A System.Net.WebException: Error: TrustFailure error occurs

rmsehfdoal · November 12, 2021, 7:44am

Hello A System.Net.WebException: Error: TrustFailure error occurs
The operating system is Centos 6

The error contents are as follows

System.Net.WebException: Error: TrustFailure (Authentication failed, see inner exception.) —> System.Security.Authentication.AuthenticationException: Authentication failed, see inner exception. —> Mono.Btls.MonoBtlsException: Ssl error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
at /builddir/build/BUILD/mono-6.12.0.90/external/boringssl/ssl/handshake_client.c:1132
at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00048] in <2f8f8f21cd414d84b3ddeb4281c7a63f>:0
at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status, System.Boolean renegotiate) [0x000da] in <2f8f8f21cd414d84b3ddeb4281c7a63f>:0
at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus,bool)
at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <2f8f8f21cd414d84b3ddeb4281c7a63f>:0
at Mono.Net.Security.AsyncProtocolRequest.ProcessOperation (System.Threading.CancellationToken cancellationToken) [0x000fc] in <2f8f8f21cd414d84b3ddeb4281c7a63f>:0
— End of inner exception stack trace —
at Mono.Net.Security.MobileAuthenticatedStream.ProcessAuthentication (System.Boolean runSynchronously, Mono.Net.Security.MonoSslAuthenticationOptions options, System.Threading.CancellationToken cancellationToken) [0x00262] in <2f8f8f21cd414d84b3ddeb4281c7a63f>:0
at Mono.Net.Security.MonoTlsStream.CreateStream (System.Net.WebConnectionTunnel tunnel, System.Threading.CancellationToken cancellationToken) [0x0016a] in <2f8f8f21cd414d84b3ddeb4281c7a63f>:0
at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x001ba] in <2f8f8f21cd414d84b3ddeb4281c7a63f>:0
— End of inner exception stack trace —
at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x0021a] in <2f8f8f21cd414d84b3ddeb4281c7a63f>:0
at System.Net.WebConnection.InitConnection (System.Net.WebOperation operation, System.Threading.CancellationToken cancellationToken) [0x00141] in <2f8f8f21cd414d84b3ddeb4281c7a63f>:0
at System.Net.WebOperation.Run () [0x0009a] in <2f8f8f21cd414d84b3ddeb4281c7a63f>:0
at System.Net.WebCompletionSource1[T].WaitForCompletion () [0x00094] in <2f8f8f21cd414d84b3ddeb4281c7a63f>:0 at System.Net.HttpWebRequest.RunWithTimeoutWorker[T] (System.Threading.Tasks.Task1[TResult] workerTask, System.Int32 timeout, System.Action abort, System.Func`1[TResult] aborted, System.Threading.CancellationTokenSource cts) [0x000f8] in <2f8f8f21cd414d84b3ddeb4281c7a63f>:0
at System.Net.HttpWebRequest.GetResponse () [0x00016] in <2f8f8f21cd414d84b3ddeb4281c7a63f>:0
at System.Net.WebClient.GetWebResponse (System.Net.WebRequest request) [0x00000] in <2f8f8f21cd414d84b3ddeb4281c7a63f>:0
at System.Net.WebClient.DownloadBits (System.Net.WebRequest request, System.IO.Stream writeStream) [0x000e6] in <2f8f8f21cd414d84b3ddeb4281c7a63f>:0
at System.Net.WebClient.DownloadFile (System.Uri address, System.String fileName) [0x00088] in <2f8f8f21cd414d84b3ddeb4281c7a63f>:0
at System.Net.WebClient.DownloadFile (System.String address, System.String fileName) [0x00008] in <2f8f8f21cd414d84b3ddeb4281c7a63f>:0
at (wrapper remoting-invoke-with-check) System.Net.WebClient.DownloadFile(string,string)
at Duplicati.Library.AutoUpdater.UpdaterManager.CheckForUpdate (Duplicati.Library.AutoUpdater.ReleaseType channel) [0x000ee] in <8d4cb1693e00483189d3952c3f0ed20f>:0

Any solution? thank you

drwtsn32 · November 15, 2021, 5:30am

What back end are you using?

rmsehfdoal · November 15, 2021, 8:06am

How do I check the back end?(__)

drwtsn32 · November 15, 2021, 3:42pm

It’s on the “destination” section of your backup configuration. (Where are you saving your backup data?)

rmsehfdoal · November 16, 2021, 8:33am

I’m saving it to google drive. Saved to team drive.

The same symptom occurs even if you add a new backup setting to another Google account.

drwtsn32 · November 16, 2021, 1:00pm

What version of Duplicati is installed? What version of mono?

$ mono --version

I’m guessing either mono is out of date, or your trusted root certificate store (ca-certificates) is out of date.

rmsehfdoal · November 17, 2021, 1:29am

Duplicati version is 2.0.6.3 beta and MonoVersion is : 6.12.0.90 .
The OS is Centos6, is there any way to update the trusted root certificate store (ca-certificates)?

Thank you.

drwtsn32 · November 17, 2021, 3:09am

I’m not sure, but to see if we are on the right track, please try setting this option on page 2 of your backup:

Save your backup config and try to run a backup again. If it works then I think we are on the right track.

rmsehfdoal · November 17, 2021, 4:34am

I clicked the Test Connection button but nothing happens

Add advanced option: What hash value should I enter in Accept-any-ssl-certificate?

What value should I enter?

thank you

drwtsn32 · November 17, 2021, 6:16am

No hash value is required for that option, because it tells Duplicati to accept ANY certificate.

What happens if you save the config and try to run a backup?

rmsehfdoal · November 17, 2021, 7:06am

When I save the settings and run a backup, nothing happens.

The log occurs as shown in the picture

Saving the settings is normal.
However, there is no response when running the backup.

Thank you

drwtsn32 · November 17, 2021, 1:41pm

I see a “connection timed out” error now, which sounds like Duplicati can’t reach your backup destination.

rmsehfdoal · November 18, 2021, 2:08am

How to solve it? thank you

drwtsn32 · November 18, 2021, 1:03pm

Do some basic network tests from the machine that is running duplicati:

nslookup duplicati-oauth-handler.appspot.com
ping duplicati-oauth-handler.appspot.com
telnet duplicati-oauth-handler.appspot.com 443

nslookup should return IP address, ping should give you replies, and telnet should connect (not give you a connection timeout error).

rmsehfdoal · November 18, 2021, 1:40pm

ping communicates well as in the picture

Authentication token error occurs even when the Accept-any-ssl-certificate option is enabled

drwtsn32 · November 18, 2021, 1:44pm

Yes because now you have a different problem from your first post. The problem now is that the connection to that destination doesn’t appear to work. What happened with that third command (telnet)? It looks like you may not have pressed enter.

rmsehfdoal · November 18, 2021, 1:56pm

When I type telnet duplicati-oauth-handler.appspot.com 443 I get a blank screen as shown in the picture

drwtsn32 · November 18, 2021, 5:20pm

That’s good, that means a basic connection test succeeded. Not sure why you are getting a connection timeout when you try to run a backup though.

rmsehfdoal · December 8, 2021, 8:34am

Any other solution? Still getting authentication failure, referencing inner exception error.

Is it a certificate issue?

drwtsn32 · December 8, 2021, 3:51pm

The first error you posted sounds like a certificate issue. But the second one was a connection timeout issue.

What error are you still getting?

If you are getting the certificate error, then please see my earlier post about setting the “accept any ssl certification” option as a test.