tfabris / CrowCam

A set of Bash scripts to control and maintain a YouTube live cam from a Synology NAS.
GNU General Public License v3.0
3 stars 3 forks source link

CrowCamKeepAlive gets a certificate error downloading YouTube-dl #66

Closed tfabris closed 4 years ago

tfabris commented 4 years ago

This is happening today, starting this afternoon, when CrowCamKeepAlive is trying to download the latest YouTube-dl:

>wget https://yt-dl.org/downloads/latest/youtube-dl

Resolving yt-dl.org (yt-dl.org)... 95.143.172.170
Connecting to yt-dl.org (yt-dl.org)|95.143.172.170|:443... connected.
ERROR: cannot verify yt-dl.org's certificate, issued by ‘CN=COMODO RSA Domain Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB’:
  Issued certificate has expired.

This isn't my fault, but check up on it. This either means that the site is hijacked and we shouldn't use the executables being served up by it, or, at some point CrowCamKeepAlive will not work correctly because YouTube-dl will be out of date an not updated to the latest YouTube server features.

tfabris commented 4 years ago

I have filed a bug on this at the YouTube-DL github repository. However that repository has thousands of unsolved issues, so I'm not sure that my report will be heard above the noise.

tfabris commented 4 years ago

Issue turns out to be a more complicated certificate issue with an expiration of an intermediate certificate in a local CA store on the Mac and the Synology. This is not something the YouTube-DL people can fix, I don't think. I have to fix it on the Synology.

Discussion of the issue, and how to fix it, are happening here: https://github.com/ytdl-org/youtube-dl/issues/25491

I'll try to fix it, and if the fix works, I'll update this bug and the README.md with how to implement the fix.

tfabris commented 4 years ago

I worked around the issue. If we hit this exact issue: https://support.sectigo.com/Com_KnowledgeDetailPage?Id=kA03l00000117LT

Then re-download the file with cert checking turned off.