Code: Select all
gnutls error: Certificate verification failure: The certificate is NOT trusted. The certificate chain uses expired certificate.
main error: TLS session handshake error
Code: Select all
Input #0, aac, from 'https://9554.brasilstream.com.br/stream':0/0
Metadata:
icy-br : 32
icy-description : A Sua Radio do Bem
icy-genre : Rock, Comedy Show, Esporte
icy-name : 98 FM - Belo Horizonte
icy-pub : 1
icy-url : http://98live.com.br
Duration: N/A, bitrate: 30 kb/s
Stream #0:0: Audio: aac (HE-AAC), 44100 Hz, stereo, fltp, 30 kb/s
12.23 M-A: 0.000 fd= 0 aq= 7KB vq= 0KB sq= 0B f=0/0
In any case, this reproduces with gnutls-cli, so it's not a VLC bug. More like a bug an expired cert in the trust store of your operating system, or a bug in GnuTLS. OpenSSL is having similar issues at the moment, so the latter is likely.% gnutls-cli 9554.brasilstream.com.br
Processed 128 CA certificate(s).
Resolving '9554.brasilstream.com.br:443'...
Connecting to '201.48.123.11:443'...
- Certificate type: X.509
- Got a certificate list of 3 certificates.
- Certificate[0] info:
- subject `CN=*.brasilstream.com.br,OU=EssentialSSL Wildcard,OU=Domain Control Validated', issuer `CN=Sectigo RSA Domain Validation Secure Server CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB', serial 0x00e4ce7c83922eea51f655fb555954347c, RSA key 2048 bits, signed using RSA-SHA256, activated `2019-06-16 00:00:00 UTC', expires `2021-06-15 23:59:59 UTC', pin-sha256="OgNwcNo8sA+jKqBttGqwVOfC671azTpfJqsi/1VbuG0="
Public Key ID:
sha1:124700baa641a51eeefef61d41e29d01ae90a64a
sha256:3a037070da3cb00fa32aa06db46ab054e7c2ebbd5acd3a5f26ab22ff555bb86d
Public Key PIN:
pin-sha256:OgNwcNo8sA+jKqBttGqwVOfC671azTpfJqsi/1VbuG0=
- Certificate[1] info:
- subject `CN=Sectigo RSA Domain Validation Secure Server CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB', issuer `CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US', serial 0x7d5b5126b476ba11db74160bbc530da7, RSA key 2048 bits, signed using RSA-SHA384, activated `2018-11-02 00:00:00 UTC', expires `2030-12-31 23:59:59 UTC', pin-sha256="4a6cPehI7OG6cuDZka5NDZ7FR8a60d3auda+sKfg4Ng="
- Certificate[2] info:
- subject `CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US', issuer `CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE', serial 0x13ea28705bf4eced0c36630980614336, RSA key 4096 bits, signed using RSA-SHA384, activated `2000-05-30 10:48:38 UTC', expires `2020-05-30 10:48:38 UTC', pin-sha256="x4QzPSC810K5/cMjb05Qm4k3Bw5zBn4lTdO/nEW/Td4="
- Status: The certificate is NOT trusted. The certificate chain uses expired certificate.
*** PKI verification of server certificate failed...
*** Fatal error: Error in the certificate.
No. That's the expiration date of the server certificate. The root CA certificate is expired (see emphasis) as of yesterday.It expires on 15 JUNE 2021 at 23:59:59 GMT,
You should disable the expired root CA from your trust store. On Debian/Ubuntu:I noticed this issue either in the Linux version than in the Android one. I listen to a Brazilian radio using a URL which has always been working fine in VLC, but since yesterday it does not anymore. The server is alive because I can listen flawlessly using any browser.
I wasn't able to check the log, but VLC just says it cannot be played.
The stream URL is: https://9554.brasilstream.com.br/stream
Code: Select all
$ sudo dpkg-reconfigure ca-certificates
Thank you.Forwarded https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=961907
I get the same error with some radio streams and I have already sent an email to the radio station.However the radio server is really serving an expired certificate, so when all is said and done, this is a server-side configuration error.
I thing this is a good workaroung, as long as the server configuration error is not fixed.Well, as long as security isn’t an issue, a simple workaround is to just change “https” to “http”! P=)
Return to “General VLC media player Troubleshooting”
Users browsing this forum: No registered users and 22 guests