1.15.18 certificate verify failed

Having trouble with the game? Report issues and get help here. Read this first!

Moderator: Forum Moderators

Forum rules
Before reporting issues in this section, you must read the following topic:
Post Reply
User avatar
Spannerbag
Posts: 505
Joined: December 18th, 2016, 6:14 pm
Location: Yes

1.15.18 certificate verify failed

Post by Spannerbag »

Hi,
recently ugraded from 1.15.17 to .18 and the add-on server always disconnects.
I'm using Windows 7, had no problems with the add-on server in 1.15.17 (which I deleted once .18 was installed).

Prompt is OK:
1518-connect.PNG
1518-connect.PNG (45.1 KiB) Viewed 1340 times


It tries (very briefly) to connect then errors:
1518-error.PNG
1518-error.PNG (18.98 KiB) Viewed 1340 times
The log file gives a vertificate error:

Code: Select all

Battle for Wesnoth v1.15.18 x86_64
Started on Wed Oct 06 14:13:12 2021

Automatically found a possible data directory at C:\Program Files\Battle for Wesnoth 1.15.18

Data directory:               C:\Program Files\Battle for Wesnoth 1.15.18
User configuration directory: C:\Users\USER\Documents\My Games\Wesnoth1.15
User data directory:          C:\Users\USER\Documents\My Games\Wesnoth1.15
Cache directory:              C:\Users\USER\Documents\My Games\Wesnoth1.15\cache

Setting mode to 1366x768
20211006 14:13:14 warning general: no location found for 'data/add-ons/stub/translations', skipping textdomain
20211006 14:13:14 warning config: add-on 'LSB' has no _info.cfg; cannot read version info
20211006 14:13:14 warning config: add-on 'stub' has no _info.cfg; cannot read version info
Checking lua scripts... ok
20211006 14:13:38 error network: network_asio::error thrown during transaction with add-on server; "certificate verify failed"
20211006 14:13:38 error general: Remote host disconnected.
Any suggestions as how to debug/fix?

Cheers!
--Spannerbag
SP Campaigns: After EI (v1.14) Leafsea Burning (v1.17, v1.16)
I suspect the universe is simpler than we think and stranger than we can know.
Also, I fear that beyond a certain point more intelligence does not necessarily benefit a species...
User avatar
loonycyborg
Windows Packager
Posts: 295
Joined: April 1st, 2008, 4:45 pm
Location: Russia/Moscow

Re: 1.15.18 certificate verify failed

Post by loonycyborg »

Recently one LE root certificate expired which would cause issues on older systems. LE certs are used on addon servers and system cert store is used to verify them. Not sure windows 7 is supposed to be affected though. Maybe it requires particular update to work.
"meh." - zookeeper
gnombat
Posts: 684
Joined: June 10th, 2010, 8:49 pm

Re: 1.15.18 certificate verify failed

Post by gnombat »

Are you able to connect to https://add-ons.wesnoth.org using Internet Explorer?
User avatar
Spannerbag
Posts: 505
Joined: December 18th, 2016, 6:14 pm
Location: Yes

Re: 1.15.18 certificate verify failed

Post by Spannerbag »

gnombat wrote: October 6th, 2021, 9:37 pm Are you able to connect to https://add-ons.wesnoth.org using Internet Explorer?
Yep, no problem:
ffaddon.PNG
Cheers,
--Spannerbag
SP Campaigns: After EI (v1.14) Leafsea Burning (v1.17, v1.16)
I suspect the universe is simpler than we think and stranger than we can know.
Also, I fear that beyond a certain point more intelligence does not necessarily benefit a species...
gnombat
Posts: 684
Joined: June 10th, 2010, 8:49 pm

Re: 1.15.18 certificate verify failed

Post by gnombat »

Is that Internet Explorer? It looks like it's probably Firefox? (Firefox uses its own set of certificates instead of the certificates belonging to the operating system, so it will give different results.)
User avatar
Spannerbag
Posts: 505
Joined: December 18th, 2016, 6:14 pm
Location: Yes

Re: 1.15.18 certificate verify failed

Post by Spannerbag »

loonycyborg wrote: October 6th, 2021, 3:45 pm Recently one LE root certificate expired which would cause issues on older systems. LE certs are used on addon servers and system cert store is used to verify them. Not sure windows 7 is supposed to be affected though. Maybe it requires particular update to work.
Do you mean Let's Encrypt?

Cheers,
--Spannerbag
SP Campaigns: After EI (v1.14) Leafsea Burning (v1.17, v1.16)
I suspect the universe is simpler than we think and stranger than we can know.
Also, I fear that beyond a certain point more intelligence does not necessarily benefit a species...
User avatar
Spannerbag
Posts: 505
Joined: December 18th, 2016, 6:14 pm
Location: Yes

Re: 1.15.18 certificate verify failed

Post by Spannerbag »

gnombat wrote: October 6th, 2021, 11:25 pm Is that Internet Explorer? It looks like it's probably Firefox? (Firefox uses its own set of certificates instead of the certificates belonging to the operating system, so it will give different results.)
Yep, blew off the dust and fired it up:
ieaddon.PNG
ieaddon.PNG (56 KiB) Viewed 1266 times
No problem there either.

???!
Just tried the add-ons server again (for the umpteenth time) and it now works correctly, so something has cleared/been fixed... so problem has gone away.
No idea how/why but glad I can access the add-ons again :)

Seems OK now.

Thanks to everyone who replied, much appreciated.

Cheers,
--Spannerbag
SP Campaigns: After EI (v1.14) Leafsea Burning (v1.17, v1.16)
I suspect the universe is simpler than we think and stranger than we can know.
Also, I fear that beyond a certain point more intelligence does not necessarily benefit a species...
User avatar
Wedge009
Developer
Posts: 17
Joined: June 24th, 2009, 11:17 am
Location: Sydney, Australia

Re: 1.15.18 certificate verify failed

Post by Wedge009 »

In case anyone else runs into this I've logged: https://github.com/wesnoth/wesnoth/issues/6171

Same symptoms, albeit different exception in the logs.
Soli Deo Gloria
User avatar
loonycyborg
Windows Packager
Posts: 295
Joined: April 1st, 2008, 4:45 pm
Location: Russia/Moscow

Re: 1.15.18 certificate verify failed

Post by loonycyborg »

Spannerbag wrote: October 6th, 2021, 11:26 pm Do you mean Let's Encrypt?
Yes.
"meh." - zookeeper
User avatar
Spannerbag
Posts: 505
Joined: December 18th, 2016, 6:14 pm
Location: Yes

Re: 1.15.18 certificate verify failed

Post by Spannerbag »

Wedge009 wrote: October 7th, 2021, 12:23 am In case anyone else runs into this I've logged: https://github.com/wesnoth/wesnoth/issues/6171

Same symptoms, albeit different exception in the logs.
Fwiw, client-side I'm not aware of anything significant changing. The few windows updates were all anti-malware stuff for defender.
Had a quick peek at the certs (via certmgr) anyway - all looked OK, no sign of LE certs so I guess it wasn't that? (Good idea tho'!).
...But now everything works, there wouldn't be any issues to see, probably :doh:

Logfile also silent now when I connect to the add-ons server :)

Cheers,
--Spannerbag
SP Campaigns: After EI (v1.14) Leafsea Burning (v1.17, v1.16)
I suspect the universe is simpler than we think and stranger than we can know.
Also, I fear that beyond a certain point more intelligence does not necessarily benefit a species...
User avatar
Zap-Zarap
Posts: 159
Joined: March 16th, 2015, 2:18 pm

Re: 1.15.18 certificate verify failed, same with 1.16.0

Post by Zap-Zarap »

Hello, with the new version 1.16 on WIN10 with the latest updates (21H1) i'm suffering the same problem: "certificate verify failed".
No connection possible, neither to multiplayer-, nor to addons-server.

Code: Select all

Battle for Wesnoth v1.16.0 x86_64
Started on Thu Oct 28 08:37:37 2021

Automatically found a possible data directory at C:\Users\USER\AppData\Local\Programs\Battle for Wesnoth 1.16.0

Data directory:               C:\Users\USER\AppData\Local\Programs\Battle for Wesnoth 1.16.0
User configuration directory: C:\Users\USER\Documents\My Games\Wesnoth1.16
User data directory:          C:\Users\USER\Documents\My Games\Wesnoth1.16
Cache directory:              C:\Users\USER\Documents\My Games\Wesnoth1.16\cache

Setting mode to 1600x900
Checking lua scripts... ok
20211028 08:37:57 warning network: wait_for_handshake Rethrowing: asio.ssl:337047686
20211028 08:37:57 error network: caught network error: certificate verify failed
20211028 08:37:57 error general: Verbindung fehlgeschlagen: certificate verify failed
20211028 08:38:06 error network: network_asio::error thrown during transaction with add-on server; "certificate verify failed"
20211028 08:38:06 error general: Der Server hat die Verbindung unterbrochen.
What to do?
Thank You.
Z-Z
I like beavers.
User avatar
loonycyborg
Windows Packager
Posts: 295
Joined: April 1st, 2008, 4:45 pm
Location: Russia/Moscow

Re: 1.15.18 certificate verify failed, same with 1.16.0

Post by loonycyborg »

Zap-Zarap wrote: October 28th, 2021, 6:49 am Hello, with the new version 1.16 on WIN10 with the latest updates (21H1) i'm suffering the same problem: "certificate verify failed".
No connection possible, neither to multiplayer-, nor to addons-server.
Are there any issues with other software that uses encrypted connections?
"meh." - zookeeper
User avatar
Zap-Zarap
Posts: 159
Joined: March 16th, 2015, 2:18 pm

Re: 1.15.18 certificate verify failed

Post by Zap-Zarap »

Well, the truth is, Wesnoth is the only software i use, that connects to the internet, apart of Firefox (i never use IE), and as gnombat wrote above:
gnombat wrote: October 6th, 2021, 11:25 pm Firefox uses its own set of certificates instead of the certificates belonging to the operating system, so it will give different results.
All other stuff i usually do is done completely offline.
Thanks
I like beavers.
User avatar
loonycyborg
Windows Packager
Posts: 295
Joined: April 1st, 2008, 4:45 pm
Location: Russia/Moscow

Re: 1.15.18 certificate verify failed

Post by loonycyborg »

I've added some more debug code in a commit which will be part of 1.16.1. At that point --log-debug=network output will also show which exact certs it's trying to verify for addon client.
"meh." - zookeeper
User avatar
Zap-Zarap
Posts: 159
Joined: March 16th, 2015, 2:18 pm

Re: 1.15.18 certificate verify failed

Post by Zap-Zarap »

Thank you very much for caring.
Today, everything magically started to work well, same as for Spannerbag before:
Spannerbag wrote: October 7th, 2021, 11:48 am
...But now everything works, there wouldn't be any issues to see, probably :doh:

Logfile also silent now when I connect to the add-ons server :)
Maybe WIN10 updated something in the background meanwhile.

Z-Z
I like beavers.
Post Reply