transmission]
1:[sc-sabnzbd]
2:[sc-radarr]
3:[sc-lidarr]
4:[sc-nzbdrone]
Invoke service_postinst
Granting 'sc-nzbdrone' unix ownership on /volume1/@appstore/nzbdrone/var/.config

nzbdrone.log

Tue Jan  4 08:09:15 -04 2022
Starting nzbdrone command env PATH=/var/packages/mono/target/bin:/volume1/@appstore/nzbdrone/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/syno/sbin:/usr/syno/bin:/usr/local/sbin:/usr/local/bin HOME=/volume1/@appdata/nzbdrone LD_LIBRARY_PATH=/volume1/@appstore/nzbdrone/lib /var/packages/mono/target/bin/mono /volume1/@appstore/nzbdrone/share/Sonarr/Sonarr.exe 
[Info] Bootstrap: Starting Sonarr - /volume1/@appstore/nzbdrone/share/Sonarr/Sonarr.exe - Version 3.0.6.1342 
[Info] Router: Application mode: Interactive 
[Info] MigrationLogger: *** Checking database for required migrations data source=/volume1/@appdata/nzbdrone/.config/Sonarr/sonarr.db;cache size=-10000;datetimekind=Utc;journal mode=Wal;pooling=True;version=3 *** 
[Info] MigrationLogger: *** Checking database for required migrations data source=/volume1/@appdata/nzbdrone/.config/Sonarr/logs.db;cache size=-10000;datetimekind=Utc;journal mode=Wal;pooling=True;version=3 *** 
[Info] OwinHostController: Listening on the following URLs: 
[Info] OwinHostController:   http://*:8989/ 
[Info] SonarrBootstrapper: Starting Web Server 
[Warn] MonoDebugCheck: Mono is not running with --debug switch 
[Error] X509CertificateValidationService: Certificate validation for https://services.sonarr.tv/v1/time failed. RemoteCertificateChainErrors 
[Error] TaskExtensions: Task Error 

[v3.0.6.1342] System.Net.WebException: Error: TrustFailure (Authentication failed, see inner exception.): 'https://services.sonarr.tv/v1/time' ---> System.Net.WebException: Error: TrustFailure (Authentication failed, see inner exception.) ---> System.Security.Authentication.AuthenticationException: Authentication failed, see inner exception. ---> Mono.Btls.MonoBtlsException: Ssl error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
  at /spksrc/spk/mono/work-x64-7.0/mono-5.20.1.34/external/boringssl/ssl/handshake_client.c:1132
  at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00038] in <c5f4e317158343a5916a953327f92540>:0 
  at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status, System.Boolean renegotiate) [0x000a1] in <c5f4e317158343a5916a953327f92540>:0 
  at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus,bool)
  at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <c5f4e317158343a5916a953327f92540>:0 
  at Mono.Net.Security.AsyncProtocolRequest.ProcessOperation (System.Threading.CancellationToken cancellationToken) [0x000ff] in <c5f4e317158343a5916a953327f92540>:0 
  at Mono.Net.Security.AsyncProtocolRequest.StartOperation (System.Threading.CancellationToken cancellationToken) [0x0008b] in <c5f4e317158343a5916a953327f92540>:0 
   --- End of inner exception stack trace ---
  at Mono.Net.Security.MobileAuthenticatedStream.ProcessAuthentication (System.Boolean runSynchronously, Mono.Net.Security.MonoSslAuthenticationOptions options, System.Threading.CancellationToken cancellationToken) [0x00252] in <c5f4e317158343a5916a953327f92540>:0 
  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Net.WebConnectionTunnel tunnel, System.Threading.CancellationToken cancellationToken) [0x00126] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x001ba] in <c5f4e317158343a5916a953327f92540>:0 
   --- End of inner exception stack trace ---
  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x0021a] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.WebConnection.InitConnection (System.Net.WebOperation operation, System.Threading.CancellationToken cancellationToken) [0x00141] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.WebOperation.Run () [0x0009a] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.WebCompletionSource`1[T].WaitForCompletion () [0x00094] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.HttpWebRequest.RunWithTimeoutWorker[T] (System.Threading.Tasks.Task`1[TResult] workerTask, System.Int32 timeout, System.Action abort, System.Func`1[TResult] aborted, System.Threading.CancellationTokenSource cts) [0x000f8] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.HttpWebRequest.GetResponse () [0x00016] in <c5f4e317158343a5916a953327f92540>:0 
  at NzbDrone.Common.Http.Dispatchers.ManagedHttpDispatcher.GetResponse (NzbDrone.Common.Http.HttpRequest request, System.Net.CookieContainer cookies) [0x00123] in <a1cd7a1bf9df40cfa6971ab77142a163>:0 
   --- End of inner exception stack trace ---
  at NzbDrone.Common.Http.Dispatchers.ManagedHttpDispatcher.GetResponse (NzbDrone.Common.Http.HttpRequest request, System.Net.CookieContainer cookies) [0x001ec] in <a1cd7a1bf9df40cfa6971ab77142a163>:0 
  at NzbDrone.Common.Http.HttpClient.ExecuteRequest (NzbDrone.Common.Http.HttpRequest request, System.Net.CookieContainer cookieContainer) [0x00086] in <a1cd7a1bf9df40cfa6971ab77142a163>:0 
  at NzbDrone.Common.Http.HttpClient.Execute (NzbDrone.Common.Http.HttpRequest request) [0x00008] in <a1cd7a1bf9df40cfa6971ab77142a163>:0 
  at NzbDrone.Core.HealthCheck.Checks.SystemTimeCheck.Check () [0x0001b] in <2bc41dd24a3e4961be251c9a3820214d>:0 
  at NzbDrone.Core.HealthCheck.HealthCheckService+<>c.<PerformHealthCheck>b__11_0 (NzbDrone.Core.HealthCheck.IProvideHealthCheck c) [0x00000] in <2bc41dd24a3e4961be251c9a3820214d>:0 
  at System.Linq.Enumerable+SelectArrayIterator`2[TSource,TResult].ToList () [0x00014] in <b6496d2162cd48e1bb4e6753184b3d82>:0 
  at System.Linq.Enumerable.ToList[TSource] (System.Collections.Generic.IEnumerable`1[T] source) [0x0001f] in <b6496d2162cd48e1bb4e6753184b3d82>:0 
  at NzbDrone.Core.HealthCheck.HealthCheckService.PerformHealthCheck (NzbDrone.Core.HealthCheck.IProvideHealthCheck[] healthChecks) [0x00025] in <2bc41dd24a3e4961be251c9a3820214d>:0 
  at NzbDrone.Core.HealthCheck.HealthCheckService.HandleAsync (NzbDrone.Core.Lifecycle.ApplicationStartedEvent message) [0x00000] in <2bc41dd24a3e4961be251c9a3820214d>:0 
  at NzbDrone.Core.Messaging.Events.EventAggregator+<>c__DisplayClass6_2`1[TEvent].<PublishEvent>b__2 () [0x00035] in <2bc41dd24a3e4961be251c9a3820214d>:0 
  at System.Threading.Tasks.Task.InnerInvoke () [0x0000f] in <a7386717e97e435ea6394b4446fbe4ba>:0 
  at System.Threading.Tasks.Task.Execute () [0x00000] in <a7386717e97e435ea6394b4446fbe4ba>:0 

[Error] X509CertificateValidationService: Certificate validation for https://sentry.sonarr.tv/api/8/store/ failed. RemoteCertificateChainErrors 
[Error] X509CertificateValidationService: Certificate validation for https://services.sonarr.tv/v1/update/main/changes?version=3.0.6.1342&os=linux&runtimeVer=5.20.1.34&prevVersion=3.0.6.1335&active=true failed. RemoteCertificateChainErrors 
[Fatal] SonarrErrorPipeline: Request Failed. GET /api/v3/update 

[v3.0.6.1342] System.Net.WebException: Error: TrustFailure (Authentication failed, see inner exception.): 'https://services.sonarr.tv/v1/update/main/changes?version=3.0.6.1342&os=linux&runtimeVer=5.20.1.34&prevVersion=3.0.6.1335&active=true' ---> System.Net.WebException: Error: TrustFailure (Authentication failed, see inner exception.) ---> System.Security.Authentication.AuthenticationException: Authentication failed, see inner exception. ---> Mono.Btls.MonoBtlsException: Ssl error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
  at /spksrc/spk/mono/work-x64-7.0/mono-5.20.1.34/external/boringssl/ssl/handshake_client.c:1132
  at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00038] in <c5f4e317158343a5916a953327f92540>:0 
  at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status, System.Boolean renegotiate) [0x000a1] in <c5f4e317158343a5916a953327f92540>:0 
  at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus,bool)
  at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <c5f4e317158343a5916a953327f92540>:0 
  at Mono.Net.Security.AsyncProtocolRequest.ProcessOperation (System.Threading.CancellationToken cancellationToken) [0x000ff] in <c5f4e317158343a5916a953327f92540>:0 
  at Mono.Net.Security.AsyncProtocolRequest.StartOperation (System.Threading.CancellationToken cancellationToken) [0x0008b] in <c5f4e317158343a5916a953327f92540>:0 
   --- End of inner exception stack trace ---
  at Mono.Net.Security.MobileAuthenticatedStream.ProcessAuthentication (System.Boolean runSynchronously, Mono.Net.Security.MonoSslAuthenticationOptions options, System.Threading.CancellationToken cancellationToken) [0x00252] in <c5f4e317158343a5916a953327f92540>:0 
  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Net.WebConnectionTunnel tunnel, System.Threading.CancellationToken cancellationToken) [0x00126] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x001ba] in <c5f4e317158343a5916a953327f92540>:0 
   --- End of inner exception stack trace ---
  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x0021a] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.WebConnection.InitConnection (System.Net.WebOperation operation, System.Threading.CancellationToken cancellationToken) [0x00141] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.WebOperation.Run () [0x0009a] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.WebCompletionSource`1[T].WaitForCompletion () [0x00094] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.HttpWebRequest.RunWithTimeoutWorker[T] (System.Threading.Tasks.Task`1[TResult] workerTask, System.Int32 timeout, System.Action abort, System.Func`1[TResult] aborted, System.Threading.CancellationTokenSource cts) [0x000f8] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.HttpWebRequest.GetResponse () [0x00016] in <c5f4e317158343a5916a953327f92540>:0 
  at NzbDrone.Common.Http.Dispatchers.ManagedHttpDispatcher.GetResponse (NzbDrone.Common.Http.HttpRequest request, System.Net.CookieContainer cookies) [0x00123] in <a1cd7a1bf9df40cfa6971ab77142a163>:0 
   --- End of inner exception stack trace ---
  at NzbDrone.Common.Http.Dispatchers.ManagedHttpDispatcher.GetResponse (NzbDrone.Common.Http.HttpRequest request, System.Net.CookieContainer cookies) [0x001ec] in <a1cd7a1bf9df40cfa6971ab77142a163>:0 
  at NzbDrone.Common.Http.HttpClient.ExecuteRequest (NzbDrone.Common.Http.HttpRequest request, System.Net.CookieContainer cookieContainer) [0x00086] in <a1cd7a1bf9df40cfa6971ab77142a163>:0 
  at NzbDrone.Common.Http.HttpClient.Execute (NzbDrone.Common.Http.HttpRequest request) [0x00008] in <a1cd7a1bf9df40cfa6971ab77142a163>:0 
  at NzbDrone.Common.Http.HttpClient.Get (NzbDrone.Common.Http.HttpRequest request) [0x00007] in <a1cd7a1bf9df40cfa6971ab77142a163>:0 
  at NzbDrone.Common.Http.HttpClient.Get[T] (NzbDrone.Common.Http.HttpRequest request) [0x00000] in <a1cd7a1bf9df40cfa6971ab77142a163>:0 
  at NzbDrone.Core.Update.UpdatePackageProvider.GetRecentUpdates (System.String branch, System.Version currentVersion, System.Version previousVersion) [0x000c5] in <2bc41dd24a3e4961be251c9a3820214d>:0 
  at NzbDrone.Core.Update.RecentUpdateProvider.GetRecentUpdatePackages () [0x0001e] in <2bc41dd24a3e4961be251c9a3820214d>:0 
  at Sonarr.Api.V3.Update.UpdateModule.GetRecentUpdates () [0x00000] in <ad18c55a15b546f4be48d759c3f955f7>:0 
  at Sonarr.Http.REST.RestModule`1[TResource].<set_GetResourceAll>b__33_0 (System.Object options) [0x00006] in <57e3f71526cd40e1883fbde0844453c7>:0 
  at Nancy.NancyModule+<>c__DisplayClass14_0`1[T].<Get>b__0 (System.Object args) [0x00047] in <e31b230dbd29407fadcc55713e0bbd0f>:0 
  at Nancy.NancyModule+<>c__DisplayClass16_0`1[T].<Get>b__0 (System.Object args, System.Threading.CancellationToken ct) [0x00047] in <e31b230dbd29407fadcc55713e0bbd0f>:0 
  at Nancy.Routing.Route`1[T].Invoke (Nancy.DynamicDictionary parameters, System.Threading.CancellationToken cancellationToken) [0x00017] in <e31b230dbd29407fadcc55713e0bbd0f>:0 
  at Nancy.Routing.DefaultRouteInvoker.Invoke (Nancy.Routing.Route route, System.Threading.CancellationToken cancellationToken, Nancy.DynamicDictionary parameters, Nancy.NancyContext context) [0x00086] in <e31b230dbd29407fadcc55713e0bbd0f>:0 
  at Nancy.Routing.DefaultRequestDispatcher.Dispatch (Nancy.NancyContext context, System.Threading.CancellationToken cancellationToken) [0x002b7] in <e31b230dbd29407fadcc55713e0bbd0f>:0 
  at Nancy.NancyEngine.InvokeRequestLifeCycle (Nancy.NancyContext context, System.Threading.CancellationToken cancellationToken, Nancy.Bootstrapper.IPipelines pipelines) [0x0011d] in <e31b230dbd29407fadcc55713e0bbd0f>:0 

[Error] X509CertificateValidationService: Certificate validation for https://sentry.sonarr.tv/api/8/store/ failed. RemoteCertificateChainErrors 
[Error] X509CertificateValidationService: Certificate validation for https://services.sonarr.tv/v1/update/main/changes?version=3.0.6.1342&os=linux&runtimeVer=5.20.1.34&prevVersion=3.0.6.1335&active=true failed. RemoteCertificateChainErrors 
[Fatal] SonarrErrorPipeline: Request Failed. GET /api/v3/update 

[v3.0.6.1342] System.Net.WebException: Error: TrustFailure (Authentication failed, see inner exception.): 'https://services.sonarr.tv/v1/update/main/changes?version=3.0.6.1342&os=linux&runtimeVer=5.20.1.34&prevVersion=3.0.6.1335&active=true' ---> System.Net.WebException: Error: TrustFailure (Authentication failed, see inner exception.) ---> System.Security.Authentication.AuthenticationException: Authentication failed, see inner exception. ---> Mono.Btls.MonoBtlsException: Ssl error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
  at /spksrc/spk/mono/work-x64-7.0/mono-5.20.1.34/external/boringssl/ssl/handshake_client.c:1132
  at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00038] in <c5f4e317158343a5916a953327f92540>:0 
  at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status, System.Boolean renegotiate) [0x000a1] in <c5f4e317158343a5916a953327f92540>:0 
  at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus,bool)
  at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <c5f4e317158343a5916a953327f92540>:0 
  at Mono.Net.Security.AsyncProtocolRequest.ProcessOperation (System.Threading.CancellationToken cancellationToken) [0x000ff] in <c5f4e317158343a5916a953327f92540>:0 
  at Mono.Net.Security.AsyncProtocolRequest.StartOperation (System.Threading.CancellationToken cancellationToken) [0x0008b] in <c5f4e317158343a5916a953327f92540>:0 
   --- End of inner exception stack trace ---
  at Mono.Net.Security.MobileAuthenticatedStream.ProcessAuthentication (System.Boolean runSynchronously, Mono.Net.Security.MonoSslAuthenticationOptions options, System.Threading.CancellationToken cancellationToken) [0x00252] in <c5f4e317158343a5916a953327f92540>:0 
  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Net.WebConnectionTunnel tunnel, System.Threading.CancellationToken cancellationToken) [0x00126] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x001ba] in <c5f4e317158343a5916a953327f92540>:0 
   --- End of inner exception stack trace ---
  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x0021a] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.WebConnection.InitConnection (System.Net.WebOperation operation, System.Threading.CancellationToken cancellationToken) [0x00141] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.WebOperation.Run () [0x0009a] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.WebCompletionSource`1[T].WaitForCompletion () [0x00094] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.HttpWebRequest.RunWithTimeoutWorker[T] (System.Threading.Tasks.Task`1[TResult] workerTask, System.Int32 timeout, System.Action abort, System.Func`1[TResult] aborted, System.Threading.CancellationTokenSource cts) [0x000f8] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.HttpWebRequest.GetResponse () [0x00016] in <c5f4e317158343a5916a953327f92540>:0 
  at NzbDrone.Common.Http.Dispatchers.ManagedHttpDispatcher.GetResponse (NzbDrone.Common.Http.HttpRequest request, System.Net.CookieContainer cookies) [0x00123] in <a1cd7a1bf9df40cfa6971ab77142a163>:0 
   --- End of inner exception stack trace ---
  at NzbDrone.Common.Http.Dispatchers.ManagedHttpDispatcher.GetResponse (NzbDrone.Common.Http.HttpRequest request, System.Net.CookieContainer cookies) [0x001ec] in <a1cd7a1bf9df40cfa6971ab77142a163>:0 
  at NzbDrone.Common.Http.HttpClient.ExecuteRequest (NzbDrone.Common.Http.HttpRequest request, System.Net.CookieContainer cookieContainer) [0x00086] in <a1cd7a1bf9df40cfa6971ab77142a163>:0 
  at NzbDrone.Common.Http.HttpClient.Execute (NzbDrone.Common.Http.HttpRequest request) [0x00008] in <a1cd7a1bf9df40cfa6971ab77142a163>:0 
  at NzbDrone.Common.Http.HttpClient.Get (NzbDrone.Common.Http.HttpRequest request) [0x00007] in <a1cd7a1bf9df40cfa6971ab77142a163>:0 
  at NzbDrone.Common.Http.HttpClient.Get[T] (NzbDrone.Common.Http.HttpRequest request) [0x00000] in <a1cd7a1bf9df40cfa6971ab77142a163>:0 
  at NzbDrone.Core.Update.UpdatePackageProvider.GetRecentUpdates (System.String branch, System.Version currentVersion, System.Version previousVersion) [0x000c5] in <2bc41dd24a3e4961be251c9a3820214d>:0 
  at NzbDrone.Core.Update.RecentUpdateProvider.GetRecentUpdatePackages () [0x0001e] in <2bc41dd24a3e4961be251c9a3820214d>:0 
  at Sonarr.Api.V3.Update.UpdateModule.GetRecentUpdates () [0x00000] in <ad18c55a15b546f4be48d759c3f955f7>:0 
  at Sonarr.Http.REST.RestModule`1[TResource].<set_GetResourceAll>b__33_0 (System.Object options) [0x00006] in <57e3f71526cd40e1883fbde0844453c7>:0 
  at Nancy.NancyModule+<>c__DisplayClass14_0`1[T].<Get>b__0 (System.Object args) [0x00047] in <e31b230dbd29407fadcc55713e0bbd0f>:0 
  at Nancy.NancyModule+<>c__DisplayClass16_0`1[T].<Get>b__0 (System.Object args, System.Threading.CancellationToken ct) [0x00047] in <e31b230dbd29407fadcc55713e0bbd0f>:0 
  at Nancy.Routing.Route`1[T].Invoke (Nancy.DynamicDictionary parameters, System.Threading.CancellationToken cancellationToken) [0x00017] in <e31b230dbd29407fadcc55713e0bbd0f>:0 
  at Nancy.Routing.DefaultRouteInvoker.Invoke (Nancy.Routing.Route route, System.Threading.CancellationToken cancellationToken, Nancy.DynamicDictionary parameters, Nancy.NancyContext context) [0x00086] in <e31b230dbd29407fadcc55713e0bbd0f>:0 
  at Nancy.Routing.DefaultRequestDispatcher.Dispatch (Nancy.NancyContext context, System.Threading.CancellationToken cancellationToken) [0x002b7] in <e31b230dbd29407fadcc55713e0bbd0f>:0 
  at Nancy.NancyEngine.InvokeRequestLifeCycle (Nancy.NancyContext context, System.Threading.CancellationToken cancellationToken, Nancy.Bootstrapper.IPipelines pipelines) [0x0011d] in <e31b230dbd29407fadcc55713e0bbd0f>:0 

[Error] X509CertificateValidationService: Certificate validation for https://services.sonarr.tv/v1/update/main/changes?version=3.0.6.1342&os=linux&runtimeVer=5.20.1.34&prevVersion=3.0.6.1335&active=true failed. RemoteCertificateChainErrors 
[Fatal] SonarrErrorPipeline: Request Failed. GET /api/v3/update 

[v3.0.6.1342] System.Net.WebException: Error: TrustFailure (Authentication failed, see inner exception.): 'https://services.sonarr.tv/v1/update/main/changes?version=3.0.6.1342&os=linux&runtimeVer=5.20.1.34&prevVersion=3.0.6.1335&active=true' ---> System.Net.WebException: Error: TrustFailure (Authentication failed, see inner exception.) ---> System.Security.Authentication.AuthenticationException: Authentication failed, see inner exception. ---> Mono.Btls.MonoBtlsException: Ssl error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
  at /spksrc/spk/mono/work-x64-7.0/mono-5.20.1.34/external/boringssl/ssl/handshake_client.c:1132
  at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00038] in <c5f4e317158343a5916a953327f92540>:0 
  at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status, System.Boolean renegotiate) [0x000a1] in <c5f4e317158343a5916a953327f92540>:0 
  at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus,bool)
  at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <c5f4e317158343a5916a953327f92540>:0 
  at Mono.Net.Security.AsyncProtocolRequest.ProcessOperation (System.Threading.CancellationToken cancellationToken) [0x000ff] in <c5f4e317158343a5916a953327f92540>:0 
  at Mono.Net.Security.AsyncProtocolRequest.StartOperation (System.Threading.CancellationToken cancellationToken) [0x0008b] in <c5f4e317158343a5916a953327f92540>:0 
   --- End of inner exception stack trace ---
  at Mono.Net.Security.MobileAuthenticatedStream.ProcessAuthentication (System.Boolean runSynchronously, Mono.Net.Security.MonoSslAuthenticationOptions options, System.Threading.CancellationToken cancellationToken) [0x00252] in <c5f4e317158343a5916a953327f92540>:0 
  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Net.WebConnectionTunnel tunnel, System.Threading.CancellationToken cancellationToken) [0x00126] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x001ba] in <c5f4e317158343a5916a953327f92540>:0 
   --- End of inner exception stack trace ---
  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x0021a] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.WebConnection.InitConnection (System.Net.WebOperation operation, System.Threading.CancellationToken cancellationToken) [0x00141] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.WebOperation.Run () [0x0009a] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.WebCompletionSource`1[T].WaitForCompletion () [0x00094] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.HttpWebRequest.RunWithTimeoutWorker[T] (System.Threading.Tasks.Task`1[TResult] workerTask, System.Int32 timeout, System.Action abort, System.Func`1[TResult] aborted, System.Threading.CancellationTokenSource cts) [0x000f8] in <c5f4e317158343a5916a953327f92540>:0 
  at System.Net.HttpWebRequest.GetResponse () [0x00016] in <c5f4e317158343a5916a953327f92540>:0 
  at NzbDrone.Common.Http.Dispatchers.ManagedHttpDispatcher.GetResponse (NzbDrone.Common.Http.HttpRequest request, System.Net.CookieContainer cookies) [0x00123] in <a1cd7a1bf9df40cfa6971ab77142a163>:0 
   --- End of inner exception stack trace ---
  at NzbDrone.Common.Http.Dispatchers.ManagedHttpDispatcher.GetResponse (NzbDrone.Common.Http.HttpRequest request, System.Net.CookieContainer cookies) [0x001ec] in <a1cd7a1bf9df40cfa6971ab77142a163>:0 
  at NzbDrone.Common.Http.HttpClient.ExecuteRequest (NzbDrone.Common.Http.HttpRequest request, System.Net.CookieContainer cookieContainer) [0x00086] in <a1cd7a1bf9df40cfa6971ab77142a163>:0 
  at NzbDrone.Common.Http.HttpClient.Execute (NzbDrone.Common.Http.HttpRequest request) [0x00008] in <a1cd7a1bf9df40cfa6971ab77142a163>:0 
  at NzbDrone.Common.Http.HttpClient.Get (NzbDrone.Common.Http.HttpRequest request) [0x00007] in <a1cd7a1bf9df40cfa6971ab77142a163>:0 
  at NzbDrone.Common.Http.HttpClient.Get[T] (NzbDrone.Common.Http.HttpRequest request) [0x00000] in <a1cd7a1bf9df40cfa6971ab77142a163>:0 
  at NzbDrone.Core.Update.UpdatePackageProvider.GetRecentUpdates (System.String branch, System.Version currentVersion, System.Version previousVersion) [0x000c5] in <2bc41dd24a3e4961be251c9a3820214d>:0 
  at NzbDrone.Core.Update.RecentUpdateProvider.GetRecentUpdatePackages () [0x0001e] in <2bc41dd24a3e4961be251c9a3820214d>:0 
  at Sonarr.Api.V3.Update.UpdateModule.GetRecentUpdates () [0x00000] in <ad18c55a15b546f4be48d759c3f955f7>:0 
  at Sonarr.Http.REST.RestModule`1[TResource].<set_GetResourceAll>b__33_0 (System.Object options) [0x00006] in <57e3f71526cd40e1883fbde0844453c7>:0 
  at Nancy.NancyModule+<>c__DisplayClass14_0`1[T].<Get>b__0 (System.Object args) [0x00047] in <e31b230dbd29407fadcc55713e0bbd0f>:0 
  at Nancy.NancyModule+<>c__DisplayClass16_0`1[T].<Get>b__0 (System.Object args, System.Threading.CancellationToken ct) [0x00047] in <e31b230dbd29407fadcc55713e0bbd0f>:0 
  at Nancy.Routing.Route`1[T].Invoke (Nancy.DynamicDictionary parameters, System.Threading.CancellationToken cancellationToken) [0x00017] in <e31b230dbd29407fadcc55713e0bbd0f>:0 
  at Nancy.Routing.DefaultRouteInvoker.Invoke (Nancy.Routing.Route route, System.Threading.CancellationToken cancellationToken, Nancy.DynamicDictionary parameters, Nancy.NancyContext context) [0x00086] in <e31b230dbd29407fadcc55713e0bbd0f>:0 
  at Nancy.Routing.DefaultRequestDispatcher.Dispatch (Nancy.NancyContext context, System.Threading.CancellationToken cancellationToken) [0x002b7] in <e31b230dbd29407fadcc55713e0bbd0f>:0 
  at Nancy.NancyEngine.InvokeRequestLifeCycle (Nancy.NancyContext context, System.Threading.CancellationToken cancellationToken, Nancy.Bootstrapper.IPipelines pipelines) [0x0011d] in <e31b230dbd29407fadcc55713e0bbd0f>:0 

[Info] RssSyncService: Starting RSS Sync 
[Error] X509CertificateValidationService: Certificate validation for https://api.nzbgeek.info/api?t=caps&apikey=******** failed. RemoteCertificateChainErrors 
[Error] X509CertificateValidationService: Certificate validation for https://api.dognzb.cr/api?t=caps&apikey=******** failed. RemoteCertificateChainErrors 
[Warn] Newznab: NZBgeek  Error: TrustFailure (Authentication failed, see inner exception.): 'https://api.nzbgeek.info/api?t=caps&apikey=********' 
[Warn] Newznab: DOGnzb  Error: TrustFailure (Authentication failed, see inner exception.): 'https://api.dognzb.cr/api?t=caps&apikey=********' 
[Info] DownloadDecisionMaker: No results found 
[Info] RssSyncService: RSS Sync Completed. Reports found: 0, Reports grabbed: 0

Other logs

E.g. /var/log/messages or /var/log/synopkg.log

2022/01/04 07:56:39 download mono https://packages.synocommunity.com/mono/18/mono.v18.f41890%5Bapollolake-avoton-braswell-broadwell-broadwellnk-bromolow-cedarview-denverton-dockerx64-geminilake-grantley-purley-kvmx64-v1000-x86-x86_64%5D.spk?arch=braswell&build=42218 Begin download
2022/01/04 07:56:46 download mono https://packages.synocommunity.com/mono/18/mono.v18.f41890%5Bapollolake-avoton-braswell-broadwell-broadwellnk-bromolow-cedarview-denverton-dockerx64-geminilake-grantley-purley-kvmx64-v1000-x86-x86_64%5D.spk?arch=braswell&build=42218 End download
2022/01/04 08:00:05 upgrade mono: begin to stop packages nzbdrone,mono
2022/01/04 08:00:05 (system) trigger nzbdrone: begin to stop version 20210717-19
2022/01/04 08:00:06 (system) trigger nzbdrone 20210717-19 Begin start-stop-status stop
2022/01/04 08:00:07 (system) trigger nzbdrone 20210717-19 End start-stop-status stop ret=[0]
2022/01/04 08:00:07 Release port-config for nzbdrone when 0x0000 (ready)
2022/01/04 08:00:07 Release port-config for nzbdrone when 0x0000 (done)
2022/01/04 08:00:07 (system) trigger nzbdrone: stop version 20210717-19 successfully, result 0
2022/01/04 08:00:07 upgrade mono: begin to stop version 5.20.1.34-17
2022/01/04 08:00:07 upgrade mono 5.20.1.34-17 Begin start-stop-status stop
2022/01/04 08:00:07 upgrade mono 5.20.1.34-17 End start-stop-status stop ret=[0]
2022/01/04 08:00:07 Release usr-local-linker for mono when 0x0002 (ready)
2022/01/04 08:00:07 Release usr-local-linker for mono when 0x0002 (done)
2022/01/04 08:00:09 upgrade mono: stop version 5.20.1.34-17 successfully, result 0
2022/01/04 08:00:09 upgrade mono 5.20.1.34-17 Begin preupgrade
2022/01/04 08:00:11 upgrade mono 5.20.1.34-17 End preupgrade ret=[0]
2022/01/04 08:00:11 upgrade mono 5.20.1.34-17 Begin preuninst
2022/01/04 08:00:11 upgrade mono 5.20.1.34-17 End preuninst ret=[0]
2022/01/04 08:00:11 Release usr-local-linker for mono when 0x0002 (ready)
2022/01/04 08:00:11 Release usr-local-linker for mono when 0x0002 (done)
2022/01/04 08:00:11 Release systemd-unit for mono when 0x0002 (ready)
2022/01/04 08:00:11 Release systemd-unit for mono when 0x0002 (done)
2022/01/04 08:00:11 upgrade mono 5.20.1.34-17 Begin /bin/rm -rf /volume1/@appstore/mono
2022/01/04 08:00:13 upgrade mono 5.20.1.34-17 End /bin/rm -rf /volume1/@appstore/mono ret=[0]
2022/01/04 08:00:13 upgrade mono 5.20.1.34-17 Begin /bin/rm -rf /volume1/@apptemp/mono
2022/01/04 08:00:13 upgrade mono 5.20.1.34-17 End /bin/rm -rf /volume1/@apptemp/mono ret=[0]
2022/01/04 08:00:13 upgrade mono 5.20.1.34-17 Begin postuninst
2022/01/04 08:00:13 upgrade mono 5.20.1.34-17 End postuninst ret=[0]
2022/01/04 08:00:13 upgrade mono: Uninstall 5.20.1.34-17 successfully
2022/01/04 08:00:13 upgrade mono 5.20.1.34-18 Begin preinst
2022/01/04 08:00:13 upgrade mono 5.20.1.34-18 End preinst ret=[0]
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 Begin /bin/mkdir -p /volume1/@appstore/mono
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 End /bin/mkdir -p /volume1/@appstore/mono ret=[0]
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 Begin /bin/rm -rf /volume1/@appstore/mono
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 End /bin/rm -rf /volume1/@appstore/mono ret=[0]
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 Begin /bin/mv -f /volume1/@tmp/pkginstall/extract.GyCm1s/package /volume1/@appstore/mono
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 End /bin/mv -f /volume1/@tmp/pkginstall/extract.GyCm1s/package /volume1/@appstore/mono ret=[0]
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 Begin /bin/rm -rf /var/packages/mono
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 End /bin/rm -rf /var/packages/mono ret=[0]
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 Begin /bin/mkdir -p /var/packages/mono
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 End /bin/mkdir -p /var/packages/mono ret=[0]
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 Begin /bin/touch /var/packages/mono/installing
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 End /bin/touch /var/packages/mono/installing ret=[0]
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 Begin /bin/mv -f /volume1/@tmp/pkginstall/extract.GyCm1s/INFO /var/packages/mono/INFO
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 End /bin/mv -f /volume1/@tmp/pkginstall/extract.GyCm1s/INFO /var/packages/mono/INFO ret=[0]
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 Begin /bin/rm -rf /var/packages/mono/scripts
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 End /bin/rm -rf /var/packages/mono/scripts ret=[0]
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 Begin /bin/mv -f /volume1/@tmp/pkginstall/extract.GyCm1s/scripts /var/packages/mono/scripts
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 End /bin/mv -f /volume1/@tmp/pkginstall/extract.GyCm1s/scripts /var/packages/mono/scripts ret=[0]
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 Begin /bin/rm -rf /var/packages/mono/WIZARD_UIFILES
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 End /bin/rm -rf /var/packages/mono/WIZARD_UIFILES ret=[0]
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 Begin /bin/mv -f /volume1/@tmp/pkginstall/extract.GyCm1s/WIZARD_UIFILES /var/packages/mono/WIZARD_UIFILES
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 End /bin/mv -f /volume1/@tmp/pkginstall/extract.GyCm1s/WIZARD_UIFILES /var/packages/mono/WIZARD_UIFILES ret=[0]
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 Begin /bin/rm -rf /var/packages/mono/conf
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 End /bin/rm -rf /var/packages/mono/conf ret=[0]
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 Begin /bin/mv -f /volume1/@tmp/pkginstall/extract.GyCm1s/conf /var/packages/mono/conf
2022/01/04 08:00:14 upgrade mono 5.20.1.34-18 End /bin/mv -f /volume1/@tmp/pkginstall/extract.GyCm1s/conf /var/packages/mono/conf ret=[0]
2022/01/04 08:00:15 Acquire systemd-unit for mono when 0x0002 (ready)
2022/01/04 08:00:16 Acquire systemd-unit for mono when 0x0002 (done)
2022/01/04 08:00:17 upgrade mono 5.20.1.34-18 Begin postinst
2022/01/04 08:00:29 upgrade mono 5.20.1.34-18 End postinst ret=[0]
2022/01/04 08:00:29 upgrade mono 5.20.1.34-18 Begin postupgrade
2022/01/04 08:00:30 upgrade mono 5.20.1.34-18 End postupgrade ret=[0]
2022/01/04 08:00:30 upgrade mono: begin to start packages mono,nzbdrone
2022/01/04 08:00:30 upgrade mono: begin to start version 5.20.1.34-18
2022/01/04 08:00:30 Acquire usr-local-linker for mono when 0x0002 (ready)
2022/01/04 08:00:30 Acquire usr-local-linker for mono when 0x0002 (done)
2022/01/04 08:00:30 upgrade mono 5.20.1.34-18 Begin start-stop-status start
2022/01/04 08:00:30 upgrade mono 5.20.1.34-18 End start-stop-status start ret=[0]
2022/01/04 08:00:32 upgrade mono: start version 5.20.1.34-18 successfully, result 0
2022/01/04 08:00:32 (system) trigger nzbdrone: begin to start version 20210717-19
2022/01/04 08:00:32 Acquire port-config for nzbdrone when 0x0000 (ready)
2022/01/04 08:00:32 Acquire port-config for nzbdrone when 0x0000 (done)
2022/01/04 08:00:32 (system) trigger nzbdrone 20210717-19 Begin start-stop-status start
2022/01/04 08:00:48 (system) trigger nzbdrone 20210717-19 End start-stop-status start ret=[0]
2022/01/04 08:00:49 (system) trigger nzbdrone: start version 20210717-19 successfully, result 0
2022/01/04 08:00:49 upgrade mono from 5.20.1.34-17 to 5.20.1.34-18 successfully
2022/01/04 08:09:13 start nzbdrone: begin to stop due to abnormal status
2022/01/04 08:09:13 start nzbdrone: begin to stop version 20210717-19
2022/01/04 08:09:13 start nzbdrone 20210717-19 Begin start-stop-status stop
2022/01/04 08:09:13 start nzbdrone 20210717-19 End start-stop-status stop ret=[0]
2022/01/04 08:09:13 Release port-config for nzbdrone when 0x0008 (ready)
2022/01/04 08:09:13 Release port-config for nzbdrone when 0x0008 (done)
2022/01/04 08:09:14 start nzbdrone: stop version 20210717-19 successfully, result 0
2022/01/04 08:09:14 start nzbdrone: begin to start version 20210717-19
2022/01/04 08:09:14 Acquire port-config for nzbdrone when 0x0008 (ready)
2022/01/04 08:09:14 Acquire port-config for nzbdrone when 0x0008 (done)
2022/01/04 08:09:15 start nzbdrone 20210717-19 Begin start-stop-status start
2022/01/04 08:09:20 start nzbdrone 20210717-19 End start-stop-status start ret=[0]
2022/01/04 08:09:21 start nzbdrone: start version 20210717-19 successfully, result 0

mreid-tt avatar Jan 04 '22 12:01 mreid-tt

Not a bug - you need to sync mono's certs

https://community.synology.com/enu/forum/1/post/148065

bakerboy448 avatar Jan 04 '22 20:01 bakerboy448

a regular installation and update run the following command in service_postinst:

${SYNOPKG_PKGDEST}/bin/cert-sync /etc/ssl/certs/ca-certificates.crt

this is shown in the installer log file like this (upgrade with already uptodate list)

2022/01/04 21:14:28     ===> Step postinst. USER= GROUP= SHARE_PATH=
2022/01/04 21:14:28     Begin save_wizard_variables
2022/01/04 21:14:28     End save_wizard_variables
2022/01/04 21:14:28     Begin service_postinst
Mono Certificate Store Sync - version 5.8.0.108
Populate Mono certificate store from a concatenated list of certificates.
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.

Importing into legacy system store:
I already trust 150, your new list has 150
Import process completed.

Importing into BTLS system store:
I already trust 150, your new list has 150
Import process completed.
2022/01/04 21:14:31     End service_postinst
2022/01/04 21:14:31     upgrade mono 5.8.0.108-11 End postinst ret=[0]
2022/01/04 21:14:31     upgrade mono 5.8.0.108-11 Begin postupgrade
2022/01/04 21:14:31     Begin reload_inst_variables
2022/01/04 21:14:31     End reload_inst_variables
2022/01/04 21:14:31     Begin initialize_variables
2022/01/04 21:14:31     End initialize_variables
2022/01/04 21:14:31     ===> Step postupgrade. USER= GROUP= SHARE_PATH=
2022/01/04 21:14:31     upgrade mono 5.8.0.108-11 End postupgrade ret=[0]

If you want to execute this command manually use /var/packages/mono/target/ for SYNOPKG_PKGDEST, i.e. run /var/packages/mono/target/bin/cert-sync /etc/ssl/certs/ca-certificates.crt

hgy59 avatar Jan 04 '22 20:01 hgy59

mono 5.8 really isn't supported

mono 5.18 or 5.20 are needed

bakerboy448 avatar Jan 04 '22 20:01 bakerboy448

@mreid-tt analyzing your log file above, i am missing the service_postinst logs for mono. probably this is an issue with automatic mono update when installing another package (nzbdrone/sonarr).

Probably you can resolve this, by manually installing (updating) the downloaded mono spk with identical version (5.20.1.34-18).

hgy59 avatar Jan 04 '22 20:01 hgy59

mono 5.8 really isn't supported

mono 5.18 or 5.20 are needed

I know, I know, this is only a sample installation log, that does not depend on mono version.

hgy59 avatar Jan 04 '22 20:01 hgy59

It seems to be an issue on DSM 7

tried the same with mono 5.20.1.34-18 on DS218+ with DSM 7.0.1

2022/01/04 21:45:35 System.UnauthorizedAccessException: Access to the path "/usr/share/.mono" is denied.

here an extract of /var/log/packages/mono.log:

022/01/04 21:45:35     ===> Step postinst. USER= GROUP= SHARE_PATH=
2022/01/04 21:45:35     Begin save_wizard_variables
2022/01/04 21:45:35     End save_wizard_variables
2022/01/04 21:45:35     Begin syno_sync_var_folder
2022/01/04 21:45:35     End syno_sync_var_folder
2022/01/04 21:45:35     Begin service_postinst
2022/01/04 21:45:35     Mono Certificate Store Sync - version 5.20.1.34
2022/01/04 21:45:35     Populate Mono certificate store from a concatenated list of certificates.
2022/01/04 21:45:35     Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.
2022/01/04 21:45:35     Importing into legacy system store:
2022/01/04 21:45:35     I already trust 0, your new list has 138
2022/01/04 21:45:35     Warning: Could not import CN=ACCVRAIZ1, OU=PKIACCV, O=ACCV, C=ES
2022/01/04 21:45:35     System.UnauthorizedAccessException: Access to the path "/usr/share/.mono" is denied.
2022/01/04 21:45:35       at System.IO.Directory.CreateDirectoriesInternal (System.String path) [0x0005e] in <a7386717e97e435ea6394b4446fbe4ba>:0
2022/01/04 21:45:35       at System.IO.Directory.CreateDirectory (System.String path) [0x0008f] in <a7386717e97e435ea6394b4446fbe4ba>:0
2022/01/04 21:45:35       at System.IO.DirectoryInfo.Create () [0x00000] in <a7386717e97e435ea6394b4446fbe4ba>:0
2022/01/04 21:45:35       at (wrapper remoting-invoke-with-check) System.IO.DirectoryInfo.Create()
2022/01/04 21:45:35       at System.IO.Directory.CreateDirectoriesInternal (System.String path) [0x00036] in <a7386717e97e435ea6394b4446fbe4ba>:0
2022/01/04 21:45:35       at System.IO.Directory.CreateDirectory (System.String path) [0x0008f] in <a7386717e97e435ea6394b4446fbe4ba>:0
2022/01/04 21:45:35       at System.IO.DirectoryInfo.Create () [0x00000] in <a7386717e97e435ea6394b4446fbe4ba>:0
2022/01/04 21:45:35       at (wrapper remoting-invoke-with-check) System.IO.DirectoryInfo.Create()
2022/01/04 21:45:35       at System.IO.Directory.CreateDirectoriesInternal (System.String path) [0x00036] in <a7386717e97e435ea6394b4446fbe4ba>:0
2022/01/04 21:45:35       at System.IO.Directory.CreateDirectory (System.String path) [0x0008f] in <a7386717e97e435ea6394b4446fbe4ba>:0
2022/01/04 21:45:35       at Mono.Security.X509.X509Store.CheckStore (System.String path, System.Boolean throwException) [0x00020] in <0a5b7d3822b84f2a96c7f10697a24fe9>:0
2022/01/04 21:45:35       at Mono.Security.X509.X509Store.Import (Mono.Security.X509.X509Certificate certificate) [0x00000] in <0a5b7d3822b84f2a96c7f10697a24fe9>:0
2022/01/04 21:45:35       at Mono.Tools.CertSync.ImportToStore (Mono.Security.X509.X509CertificateCollection roots, Mono.Security.X509.X509Store store) [0x00050] in <a7d568c231944f48bd7618f2ee421b9       4>:0

PS: it is time to port sonarr to .net!

hgy59 avatar Jan 04 '22 20:01 hgy59

Hey @hgy59, thanks so much for the analysis. This does seem to be a DSM7 issue since the suggestion below did not work:

Probably you can resolve this, by manually installing (updating) the downloaded mono spk with identical version (5.20.1.34-18).

I was able to manually import the certificates by putting a sudo before your command below:

If you want to execute this command manually use /var/packages/mono/target/ for SYNOPKG_PKGDEST, i.e. run /var/packages/mono/target/bin/cert-sync /etc/ssl/certs/ca-certificates.crt

The output looked like this -- https://pastebin.com/ZHgssSSn

Once this was completed, Sonarr is once again fully functional.

PS: it is time to port sonarr to .net!

I agree, but I think I recall one of the devs saying that Sonarr is unlikely to do that anytime soon.

EDIT

This is also evident in the source repository since they seem to have pushed this to v4 consideration based on https://github.com/Sonarr/Sonarr/issues/948

mreid-tt avatar Jan 04 '22 21:01 mreid-tt

Sonarr will not be moving to .net anytime soon

Based on the time it took for v3 to replace v2 I would not expect Sonarr in .net for several years at best. Maybe I'll be wrong 🤷‍♂️

Sonarr on .Net also already exists for internal testing. https://github.com/Sonarr/Sonarr/tree/widowmaker

For this SSL issue it seems that SynoCommunity's mono package has a bug and fails to sync certs upon install. This should be corrected as soon as it can given all the support issues it's causing.

bakerboy448 avatar Jan 08 '22 15:01 bakerboy448

Any timeframe to fix this bug?

we're up to a lot of users on a daily basis posting about this bug both for Sonarr help and on the various Synology sites with the SynoCommunity mono package.

bakerboy448 avatar Jan 10 '22 23:01 bakerboy448

I guess I could summarise the workaround for the community to follow in the meantime:

  1. Within DSM, enable SSH service in Control Panel > Terminal & SNMP and click apply
  2. Using Terminal (MacOS) connect to the NAS using ssh -l [admin username] [NAS address] or using Putty (Windows) connect to the network address of your NAS
  3. Enter the required admin password and press enter
  4. Enter the following command: sudo /var/packages/mono/target/bin/cert-sync /etc/ssl/certs/ca-certificates.crt and press enter
  5. Enter the required admin password and press enter. When complete you should see the line Import process completed
  6. Enter the following command: sudo chmod -R a+rX /usr/share/.mono and press enter
  7. Disconnect the SSH session by typing exit and press enter
  8. Within DSM, disable the SSH service in Control Panel > Terminal & SNMP and click apply

Once complete the errors in Sonarr should disappear on their own in a few minutes.

EDIT: Thanks to the contribution from @mmdriley below, step 6 was added to support DSM 7.1.

mreid-tt avatar Jan 11 '22 09:01 mreid-tt

sudo /volume1/@appstore/mono/bin/cert-sync /etc/ssl/certs/ca-certificates.crt for DSM 7, I think. Did not fix it for me though.

Stanzilla avatar Apr 21 '22 21:04 Stanzilla

DSM 7.1 for those this isn't fixing by chance?

it seems DSM 7.1 is causing a lot of package issues then.

bakerboy448 avatar Apr 21 '22 21:04 bakerboy448

DSM 7.1 for those this isn't fixing by chance?

it seems DSM 7.1 is causing a lot of package issues then.

Yep, 7.1.

Stanzilla avatar Apr 21 '22 21:04 Stanzilla

Another 7.1 victim here.

Patrick010 avatar Apr 27 '22 21:04 Patrick010

Mono 5.20.1.34-17

kunude avatar May 03 '22 04:05 kunude

What about it

Patrick010 avatar May 04 '22 15:05 Patrick010

Mono 5.20.1.34-17

I downgraded to this version and it works now. Maybe you could elaborate a bit more on your comments ;)

Patrick010 avatar May 04 '22 16:05 Patrick010

I can confirm this fixed it for me as well, you can download older versions from https://synocommunity.com/package/mono

Stanzilla avatar May 04 '22 21:05 Stanzilla

I have the same issue on DSM7.1. I did downgrade mono to Mono 5.20.1.34-17, and ran the cert-sync command. But still the same problem. Could someone explain what they did to get it to work on 7.1?

angelo-melis avatar May 07 '22 10:05 angelo-melis

It generally seems DSM7.1 is not supported for fresh installs and mono's certs cannot be synced.

bakerboy448 avatar May 07 '22 13:05 bakerboy448

I have the same issue on DSM7.1. I did downgrade mono to Mono 5.20.1.34-17, and ran the cert-sync command. But still the same problem. Could someone explain what they did to get it to work on 7.1?

I basically only uninstalled 5.20.1.34-18 and manually installed 17. Didnt run the cert-sync.

Patrick010 avatar May 08 '22 11:05 Patrick010

Thanks for the response, bakerboy448 and Patrick010. I also did an uninstall and manually install, but still couldn't get it to work. I switched to Docker for now and got it working.

angelo-melis avatar May 08 '22 11:05 angelo-melis

I fixed this on DSM 7.1 by updating permissions for Mono's machine certificate store to allow users like sc-nzbdrone to read:

$ sudo chmod -R a+rX /usr/share/.mono

mmdriley avatar Jun 06 '22 08:06 mmdriley

I fixed this on DSM 7.1 by updating permissions for Mono's machine certificate store to allow users like sc-nzbdrone to read:

$ sudo chmod -R a+rX /usr/share/.mono

I don't even have this folder, the most similar would be something like /usr/local/mono/share/mono-2.0/mono?

cesarfd avatar Jun 07 '22 08:06 cesarfd

If that folder doesn't exist, you may need to run the cert-sync commands listed above to create it.

The local machine store is under ${CommonApplicationData}/.mono, which on Linux is /usr/share. (ref)

mmdriley avatar Jun 08 '22 05:06 mmdriley

Thank you! That did the trick.

cesarfd avatar Jun 08 '22 08:06 cesarfd

I updated to DSM 7.1-42661 Update 2 just now and had the same problem!

After

sudo /volume1/@appstore/mono/bin/cert-sync /etc/ssl/certs/ca-certificates.crt

and

$ sudo chmod -R a+rX /usr/share/.mono

it worked fine again, thank you very much! :-)

hackgrid avatar Jun 12 '22 17:06 hackgrid

I updated to DSM 7.1-42661 Update 2 just now and had the same problem!

After

sudo /volume1/@appstore/mono/bin/cert-sync /etc/ssl/certs/ca-certificates.crt

and

$ sudo chmod -R a+rX /usr/share/.mono

it worked fine again, thank you very much! :-)

Worked like a charme. Thx

Agoris010 avatar Jun 14 '22 13:06 Agoris010

Thankx very much, this is the solution, now i'm very happy.

hanshendrix avatar Jun 16 '22 12:06 hanshendrix

How is this package still broken half a year later if the fix is this simple? I just got the same error again after having solved it months ago...

NMe84 avatar Jul 05 '22 12:07 NMe84