add-ons server not connecting

Having trouble with the game? Report issues and get help here. Read this first!

Moderator: Forum Moderators

Forum rules
Before reporting issues in this section, you must read the following topic:
Post Reply
User avatar
tr0ll
Posts: 551
Joined: June 11th, 2006, 8:13 pm
Location: canada

add-ons server not connecting

Post by tr0ll »

i am getting a "remote host disconnected" error when i click the Connect button for add-ons.
playing 1.16.1
hostname add-ons.wesnoth.org (my system says that is at address 95.217.86.148 )
platform linux
compiled from source, no changes to config.
Last edited by tr0ll on January 4th, 2022, 12:19 am, edited 1 time in total.
Top
User avatar
Pentarctagon
Project Manager
Posts: 5564
Joined: March 22nd, 2009, 10:50 pm
Location: Earth (occasionally)

Re: add-ons server

Post by Pentarctagon »

Can you post the output when running wesnoth with --log-debug=network?
99 little bugs in the code, 99 little bugs
take one down, patch it around
-2,147,483,648 little bugs in the code
Top
User avatar
tr0ll
Posts: 551
Joined: June 11th, 2006, 8:13 pm
Location: canada

Re: add-ons server

Post by tr0ll »

sure:

Code: Select all

Battle for Wesnoth v1.16.1 x86_64
Started on Mon Jan  3 19:12:50 2022

Data directory:               /usr/local/share/wesnoth
User configuration directory: /home/USER/.config/wesnoth
User data directory:          /home/USER/.local/share/wesnoth/1.16
Cache directory:              /home/USER/.cache/wesnoth

Setting mode to 1920x1080
Checking lua scripts... ok
20220103 19:12:56 info network: Resolving hostname: add-ons.wesnoth.org
20220103 19:12:56 info network: Connected to 95.217.86.148
20220103 19:12:56 debug network: Written 4 bytes.
20220103 19:12:56 debug network: Verifying TLS certificate: /C=US/O=Internet Security Research Group/CN=ISRG Root X1: failed
20220103 19:12:56 error network: network_asio::error thrown during transaction with add-on server; "certificate verify failed"
20220103 19:12:56 error general: Remote host disconnected.
Top
User avatar
Pentarctagon
Project Manager
Posts: 5564
Joined: March 22nd, 2009, 10:50 pm
Location: Earth (occasionally)

Re: add-ons server not connecting

Post by Pentarctagon »

Since you're building from source, can you build from the latest on the 1.16 branch? That has some additional debugging statements added.

Also worth mentioning is that a previous time this came up for a Linux user, it was because their OS was outdated/unsupported and so he didn't have the required SSL certificates installed.
99 little bugs in the code, 99 little bugs
take one down, patch it around
-2,147,483,648 little bugs in the code
Top
User avatar
tr0ll
Posts: 551
Joined: June 11th, 2006, 8:13 pm
Location: canada

Re: add-ons server not connecting

Post by tr0ll »

Same problem. Also cannot connect to multiplayer server.
Ran with
./wesnoth --log-info=network --log-debug=network --log-precise
Spoiler:
I ran update-ca-certificates and got this
Spoiler:
When i ran "sslscan --tls13 add-ons.wesnoth.org"
i got
Spoiler:
Does that mean my system needs to turn off trying to compress TLS1.3 stuff?
I have zlib1g-dev installed.
Top
User avatar
Pentarctagon
Project Manager
Posts: 5564
Joined: March 22nd, 2009, 10:50 pm
Location: Earth (occasionally)

Re: add-ons server not connecting

Post by Pentarctagon »

This looks like another issue probably related to https://letsencrypt.org/docs/dst-root-c ... mber-2021/. Normally with other people reporting this sort of issue the logs report a failure to verify Wesnoth's cert, ie:

Code: Select all

20211109 19:32:16 debug network: Verifying TLS certificate: /C=US/O=Internet Security Research Group/CN=ISRG Root X1: verified
20211109 19:32:16 debug network: Verifying TLS certificate: /C=US/O=Let's Encrypt/CN=R3: verified
20211109 19:32:16 debug network: Verifying TLS certificate: /CN=chantal.wesnoth.org: failed
20211109 19:32:16 error network: network_asio::error thrown during transaction with add-on server; "certificate verify failed"
Your logs say that it's failing to verify even the very first certificate in the chain, which to me would seem to indicate that there's something going on with your setup somehow - if it was failing to verify chantal.wesnoth.org then that would be one thing, but the fact that it's failing to even verify the root certificate would seem to indicate something isn't right elsewhere. What distro/version are you using?
99 little bugs in the code, 99 little bugs
take one down, patch it around
-2,147,483,648 little bugs in the code
Top
User avatar
tr0ll
Posts: 551
Joined: June 11th, 2006, 8:13 pm
Location: canada

Re: add-ons server not connecting

Post by tr0ll »

i have Devuan Chimaera 4.0 just upgraded recently.
I can try to install the newest Let's Encrypt root certificate manually, but i suspect it should be done via an updated .deb from the distro.
Top
gnombat
Posts: 706
Joined: June 10th, 2010, 8:49 pm

Re: add-ons server not connecting

Post by gnombat »

If you run the command dpkg-reconfigure ca-certificates, do you see the ISRG_Root_X1 certificate listed?

If I run it on my Ubuntu system (which should be basically the same as a Debian or Devuan system) I see it listed and active:
ca-certificates.png
As an experiment, I tried deactivating it, then running Wesnoth - and then connecting to the add-ons server no longer works.

I re-ran dpkg-reconfigure ca-certificates and reactivated ISRG_Root_X1, and then ran Wesnoth again - and connecting to the add-ons server works again.
Top
User avatar
tr0ll
Posts: 551
Joined: June 11th, 2006, 8:13 pm
Location: canada

Re: add-ons server not connecting

Post by tr0ll »

i ran that command and it did list the ISRG_Root_X1 but made no changes (all were already included).
i ran it again and removed the ISRG_Root_X1 , then again to add it in:
Spoiler:

same result trying to connect.
Top
User avatar
Pentarctagon
Project Manager
Posts: 5564
Joined: March 22nd, 2009, 10:50 pm
Location: Earth (occasionally)

Re: add-ons server not connecting

Post by Pentarctagon »

Someone on Fedora reported that the had to start wesnoth as SSL_CERT_FILE=/etc/ssl/certs/ca-bundle.crt wesnoth, so you could try that.
99 little bugs in the code, 99 little bugs
take one down, patch it around
-2,147,483,648 little bugs in the code
Top
gnombat
Posts: 706
Joined: June 10th, 2010, 8:49 pm

Re: add-ons server not connecting

Post by gnombat »

Pentarctagon wrote: ↑January 6th, 2022, 8:16 pm Someone on Fedora reported that the had to start wesnoth as SSL_CERT_FILE=/etc/ssl/certs/ca-bundle.crt wesnoth, so you could try that.
Debian-based systems don't have /etc/ssl/certs/ca-bundle.crt - but maybe SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt wesnoth would work.
Top
User avatar
tr0ll
Posts: 551
Joined: June 11th, 2006, 8:13 pm
Location: canada

Re: add-ons server not connecting

Post by tr0ll »

gnombat wrote: ↑January 6th, 2022, 9:38 pm
Pentarctagon wrote: ↑January 6th, 2022, 8:16 pm Someone on Fedora reported that the had to start wesnoth as SSL_CERT_FILE=/etc/ssl/certs/ca-bundle.crt wesnoth, so you could try that.
Debian-based systems don't have /etc/ssl/certs/ca-bundle.crt - but maybe SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt wesnoth would work.
Yes that last thing worked! :D
Spoiler:
Thanks very much.
Top
Post Reply

Return to “Technical Support”