Can't update on FreeNAS - certificate error

[Joe]

Error when trying to auto install updates.

ystem.Net.WebException: Error: TrustFailure (The authentication or decryption has failed.) ---> System.IO.IOException: The authentication or decryption has failed. ---> System.IO.IOException: The authentication or decryption has failed. ---> Mono.Security.Protocol.Tls.TlsException: Invalid certificate received from server. Error code: 0xffffffff800b010a
  at Mono.Security.Protocol.Tls.RecordProtocol.EndReceiveRecord (System.IAsyncResult asyncResult) [0x00040] in <11d29b2234814f928385c7f3dec82910>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.SafeEndReceiveRecord (System.IAsyncResult ar, System.Boolean ignoreEmpty) [0x00000] in <11d29b2234814f928385c7f3dec82910>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.NegotiateAsyncWorker (System.IAsyncResult result) [0x00071] in <11d29b2234814f928385c7f3dec82910>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslClientStream.EndNegotiateHandshake (System.IAsyncResult result) [0x0003b] in <11d29b2234814f928385c7f3dec82910>:0 
  at Mono.Security.Protocol.Tls.SslStreamBase.AsyncHandshakeCallback (System.IAsyncResult asyncResult) [0x0000c] in <11d29b2234814f928385c7f3dec82910>:0 
   --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslStreamBase.EndRead (System.IAsyncResult asyncResult) [0x00057] in <11d29b2234814f928385c7f3dec82910>:0 
  at Mono.Net.Security.Private.LegacySslStream.EndAuthenticateAsClient (System.IAsyncResult asyncResult) [0x00011] in <65d66c5eaa6a48038257422d3c294dab>:0 
  at Mono.Net.Security.Private.LegacySslStream.AuthenticateAsClient (System.String targetHost, System.Security.Cryptography.X509Certificates.X509CertificateCollection clientCertificates, System.Security.Authentication.SslProtocols enabledSslProtocols, System.Boolean checkCertificateRevocation) [0x0000e] in <65d66c5eaa6a48038257422d3c294dab>:0 
  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Byte[] buffer) [0x0006a] in <65d66c5eaa6a48038257422d3c294dab>:0 
   --- End of inner exception stack trace ---
  at System.Net.WebClient.DownloadFile (System.Uri address, System.String fileName) [0x000c9] in <65d66c5eaa6a48038257422d3c294dab>:0 
  at System.Net.WebClient.DownloadFile (System.String address, System.String fileName) [0x00019] in <65d66c5eaa6a48038257422d3c294dab>:0 
  at (wrapper remoting-invoke-with-check) System.Net.WebClient:DownloadFile (string,string)
  at Duplicati.Library.AutoUpdater.UpdaterManager.CheckForUpdate (Duplicati.Library.AutoUpdater.ReleaseType channel) [0x000ee] in <2e3a1be277654a188f84e503094300c3>:0 

How can I get around this?

I’ve already tried adding “–accept-any-ssl-certificate” to the “settings” tab.

[JonMikelV]

This might be a known issue with mono not including the latest SSL certificates. Did you try updating or installing the latest mono certificates?

Failed to authorize without "accept-any-ssl-certificate" option (SOLVED)

So I’m running the latest canary (2.0.2.8_canary_2017-09-20) on a Debian system. And for some reason I can’t get Duplicati to authorize the SSL certificate from Amazon Drive. I get the following error: Failed to connect: Failed to authorize using the OAuth service: Error: TrustFailure (The authentication or decryption has failed.). If the problem persists, try generating a new authid token from: https://duplicati-oauth-handler.appspot.com?type=amzcd I can get this to work with the “accept-an…

[Joe]

Thanks. I ran this:

cert-sync /etc/ssl/cert.pem

and it did something, so I’ll try to update again once my current database repair has finished (in 12 days time!)

[JonMikelV]

@Joe

I’ll try to update again once my current database repair has finished (in 12 days time!)

Ugh. Good luck & hope to hear from you in a couple weeks!

[Joe]

Since my database recreation failed overnight (my internet died), i tried to update duplicati and this has now succeeded.

So anyone else on FreeNAS or linux i guess should update the mono certs if they see the same error:

cert-sync /etc/ssl/cert.pem

[JonMikelV]

Thanks for confirming that the certificate update worked for you!

(By the way I updated the topic title to better reflect that this was FreeNAS specific discussion.)