PromyLOPh / pianobar

Console-based pandora.com player
http://6xq.net/pianobar/
Other
1.74k stars 321 forks source link

(i) Login... Network error: Peer certificate cannot be authenticated with given CA certificates #655

Closed bicarbonate closed 6 years ago

bicarbonate commented 6 years ago

Started getting this today.. Google proved useless, anyone here got any ideas?

icylake11 commented 6 years ago

Same here

haxwithaxe commented 6 years ago

Same here. Tried to set the tls fingerprint as well.

M1Sports20 commented 6 years ago

Whenever I see this I run the following: openssl s_client -connect tuner.pandora.com:443 < /dev/null 2> /dev/null | openssl x509 -noout -fingerprint | tr -d ':' | cut -d'=' -f2 The set tls_fingerprint in .config/pianobar/config

wellsa-usa commented 6 years ago

I'm getting this as well. Interestingly, my config file has the TLS commented out. I've added a new one back in (using the openssl snippet from the prior post), but it made no difference. Does anyone know where the TLS is used in the c code, or how to get past this problem?

bicarbonate commented 6 years ago

Mich

On Tue, Mar 13, 2018 at 10:08 AM, wellsa-usa notifications@github.com wrote:

I'm getting this as well. Interestingly, my config file has the TLS commented out. I've added a new one back in (using the openssl snippet from the prior post), but it made no difference. Does anyone know where the TLS is used in the c code, or how to get past this problem?

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/PromyLOPh/pianobar/issues/655#issuecomment-372721246, or mute the thread https://github.com/notifications/unsubscribe-auth/AHaK5DGGCwhg_vOQQF8mZtUIDfc9BXLLks5td-77gaJpZM4So4fz .

bicarbonate commented 6 years ago

On Tue, Mar 13, 2018 at 10:14 AM, InvalidPath invalid.path@gmail.com wrote:

Mich

On Tue, Mar 13, 2018 at 10:08 AM, wellsa-usa notifications@github.com wrote:

I'm getting this as well. Interestingly, my config file has the TLS commented out. I've added a new one back in (using the openssl snippet from the prior post), but it made no difference. Does anyone know where the TLS is used in the c code, or how to get past this problem?

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/PromyLOPh/pianobar/issues/655#issuecomment-372721246, or mute the thread https://github.com/notifications/unsubscribe-auth/AHaK5DGGCwhg_vOQQF8mZtUIDfc9BXLLks5td-77gaJpZM4So4fz .

Sorry about that truncated reply above. So I tried adding 'tls_finger_print = ' and it bombs out with:

$ ./pianobar (i) Unrecognized key tls_finger_print at /home/user/.config/pianobar/config:7 Welcome to pianobar (2016.06.02-dev)! Press ? for a list of commands. (i) Login... Network error: Peer certificate cannot be authenticated with given CA certificate s

wellsa-usa commented 6 years ago

This is what I have in my config file. You have 1 too many underscores in your config file. The 2 lines at the bottom were added today after the certificate error started showing up today:

tls_fingerprint = 2D0AFDAFA16F4B5C0A34F3CB1D4752F95355070

tls_fingerprint = 13CC51AC0C31CD96C55015C76914360F7AC41A00

didnt used to need a tls, now even with a new one it doesnt work:

tls_fingerprint = FC2E6AF49FC63AEDAD1078DC22D1185B809E7534

M1Sports20 commented 6 years ago

I have the same code as wellsa-usa, intreasting that mine works. I am using an old version of pianobar 2013.09.15.

bicarbonate commented 6 years ago

On Tue, Mar 13, 2018 at 10:27 AM, wellsa-usa notifications@github.com wrote:

This is what I have in my config file. You have 1 too many underscores in your config file. The 2 lines at the bottom were added today after the certificate error started showing up today:

tls_fingerprint = 2D0AFDAFA16F4B5C0A34F3CB1D4752F95355070

tls_fingerprint = 13CC51AC0C31CD96C55015C76914360F7AC41A00

didnt used to need a tls, now even with a new one it doesnt work:

tls_fingerprint = FC2E6AF49FC63AEDAD1078DC22D1185B809E7534

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/PromyLOPh/pianobar/issues/655#issuecomment-372728216, or mute the thread https://github.com/notifications/unsubscribe-auth/AHaK5JinT1yqHTOAElahGxpu474VYzy8ks5td_NVgaJpZM4So4fz .

Ah gotcha.. I copied what Michael posted. Made the change and now I'm working! Thanks!

wellsa-usa commented 6 years ago

bicarbonate - So is your pianobar playing songs now? I took the latest source in GitHub, built it, and I still get the network error :(

wellsa-usa commented 6 years ago

Well, it seems the issue was on Pandora's side. Mine is now working, and I have the tls_fingerprint commented out.

M1Sports20 commented 6 years ago

Sorry about the extra underscore, I updated the comment to be correct. Also, I have saved the above command in the file to use in the future. Since using pianobar I have had to update it several times. I wonder why this can't be automatically pulled.

PromyLOPh commented 6 years ago

That setting, tls_fingerprint, has been removed in 2015, see commit 61dbc218e747f1b550a2615ffe3065024db29239 Since pianobar is working for me right now, I assume this was a temporary issue caused by a certificate rollover.