Clementine icon indicating copy to clipboard operation
Clementine copied to clipboard

Rain extra SSL handshake error

Open jbroadus opened this issue 4 years ago • 6 comments

$ curl -L -v http://data.clementine-player.org/rainymood
*   Trying 104.24.120.206:80...
* TCP_NODELAY set
* Connected to data.clementine-player.org (104.24.120.206) port 80 (#0)
> GET /rainymood HTTP/1.1
> Host: data.clementine-player.org
> User-Agent: curl/7.66.0
> Accept: */*
> 
* Mark bundle as not supporting multiuse
< HTTP/1.1 301 Moved Permanently
< Date: Sat, 07 Mar 2020 07:12:09 GMT
< Transfer-Encoding: chunked
< Connection: keep-alive
< Cache-Control: max-age=3600
< Expires: Sat, 07 Mar 2020 08:12:09 GMT
< Location: https://data.clementine-player.org/rainymood
< Server: cloudflare
< CF-RAY: 570281ac4e09f58d-SEA
< 
* Ignoring the response-body
* Connection #0 to host data.clementine-player.org left intact
* Issue another request to this URL: 'https://data.clementine-player.org/rainymood'
*   Trying 104.24.121.206:443...
* TCP_NODELAY set
* Connected to data.clementine-player.org (104.24.121.206) port 443 (#1)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: C=US; ST=CA; L=San Francisco; O=Cloudflare, Inc.; CN=sni.cloudflaressl.com
*  start date: Jan 28 00:00:00 2020 GMT
*  expire date: Oct  9 12:00:00 2020 GMT
*  subjectAltName: host "data.clementine-player.org" matched cert's "*.clementine-player.org"
*  issuer: C=US; ST=CA; L=San Francisco; O=CloudFlare, Inc.; CN=CloudFlare Inc ECC CA-2
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
* Using Stream ID: 1 (easy handle 0x55cd8c875200)
> GET /rainymood HTTP/2
> Host: data.clementine-player.org
> User-Agent: curl/7.66.0
> Accept: */*
> 
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* old SSL session ID is stale, removing
* Connection state changed (MAX_CONCURRENT_STREAMS == 256)!
< HTTP/2 302 
< date: Sat, 07 Mar 2020 07:12:09 GMT
< content-type: text/html; charset=utf-8
* Added cookie __cfduid="db3238ec620e18f39d701f92b8e3dd7d11583565129" for domain clementine-player.org, path /, expire 1586157129
< set-cookie: __cfduid=db3238ec620e18f39d701f92b8e3dd7d11583565129; expires=Mon, 06-Apr-20 07:12:09 GMT; path=/; domain=.clementine-player.org; HttpOnly; SameSite=Lax; Secure
< cache-control: no-cache
< location: http://cloud.clementine-player.org/RainyMood.mp3
< x-cloud-trace-context: 85490fb35ff97e130b4b3c91db61f8a6
< cf-cache-status: DYNAMIC
< expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
< server: cloudflare
< cf-ray: 570281acbac0f5ad-SEA
< 
* Connection #1 to host data.clementine-player.org left intact
* Issue another request to this URL: 'http://cloud.clementine-player.org/RainyMood.mp3'
*   Trying 104.24.121.206:80...
* TCP_NODELAY set
* Connected to cloud.clementine-player.org (104.24.121.206) port 80 (#2)
> GET /RainyMood.mp3 HTTP/1.1
> Host: cloud.clementine-player.org
> User-Agent: curl/7.66.0
> Accept: */*
> 
* Mark bundle as not supporting multiuse
< HTTP/1.1 301 Moved Permanently
< Date: Sat, 07 Mar 2020 07:12:09 GMT
< Transfer-Encoding: chunked
< Connection: keep-alive
< Cache-Control: max-age=3600
< Expires: Sat, 07 Mar 2020 08:12:09 GMT
< Location: https://cloud.clementine-player.org/RainyMood.mp3
< Server: cloudflare
< CF-RAY: 570281ad8e20f57d-SEA
< 
* Ignoring the response-body
* Connection #2 to host cloud.clementine-player.org left intact
* Issue another request to this URL: 'https://cloud.clementine-player.org/RainyMood.mp3'
*   Trying 104.24.120.206:443...
* TCP_NODELAY set
* Connected to cloud.clementine-player.org (104.24.120.206) port 443 (#3)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: C=US; ST=CA; L=San Francisco; O=Cloudflare, Inc.; CN=sni.cloudflaressl.com
*  start date: Jan 28 00:00:00 2020 GMT
*  expire date: Oct  9 12:00:00 2020 GMT
*  subjectAltName: host "cloud.clementine-player.org" matched cert's "*.clementine-player.org"
*  issuer: C=US; ST=CA; L=San Francisco; O=CloudFlare, Inc.; CN=CloudFlare Inc ECC CA-2
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
* Using Stream ID: 1 (easy handle 0x55cd8c875200)
> GET /RainyMood.mp3 HTTP/2
> Host: cloud.clementine-player.org
> User-Agent: curl/7.66.0
> Accept: */*
> Cookie: __cfduid=db3238ec620e18f39d701f92b8e3dd7d11583565129
> 
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* old SSL session ID is stale, removing
* Connection state changed (MAX_CONCURRENT_STREAMS == 256)!
< HTTP/2 525 
< date: Sat, 07 Mar 2020 07:12:09 GMT
< content-type: text/html
< cache-control: no-store, no-cache
< expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
< server: cloudflare
< cf-ray: 570281adfe84e366-SEA
< 
<html>
<head><title>525 Origin SSL Handshake Error</title></head>
<body bgcolor="white">
<center><h1>525 Origin SSL Handshake Error</h1></center>
<hr><center>cloudflare-nginx</center>
</body>
</html>
* Connection #3 to host cloud.clementine-player.org left intact

jbroadus avatar Mar 07 '20 07:03 jbroadus

I'm seeing the same issue with 523 being returned from cloud.clementine-player.org/RainyMood.mp3. I've also attempted to change the ~/.config/Clementine.conf to point to a mirror of the rainymood mp3 and it doesn't seem to work. the conf file is overwritten on start and when clementine is brought up from the background.

eris-price avatar Mar 25 '20 15:03 eris-price

Seriously, I wonder why there is not a build option that simply bundles these audio files with the installation. I'll definitely look into hacking this if I have that free time. The audio is about ~30MB, insignificant for most modern installations, and very insignificant for anyone who listens to local music files.

ahyangyi avatar Sep 01 '20 07:09 ahyangyi

I ended up changing the link in the source code to point to the mirror and recompiled, and that seemed to fix the problem, was a pretty easy 1 line fix. Having it as a local asset would be nice tho, as there tends to be a 1/2-1 second lag before the rain sound actually starts, while it buffers.

On Tue, Sep 1, 2020 at 2:26 AM Yi Yang [email protected] wrote:

Seriously, I wonder why there is not a build option that simply bundles these audio files with the installation. I'll definitely look into hacking this if I have that free time. The audio is about ~30MB, insignificant for most modern installations, and very insignificant for anyone who listens to local music files.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/clementine-player/Clementine/issues/6611#issuecomment-684512540, or unsubscribe https://github.com/notifications/unsubscribe-auth/AGBBH5VVSUPEY5BMQZPU4CTSDSO2TANCNFSM4LDNGTWA .

eris-price avatar Sep 01 '20 14:09 eris-price

So is this fixed already @eris-price ?

loscil06 avatar Feb 21 '22 21:02 loscil06

So is this fixed already @eris-price ?

It doesn't seem to be working.

MorriSoft avatar Sep 14 '23 14:09 MorriSoft

the website itself that was linked in #1641 returns an SSL handshake error, so... i doubt this feature will ever work, really

ameameam3 avatar Oct 29 '23 01:10 ameameam3