NO_CERTIFICATE_OR_CRL_FOUND errors preventing any https connection (from addons at least)

bolet · July 7, 2024 at 1:58 PM

This started happening a few days ago, I don't remember having done anything special to trigger this.

Hardware: Orange Pi PC Plus (Allwinner H3)
OS: LibreElec 12.0.0

All plugins needing https connections now display something like this in the log file:

Code

2024-07-07 14:13:37.398 T:1170    error <general>: [plugin.video.youtube] Player request failed
                                                   exc: |HTTPSConnectionPool(host='www.youtube.com', port=443): Max retries exceeded with url: /youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=false (Caused by SSLError(SSLError(136, '[X509: NO_CERTIFICATE_OR_CRL_FOUND] no certificate or crl found (_ssl.c:4166)')))|
                                                   video_id: gKkFQxnm3cM, client: media_connect_frontend, auth: False
                                                   Stack trace (most recent call last):
                                                     File "/storage/.kodi/addons/plugin.video.youtube/resources/lib/plugin.py", line 16, in <module>
                                                       plugin_runner.run()
                                                     File "/storage/.kodi/addons/plugin.video.youtube/resources/lib/youtube_plugin/kodion/plugin_runner.py", line 63, in run
                                                       plugin.run(provider, context, focused=(current_uri == new_uri))
                                                     File "/storage/.kodi/addons/plugin.video.youtube/resources/lib/youtube_plugin/kodion/plugin/xbmc/xbmc_plugin.py", line 157, in run
                                                       result, options = provider.navigate(context)
                                                     File "/storage/.kodi/addons/plugin.video.youtube/resources/lib/youtube_plugin/kodion/abstract_provider.py", line 161, in navigate
                                                       result = handler['method'](context, re_match)
                                                     File "/storage/.kodi/addons/plugin.video.youtube/resources/lib/youtube_plugin/kodion/abstract_provider.py", line 376, in wrapper
                                                       return func(*args, **kwargs)
                                                     File "/storage/.kodi/addons/plugin.video.youtube/resources/lib/youtube_plugin/youtube/provider.py", line 718, in on_play
                                                       video = yt_play.play_video(self, context)
                                                     File "/storage/.kodi/addons/plugin.video.youtube/resources/lib/youtube_plugin/youtube/helper/yt_play.py", line 65, in play_video
                                                       video_streams = client.get_video_streams(context, video_id)
                                                     File "/storage/.kodi/addons/plugin.video.youtube/resources/lib/youtube_plugin/youtube/client/youtube.py", line 202, in get_video_streams
                                                       video_streams = video_info.load_stream_infos(video_id)
                                                     File "/storage/.kodi/addons/plugin.video.youtube/resources/lib/youtube_plugin/youtube/helper/video_info.py", line 837, in load_stream_infos
                                                       return self._get_video_info()
                                                     File "/storage/.kodi/addons/plugin.video.youtube/resources/lib/youtube_plugin/youtube/helper/video_info.py", line 1334, in _get_video_info
                                                       result = self.request(
                                                     File "/storage/.kodi/addons/plugin.video.youtube/resources/lib/youtube_plugin/kodion/network/requests.py", line 114, in request
                                                       stack_trace = format_stack()

Display More

The file /run/libreelec/cacert.pem looks normal.

**chewitt** · July 8, 2024 at 6:56 PM

Have a search in the YouTube add-on support thread in the Kodi forum. Most likely Google fiddled with their API's and something needs tweaking in the add-on and there'll be some discussion.

bolet · July 9, 2024 at 11:30 PM

I submitted the bug and had the answer here: https://github.com/anxdpanic/plugin.video.youtube/issues/837

Quote

This has nothing to do with this plugin. There is something wrong with your system certificate store. Or maybe the certifi module.
You will need to check why your system certificate store does not contain the information that is required to verify/make a secure connection to the YouTube servers.
As a workaround you can disable https verification in the plugin advanced settings, but this is not a recommended course of action.

Help welcome!

**chewitt** · July 10, 2024 at 4:32 AM

Judging by the reguarly changing list of garbage search terms my kids are using the YouTube add-on daily without issues (and it works here for me in random tests/checks) so the add-on is 'working' generally. The latest LE12 nightly has an updated cacert.pem file in the last week or so, but this is unlikely to be the cause or fix of your problem as changes in root certs are rare and coordinated to avoid large scale internet breakage. There are technical reasons (the use of CDN infrastructure) which mean the certs that Google infrastructure presents to you will be different to the ones presented to me, but Google generally does a reasonable job of ensuring its services work so that's unlikely to be the cause either; and breakage on their side is normally temporary not persistent.

Have you deployed a custom cert locally? .. something that would append to the default (embedded) cacert.pem file?

bolet · July 10, 2024 at 10:58 PM

No, I haven't any additional certs. I tested to wget the 1st URL, and there doesn't seem to be a certificate issue:

Code

# wget -O- "https://www.youtube.com/youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=false"
Connecting to www.youtube.com (216.58.214.174:443)
wget: server returned error: HTTP/1.1 405 Method Not Allowed

If it was a CDN or certs issue, wget would also fail, right? Maybe a python only issue? Any more ideas?

If it was just to fix the issue, I could backup kodi settings, erase all data inside /storage then reboot and restore? But maybe it's worth digging?

**chewitt** · July 11, 2024 at 5:11 AM

It's worth taking a backup, resetting, then unpack the backup and only restore the minimum userdata items like sources/passwords and add-on settings data; everything else should be clean installed. Don't just restore the backup, as if the issue is something gone bad, you'll end up restoring it and negating the clean reset.

I'm fairly confident it's something local to your install or environment. If the add-on was generally broken we'd see complaints from more users, and we're not.

bolet · July 11, 2024 at 10:33 PM

Thanks for the hint, I've never selectively restored settings, but I should find out.

You're right, I feel a bit lonely with this issue

bolet · July 13, 2024 at 4:02 PM

Just FYI, I got help from the YT plugin people here.

The file inside ~/.kodi/addons/script.module.certifi/lib/certifi/cacert.pem was messed up. Replaced it from git repo.

It saved me reinstalling LE and restoring settings.