Page 1 of 1
Getting untrusted certificate with some of my usenet servers
Posted: July 22nd, 2023, 10:56 pm
by jello
Getting this: Server news dot eweka dot nl uses an untrusted certificate [Certificate not valid. This is most probably a server issue.] on some of my servers and and others are connecting just fine. when i try and connect without ssl, i connect fine to the server. this is happening with eweka, tweaknews, and newsgroupdirect. i am on windows 11 with sab 4.03
Re: Getting untrusted certificate with some of my usenet servers
Posted: July 22nd, 2023, 11:09 pm
by sander
https://www.appelboor.com/cgi-bin/check ... s.eweka.nl tells eweka is correct. So the server side is OK.
As you're on Windows, the most probably cause is a windows virus scanner is causing this.
Re: Getting untrusted certificate with some of my usenet servers
Posted: July 22nd, 2023, 11:18 pm
by jello
sorry its windows 10, all i have is windows defender activated and i deactivated it to see if i solved any issues, but i am still having the same errors after turning off windows defender...
Re: Getting untrusted certificate with some of my usenet servers
Posted: July 23rd, 2023, 12:56 am
by safihre
Have you done all your Windows updates and restarted?
Re: Getting untrusted certificate with some of my usenet servers
Posted: July 23rd, 2023, 5:32 pm
by jello
safihre wrote: ↑July 23rd, 2023, 12:56 am
Have you done all your Windows updates and restarted?
Yes.
Re: Getting untrusted certificate with some of my usenet servers
Posted: July 23rd, 2023, 8:17 pm
by jello
i tried my servers with nzbget and they all worked except for eweka which i had to change to ipv4 instead of auto then it worked with ssl...
Re: Getting untrusted certificate with some of my usenet servers
Posted: July 24th, 2023, 12:29 am
by sander
In SABnzbd, what newsserver do you use for eweka?
Re: Getting untrusted certificate with some of my usenet servers
Posted: July 24th, 2023, 1:19 am
by jello
news.eweka.nl
Re: Getting untrusted certificate with some of my usenet servers
Posted: July 24th, 2023, 2:10 am
by sander
OK, news.eweka.nl is good.
AFAIK nzbget brings its own certifactes and doesn't use the Windows certificates. If so, that is the explanation news.eweka.nl is OK for nzbget. Or: you have allow nzget to bypass the virusscanner / firewall.
Anyway, back to SABnzbd: if you can't solve it (in Windows, or your firewall/virusscanner), you can turn off certificate checking in SABnzbd:
SABnzbd -> Config -> Server. In the upper right corner, set Advanced Settings to On
Then click on the server settings of eweka, and go to Certificate verification, and set to Disabled. Then click Save.
Re: Getting untrusted certificate with some of my usenet servers
Posted: July 24th, 2023, 2:43 am
by sander
PS:
Out of curiosity: what happens if you open
https://news.eweka.nl/ in Edge and in Chrome. You must wait 5-10 minutes before results appear.
In Chrome, I get the below, which is good: a secure connection is possible.
Code: Select all
200 Welcome to Eweka
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
Re: Getting untrusted certificate with some of my usenet servers
Posted: July 24th, 2023, 2:57 am
by jello
sander wrote: ↑July 24th, 2023, 2:43 am
PS:
Out of curiosity: what happens if you open
https://news.eweka.nl/ in Edge and in Chrome. You must wait 5-10 minutes before results appear.
In Chrome, I get the below, which is good: a secure connection is possible.
Code: Select all
200 Welcome to Eweka
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
480 Authentication Required*
i got the same results
Re: Getting untrusted certificate with some of my usenet servers
Posted: July 24th, 2023, 3:04 am
by jello
sander wrote: ↑July 24th, 2023, 2:10 am
OK, news.eweka.nl is good.
AFAIK nzbget brings its own certifactes and doesn't use the Windows certificates. If so, that is the explanation news.eweka.nl is OK for nzbget. Or: you have allow nzget to bypass the virusscanner / firewall.
Anyway, back to SABnzbd: if you can't solve it (in Windows, or your firewall/virusscanner), you can turn off certificate checking in SABnzbd:
SABnzbd -> Config -> Server. In the upper right corner, set Advanced Settings to On
Then click on the server settings of eweka, and go to Certificate verification, and set to Disabled. Then click Save.
both nzbget and sabnzbd were already allowed in my firewall. its not just doing it with eweka, but also newsgroupdirect and now doing the same thing with nzbget too, is it safe to turn off verification?
Re: Getting untrusted certificate with some of my usenet servers
Posted: July 24th, 2023, 3:39 am
by sander
jello wrote: ↑July 24th, 2023, 3:04 am
is it safe to turn off verification?
It's less safe than having it on. Reason: SSL is there to guarantuee end-to-end encryption and verification. If that check fails, it the sign that that is not working.