Unable to Retrieve Subtitle Language Map (SAN issue)

Any questions? Need some help?
Post Reply
Carlz10
Posts: 6
Joined: 16 Dec 2019, 06:07

Unable to Retrieve Subtitle Language Map (SAN issue)

Post by Carlz10 » 15 May 2020, 01:47

Whilst trying to clean up my scripts and directory structures, I encountered an issue when trying to test my existing QBittorent AMC script.
On first look I thought the location for the opensubs API is no longer (assuming it once was) defined as a SAN for the opensubtitles DNS.

i.e.

Code: Select all

Failed to compute hash
java.lang.IllegalStateException: Failed to retrieve subtitle language map
...
Caused by: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative DNS name matching api.opensubtitles.org found.
BUT after receiving the error I then looked at the current cert which was renewed in Feb, and the following are valid SANs:
*.opensubtitles.org
plexapp.api.opensubtitles.org
nxp.api.opensubtitles.org
qvivo.api.opensubtitles.org
opensubtitles.org
subtitleprovider.api.opensubtitles.org
gom.api.opensubtitles.org
xtreamer.api.opensubtitles.org
bsplayer.api.opensubtitles.org
osplayer.api.opensubtitles.org
boxee.api.opensubtitles.org

So I'm at a bit of loss as to why it's not working given the first wildcard SAN in the cert.

User avatar
rednoah
The Source
Posts: 18381
Joined: 16 Nov 2011, 08:59
Location: Taipei
Contact:

Re: Unable to Retrieve Subtitle Language Map (SAN issue)

Post by rednoah » 15 May 2020, 06:14

Sorry, no idea on this one. It seems to work for other users though. Googling for generic Java SSL debugging advice might help.


:idea: Adding filebot -script fn:sysinfo is always nice, so we can collect statistical data on affected platforms. Please read How to Request Help.
:idea: Please read the FAQ and How to Request Help.

Carlz10
Posts: 6
Joined: 16 Dec 2019, 06:07

Re: Unable to Retrieve Subtitle Language Map (SAN issue)

Post by Carlz10 » 16 May 2020, 06:06

:( I just searched for subs for one file using the GUI, and had the same issue.

I'll have a search when I get a chance

Carlz10
Posts: 6
Joined: 16 Dec 2019, 06:07

SOLVED | Unable to Retrieve Subtitle Language Map (SAN issue)

Post by Carlz10 » 16 May 2020, 10:21

Ok, so just posting a final update to say I got this sorted and just incase anyone else happens to be in Aus and encounters this. I had two seperate issues that I needed to work through.

First off, I still had an old build installed (I had been using the current portable GUI which also reported issues when trying to search for subs as noted above); the SAN error was thrown by the old build.

After updating to 4.9.1, the new error received was relating to cert expiry, with a date of 1st June 2019 - which was confusing since the cert is current.

Code: Select all

Caused by: java.security.cert.CertPathValidatorException: validity check failed
        ... 17 more
Caused by: java.security.cert.CertificateExpiredException: NotAfter: Sat Jun 01 14:54:48 AEST 2019
A curl sanity check revealed the issue was due to my awesome fed government blocking the opensubtitles domain.

Code: Select all

*   Trying 2001:8006:3000:1110::21...
* TCP_NODELAY set
* Connected to api.opensubtitles.org (2001:8006:3000:1110::21) port 80 (#0)
> GET /xml-rpc HTTP/1.1
> Host: api.opensubtitles.org
> User-Agent: curl/7.55.1
> Accept: */*
>
< HTTP/1.1 200 OK
< Date: Sat, 16 May 2020 09:56:55 GMT
< Connection: Keep-Alive
< Server: tcom-fe,c,c,pr,2
< Last-Modified: Thu, 14 May 2020 06:17:21 GMT
< ETag: "WAd118f0f8b8d0e02c"
< Content-Type: text/html;charset=UTF-8
< Vary: Origin
< X-Frame-Options: SAMEORIGIN
< Strict-Transport-Security: max-age=31536000
< Cache-Control: public, max-age=300, s-maxage=300
< Age: 46
< Accept-Ranges: bytes
< Content-Length: 713
< X-WA-Info: [V2.S10101.A35586.P9531.N13710.RN0.U2545064677].[OT/html.OG/pages]
<
<html>
<head>
<title>Access to the requested content/website has been disabled</title>
<META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">
<style type="text/css">
h1 {font-family: Arial, Helvetica; font-size: 1.5em; text-align: center;}
p {font-family: Arial, Helvetica; font-size: 1em; text-align: left;}
body {margin-top: 50px;}
div.mainContent {max-width: 600px; margin: 0 auto;}
a {color: #004d9d;}
</style>
</head>
<body>
<div class="mainContent">
<h1>Content Denied</h1>
<p>Access to this website has been disabled by an order of the Federal Court of Australia because it infringes or facilitates the infringement of copyright.</p>
<p>1800 086 346 for information.</p>
</div>
</body>
</html>*
Connected to a VPN and it's all good 8-)

User avatar
rednoah
The Source
Posts: 18381
Joined: 16 Nov 2011, 08:59
Location: Taipei
Contact:

Re: Unable to Retrieve Subtitle Language Map (SAN issue)

Post by rednoah » 16 May 2020, 11:17

HTTPS protocol successfully prevents man-in-the-middle attack; everyone scratches their head and thinks it's a bug. Or did the Aussie government not install valid certs on their man-in-the-middle endpoints? :lol:
:idea: Please read the FAQ and How to Request Help.

Carlz10
Posts: 6
Joined: 16 Dec 2019, 06:07

Re: Unable to Retrieve Subtitle Language Map (SAN issue)

Post by Carlz10 » 16 May 2020, 13:30

Or did the Aussie government not install valid certs on their man-in-the-middle endpoints?
Pretty much - my specific ISP.
Useless :lol:

Image


https://www.reddit.com/r/australia/comm ... his_legal/

Post Reply