TLS-Socket: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac

Get help, report and discuss bugs.
NOTORIOUS VR
Posts: 8
Joined: 15 Jan 2017, 01:07

TLS-Socket: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac

Post by NOTORIOUS VR » 11 Sep 2019, 18:36

Can't seem to understand why I get this error when I use SSL connections to my provider..

Any help would be appreciated.

Full message: Could not read from TLS-Socket: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac

NZBGet Ver: 21.0
OS: Ubuntu 16 LTS

Thanks

sanderj
Posts: 184
Joined: 10 Feb 2014, 21:46

Re: TLS-Socket: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac

Post by sanderj » 12 Sep 2019, 08:15

It would be fantastic if you would tell the newsserver and the port you're using.

NOTORIOUS VR
Posts: 8
Joined: 15 Jan 2017, 01:07

Re: TLS-Socket: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac

Post by NOTORIOUS VR » 12 Sep 2019, 19:52

news.newsgroup.ninja

I've tried all the SSL ports listed on their site... Currently on port 80... the other two are 81 and 563 which do not work as well.

Thanks,

sanderj
Posts: 184
Joined: 10 Feb 2014, 21:46

Re: TLS-Socket: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac

Post by sanderj » 12 Sep 2019, 20:37

news.newsgroup.ninja works for me on my Ubuntu

What do you get with if you use in NZBget as newsserver with NTTPS (so: encryption on, port 563):

news.eweka.nl
news.xs4all.nl

And from the CLI:

echo | openssl s_client -connect news.newsgroup.ninja:563 2>&1

NOTORIOUS VR
Posts: 8
Joined: 15 Jan 2017, 01:07

Re: TLS-Socket: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac

Post by NOTORIOUS VR » 19 Sep 2019, 17:52

Sorry I guess this place doesn't send email notifications so I haven't seen that you replied.

Not sure what you mean about NZBGet as newsserver w/ NTTPS...

But here is the output of the command via CLI you requested:

Code: Select all

sascha@mediasrv1:~$ echo | openssl s_client -connect news.newsgroup.ninja:563 2>&1
CONNECTED(00000003)
depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
verify return:1
depth=0 CN = news.sslusenet.com
verify return:1
---
Certificate chain
 0 s:/CN=news.sslusenet.com
   i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
 1 s:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
   i:/O=Digital Signature Trust Co./CN=DST Root CA X3
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/CN=news.sslusenet.com
issuer=/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
---
No client certificate CA names sent
---
SSL handshake has read 4125 bytes and written 903 bytes
---
New, TLSv1/SSLv3, Cipher is AES128-SHA
Server public key is 4096 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : AES128-SHA
    Session-ID: C0615B160FF1348D1ABAC58D6C0E1B0D1B3C5A90A3A44E1AB0C7D34CEE06BA1F
    Session-ID-ctx:
    Master-Key: FD6E3453857D8827485E0CAD757A99483BC3BC55EF2B393820B9813DFA6B53E3BAE6BEEFB0F785F1FD495F04A56912B7
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - e8 38 07 a5 25 65 3c c8-b0 f2 d3 78 02 8a 1b 74   .8..%e<....x...t
    0010 - 21 a0 27 5a ee 07 4f aa-55 f1 ba 0b 8f be 4e df   !.'Z..O.U.....N.
    0020 - a2 4f 6c a1 b7 79 59 0a-51 cf cc e7 d9 44 66 1f   .Ol..yY.Q....Df.
    0030 - 25 c2 51 8b 84 be a1 de-d0 ae cf fb 85 24 17 7a   %.Q..........$.z
    0040 - 78 f8 63 ba 72 73 ca 16-aa f7 6f 5e 56 26 5f 54   x.c.rs....o^V&_T
    0050 - ff f3 bc d2 f9 12 0a e4-15 25 62 db b1 b6 83 aa   .........%b.....
    0060 - 0f a4 ff 62 1b 27 56 e5-80 e2 74 ae 17 02 c5 dc   ...b.'V...t.....
    0070 - c8 a8 b9 b9 b3 26 fd 11-b6 44 a6 a3 1d 37 18 fe   .....&...D...7..
    0080 - bd 13 0f c9 ce 63 93 02-24 f7 52 e9 0b 52 90 2d   .....c..$.R..R.-
    0090 - 45 b8 39 62 ae 64 7a 22-15 2b 12 61 61 97 bc 13   E.9b.dz".+.aa...

    Start Time: 1568915446
    Timeout   : 300 (sec)
    Verify return code: 0 (ok)
---
DONE

sanderj
Posts: 184
Joined: 10 Feb 2014, 21:46

Re: TLS-Socket: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac

Post by sanderj » 19 Sep 2019, 21:29

Your openssl session looks good, so that does not reveal a problem / cause.
NOTORIOUS VR wrote:
19 Sep 2019, 17:52

Not sure what you mean about NZBGet as newsserver w/ NTTPS...
I meant: what happens if you fill out a few other newsservers in nzbget and try to connect.

NOTORIOUS VR
Posts: 8
Joined: 15 Jan 2017, 01:07

Re: TLS-Socket: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac

Post by NOTORIOUS VR » 21 Sep 2019, 12:52

sanderj wrote:
19 Sep 2019, 21:29
I meant: what happens if you fill out a few other newsservers in nzbget and try to connect.
I've had this issue with other news servers as well unfortunately.

lasdjlasda
Posts: 16
Joined: 02 Mar 2015, 11:56

Re: TLS-Socket: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac

Post by lasdjlasda » 23 Sep 2019, 07:56

I have also had this problem for a long while, posting the results of the same command - is this also ok?

Code: Select all

LibreELEC:~ # echo | openssl s_client -connect news.newsgroup.ninja:563 2>&1
CONNECTED(00000003)
depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
verify return:1
depth=0 CN = news.sslusenet.com
verify return:1
---
Certificate chain
 0 s:/CN=news.sslusenet.com
   i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
 1 s:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
   i:/O=Digital Signature Trust Co./CN=DST Root CA X3
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/CN=news.sslusenet.com
issuer=/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
---
No client certificate CA names sent
---
SSL handshake has read 4125 bytes and written 893 bytes
---
New, TLSv1/SSLv3, Cipher is AES128-SHA
Server public key is 4096 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : AES128-SHA
    Session-ID: 3E867D4A86F6D7788557B2EE8D3DA5859FF7DDF16B4E1DB3871BE5154B618CA8
    Session-ID-ctx: 
    Master-Key: 5242A52D7FAFE4E0F566F7B1C6E7D2FF747BF6A4A9C2B7FE201A166C866AB7E693513CB67AB6596BCE5C6ABA491BE584
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - cc 08 12 fc a6 c9 96 c5-c0 61 0e 07 d4 0a e8 5e   .........a.....^
    0010 - b2 aa 09 92 6a 3b 7d 90-ca d9 d6 64 2d 96 f2 f2   ....j;}....d-...
    0020 - 87 67 b2 c1 a5 23 80 2a-53 80 c4 de fe 1c c2 dd   .g...#.*S.......
    0030 - 49 f5 5e 2f b5 61 ba 6b-16 05 47 9f c0 8b 10 d3   I.^/.a.k..G.....
    0040 - 6f ad 63 91 61 71 32 01-bd 73 f7 4b a5 06 05 c3   o.c.aq2..s.K....
    0050 - a7 d6 1a 33 f3 7a 85 0d-c7 77 e8 16 03 3f 61 9c   ...3.z...w...?a.
    0060 - 6d 8d 00 34 ce 8e 40 1a-90 0a 10 b6 ea 62 a1 2d   m..4..@......b.-
    0070 - 15 0d 1b ca c9 3d 66 a1-d5 a3 4e 23 8a c0 84 f2   .....=f...N#....
    0080 - ed 1a e9 34 52 d4 02 ce-8d c5 bd 6e 6d 28 6a f5   ...4R......nm(j.
    0090 - 0f 6d c8 55 5a 97 72 ff-5e ae 2b 8b 47 36 33 9a   .m.UZ.r.^.+.G63.

    Start Time: 1569225278
    Timeout   : 300 (sec)
    Verify return code: 0 (ok)
---
DONE

sanderj
Posts: 184
Joined: 10 Feb 2014, 21:46

Re: TLS-Socket: error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac

Post by sanderj » 23 Sep 2019, 15:32

I have no explanation for this, and I can't reproduce it, even after changing NZBget's cacert.pem

So ... time for you to do some induction and deduction:

Current nzbget (21?) with a fresh nzbget.conf. Method: download and unpack and run nzbget 21 in a seperate directory, using the fresh nzbget.conf in there. Does it still happen?
If so: older nzbget (20, 19) with fresh nzbget.conf ... does it sill happen?


Post Reply

Who is online

Users browsing this forum: Google [Bot] and 59 guests