Rpi-jukebox-rfid: 🐛 | SSL stream does not play - certificate failed to verify

[topas-rec]

Bug

What I did

Fresh install using Raspbian buster desktop and add stream URL and try to play it.
URL is https://wdr-diemaus-live.icecastssl.wdr.de/wdr/diemaus/live/mp3/128/stream.mp3

What happened

The stream does not play and the issue when showing mpc error is shown below.

I expected this to happen

Stream plays. This worked in the previous install. I even cannot get this running in my image backup anymore where it worked before. Maybe it has external causes like a changed certificate? I am lost here.

Further information that might help

pi@raspberrypi:~ $ mpc
volume: n/a   repeat: off   random: off   single: off   consume: off
ERROR: Failed to decode https://wdr-diemaus-live.icecastssl.wdr.de/wdr/diemaus/live/mp3/128/stream.mp3; CURL failed: server certificate verification failed. CAfile: none CRLfile: none

PS: Simply setting it to http instead of https is not possible with this stream.

Software

Base image and version

2020-05-27-raspios-buster-armhf.img

Branch / Release

master 2.0

Installscript

scripts/installscripts/buster-install-default.sh

Hardware

RaspberryPi version

Pi Model 3B V1.2

RFID Reader

16c0:27db HXGCoLtd Keyboard

Soundcard

onboard

Other notable hardware

GPIO Buttons:
    volU = Button(22,pull_up=True,hold_time=0.3,hold_repeat=True)
    volD = Button(27,pull_up=True,hold_time=0.3,hold_repeat=True)
    frwd = Button(17,pull_up=True)
    prev = Button(24,pull_up=True)
    halt = Button(23,pull_up=True)

USB Stick that holds the audiofolders, bind mounted into ~/RPi-Jukebox-RFID/shared/audiofolders/

[s-martin]

I could play the link in a browser, but I reproduced the issue when trying to play the stream in Phoniebox.

Don’t know so far, what’s the issue.

[topas-rec]

I could play the link in a browser, but I reproduced the issue when trying to play the stream in Phoniebox.

Don’t know so far, what’s the issue.

Plays perfect in browser

[drocx]

Hello,
the certificate for the stream is ok and valid.
I used the stream link for months. Yesterday the link works fine. Today I have the same bug.
I have installed Phoniebox 2.0.
Mopidy Output: Oops, that link could not be found

[topas-rec]

This https stream in comparison works fine:
https://radio.stew.moe/stream/stream256.opus
Just the "Maus"-Stream fails.

Hello,
the certificate for the stream is ok and valid.
I used the stream link for months. Yesterday the link works fine. Today I have the same bug.
I have installed Phoniebox 2.0.
Mopidy Output: Oops, that link could not be found

@drocx thanks for your help. The Maus-Stream worked fine for me, too two days ago.
@drocx you are using mopidy, so I assume you're using the spotify version? Have you done updates or a fresh install and it worked before and not after the updates or fresh install?

[topas-rec]

I asked the guys from mpd.
https://github.com/MusicPlayerDaemon/MPD/issues/887

[s-martin]

I'm not an expert for SSL, but I assume there's an issue in the chain of certificates for this URL. Maybe one of these needs to be updated in the Pi.

[drocx]

@topas-rec
I have updated 2.0 RC to Final Release a few days ago. No issues after the update.
My son hears WDR Maus ever day without any issues.

After the stream stop working yesterday I installed every available update without success.

I think it’s an issues with the root certificate that comes with Raspbian.

The stream works on iOS and windows without any Problems.

[topas-rec]

Everyone having this issue: Can you please try again today with https://wdr-diemaus-live.icecastssl.wdr.de/wdr/diemaus/live/mp3/128/stream.mp3?

I tried to check if it works on a x86 Raspberry pi OS in a VM and it works before and after all packages update though it shows the curl certificate problem.
Then I decided to test on the Raspberry Pi itself in the Phoniebox and... it works again.

[drocx]

@topas-rec It works again. 🥳

This issue caused the „error“.