2017-01-24, 20:13
I dont konw if this was mentioned in this thread before but saw some in the x86 build thread.
I have my media source on webdavs on my synology nas with a lets encrypt certificate.
I get ssl error 35 since version 7.90.010 of libreelec when trying to play something. I also tried build 0117 but it still wont work
see https://forum.libreelec.tv/thread-4075.html for log with version 7.95.1 and debug enabled for libcurl
if you need more info please let me know
Edit:
With some help from the guys in the irc channel it seems cipher choise is the issue.
The synology nas has this line in config:
SSLCipherSuite HIGH:!EXPORT:!eNULL:!aNULL:!DES:!RC4:!RC2:!MD5:!IDEA:!SEED:!CAMELLIA:!AESGCM:+AES128:+AES256:+3DES:+kEECDH:+kRSA:!EDH:!aECDH:!aECDSA:!kECDHe:!SRP:!PSK
I changed it to:
SSLCipherSuite HIGH:!aNULL:!MD5
now it works but it would be better to fix the issue within Kodi since you dont have control of all webservers
Edit2:
Changed the ciphers to:
SSLCipherSuite HIGH:!EXPORT:!eNULL:!aNULL:!DES:!RC4:!RC2:!MD5:!IDEA:!SEED:!CAMELLIA:!AESGCM:+AES128:+3DES:+kEECDH:+kRSA:!EDH:!aECDH:!aECDSA:!kECDHe:!SRP:!PSK
It seems +AES256 is the issue
I have my media source on webdavs on my synology nas with a lets encrypt certificate.
I get ssl error 35 since version 7.90.010 of libreelec when trying to play something. I also tried build 0117 but it still wont work
see https://forum.libreelec.tv/thread-4075.html for log with version 7.95.1 and debug enabled for libcurl
if you need more info please let me know
Edit:
With some help from the guys in the irc channel it seems cipher choise is the issue.
The synology nas has this line in config:
SSLCipherSuite HIGH:!EXPORT:!eNULL:!aNULL:!DES:!RC4:!RC2:!MD5:!IDEA:!SEED:!CAMELLIA:!AESGCM:+AES128:+AES256:+3DES:+kEECDH:+kRSA:!EDH:!aECDH:!aECDSA:!kECDHe:!SRP:!PSK
I changed it to:
SSLCipherSuite HIGH:!aNULL:!MD5
now it works but it would be better to fix the issue within Kodi since you dont have control of all webservers
Edit2:
Changed the ciphers to:
SSLCipherSuite HIGH:!EXPORT:!eNULL:!aNULL:!DES:!RC4:!RC2:!MD5:!IDEA:!SEED:!CAMELLIA:!AESGCM:+AES128:+3DES:+kEECDH:+kRSA:!EDH:!aECDH:!aECDSA:!kECDHe:!SRP:!PSK
It seems +AES256 is the issue