SSL error 7.90.010 and up

BVGorp · January 21, 2017 at 2:00 AM

So my media is on my synology nas with DSM 6.0.2-8451 Update 7

I connected Kodi by webdavs to my media locations.
With version 7.90.009 there was no issue viewing my media.
With version 7.90.010 and up its not working. I have looked in the log and it states:
00:52:36.871 T:1961955136 ERROR: CCurlFile::Exists - Failed: SSL connect error(35) for davs://USERNAME:PASSWORD@HOSTNAME:5006/Data/Vid.mkv

I turend on debug logging and specific logging for curl and see attached logfile

if someone has a link to the file LibreELEC-RPi2.arm-7.90.009.tar would be much appreciated so i can watch my media till this issue is fixed

BVGorp · January 22, 2017 at 7:19 PM

should i have posted this in bug section of the forum?

BVGorp · January 24, 2017 at 2:11 PM

Found this on the Kodi forum. but probably needs a dev to fix it in libreelec

Solved - CCurlFile::Stat - Failed: SSL connect error(35)

BVGorp · January 24, 2017 at 8:48 PM

With some help from the guys in the irc channel it seems cipher choise is the issue.
The synology nas has this line in config:
SSLCipherSuite HIGH:!EXPORT:!eNULL:!aNULL:!DES:!RC4:!RC2:!MD5:!IDEA:!SEED:!CAMELLIA:!AESGCM:+AES128:+AES256:+3DES:+kEECDH:+kRSA:!EDH:!aECDH:!aECDSA:!kECDHe:!SRP:!PSK
I changed it to:
SSLCipherSuite HIGH:!aNULL:!MD5

now it works but it would be better to fix the issue within Kodi since you dont have control of all webservers

Edit:
Changed the ciphers to:
SSLCipherSuite HIGH:!EXPORT:!eNULL:!aNULL:!DES:!RC4:!RC2:!MD5:!IDEA:!SEED:!CAMELLIA:!AESGCM:+AES128:+3DES:+kEECDH:+kRSA:!EDH:!aECDH:!aECDSA:!kECDHe:!SRP:!PSK

It seems +AES256 is the issue

bacsom · January 29, 2017 at 8:09 PM

Thank you for the topic, now I know why my WebDav links don't work on my Rpi2-s. Interestingly the links work great from my PC (running RC3 as well).

**vpeter** · January 31, 2017 at 6:56 PM

I'm trying to investigate why this happen with LibreELEC. My current conclusion is that kodi build with configure works. But build with cmake doesn't and it iis the cause of this issue. But I'm unable to pinpoint where is the difference

bacsom · February 14, 2017 at 5:54 PM

Does somebody have any new information about this? We have 3 Synology systems in our family. Mine can be reached from any sources, but the other two are not. The models are different, but they run the same DSM version (6.0.2-8451). They work fine under Windows, but not under Libreelec 7.95.3.

**vpeter** · February 14, 2017 at 6:18 PM

I think you will have to change ciphers on your other 2 synology's.

bacsom · February 14, 2017 at 8:23 PM

Can you tell me how? I am a little green when it comes to Linux. (and thank you for your reply! :-))

**vpeter** · February 14, 2017 at 8:45 PM

I think it is this file according to Zero2Nine user: /var/packages/WebDAVServer/target/etc/httpd/conf/extra/httpd-ssl.conf-cipher

bacsom · February 14, 2017 at 9:20 PM

Thanks! I have found it. Now, it is a little different than BVGorp's.

My system, which works from all of the raspberries:
SSLCipherSuite HIGH:!EXPORT:!eNULL:!aNULL:!DES:!RC4:!RC2:!MD5:!IDEA:!SEED:!CAMELLIA:+AES128:+AES256:+3DES:+kEECDH:+kRSA:!EDH:!aECDH:!aECDSA:!kECDHe:!SRP:!PSK

One of the synologies, that doesn't work:
SSLCipherSuite HIGH:!EXPORT:!eNULL:!aNULL:!DES:!RC4:!RC2:!MD5:!IDEA:!SEED:!CAMELLIA:!AESGCM:+AES128:+AES256:+3DES:+kEECDH:+kRSA:!EDH:!aECDH:!aECDSA:!kECDHe:!SRP:!PSK

Both contains AES256, but mine lack of AESGCM...

BVGorp · February 22, 2017 at 9:56 PM

Just remove +AES256:

Btw an update of webdav server reverses the change and it stops to function again.
Changed this again and it works

bacsom · February 24, 2017 at 11:15 AM

Thank you! I took a deep breath and I edited the file, but I took "AESGCM" out since, it is how the file different, from my working system to my father's non working one. Now, it works great again. Does anybody know why this file is different from system to system with the same DSM?

SSL error 7.90.010 and up

Similar Threads

Nano error

Can't access SMB shares on windows 10 -invalid argument

VDR.bin process terminated after few hours