applets, desklets, extentions Cache refresh SSL error [NOT SOLVED]

All Gurus once were Newbies
Forum rules
There are no such things as "stupid" questions. However if you think your question is a bit stupid, then this is the right place for you to post it. Please stick to easy to-the-point questions that you feel people can answer fast. For long and complicated questions prefer the other forums within the support section.
Before you post please read how to get help
Post Reply
EmJayAu
Level 1
Level 1
Posts: 2
Joined: Fri Dec 15, 2017 5:25 pm

applets, desklets, extentions Cache refresh SSL error [NOT SOLVED]

Post by EmJayAu » Thu Dec 21, 2017 4:48 am

Tried to install new applets, desklets and extensions and was hit with the following error message for all of them:

An error occurred while trying to access the server. Please try again in a little while.
Details: urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)

Anyone else???
Last edited by EmJayAu on Fri Dec 28, 2018 4:06 am, edited 2 times in total.

papa33
Level 2
Level 2
Posts: 63
Joined: Fri Feb 17, 2012 11:13 am

Re: applets, desklets, extentions Cache refresh SSL error

Post by papa33 » Thu Dec 21, 2017 9:54 am

Same here (using another distro).

If you try to connect to https://cinnamon-spices.linuxmint.com/, firefox complains about an expired certificate. You can still add an exception and access the site, then download and install your applet manually.
But the certificate should be renewed as quickly as possible.

Cosmo.
Level 23
Level 23
Posts: 17823
Joined: Sat Dec 06, 2014 7:34 am

Re: applets, desklets, extentions Cache refresh SSL error

Post by Cosmo. » Thu Dec 21, 2017 9:59 am

Obviously the owner (Clem?) has missed to renew the certificate, before it expired 7 hours ago.

The certificate for the forum has been renewed 2 weeks ago, the certificate for the blog in the beginning of the months, so spices seems to be forgotten.

papa33
Level 2
Level 2
Posts: 63
Joined: Fri Feb 17, 2012 11:13 am

Re: applets, desklets, extentions Cache refresh SSL error

Post by papa33 » Thu Dec 21, 2017 12:40 pm

Done. You can mark as solved.

EmJayAu
Level 1
Level 1
Posts: 2
Joined: Fri Dec 15, 2017 5:25 pm

Re: applets, desklets, extentions Cache refresh SSL error

Post by EmJayAu » Thu Dec 21, 2017 3:52 pm

Thanx a lot guys. I was a little worried, but seems the problem was found, not quite resolved tho.
The cache seems to refresh, but the window is left empty, for each of them, applets, desklets and extensions...
It might end up by resolving itself, might just need a little more patience, I guess!!
Thanx a lot guys!!

Cosmo.
Level 23
Level 23
Posts: 17823
Joined: Sat Dec 06, 2014 7:34 am

Re: applets, desklets, extentions Cache refresh SSL error [SOLVED]

Post by Cosmo. » Thu Dec 21, 2017 4:12 pm

I cannot confirm, all works again as expected. If the cache gets refreshed (no connection error any more), but the window is empty, it seems to be a different issue, which deserves a new topic.

For a first test you might create a fresh new user account and test there, also test with the live system.

wishx
Level 1
Level 1
Posts: 11
Joined: Sat Aug 22, 2015 7:45 pm

Re: applets, desklets, extentions Cache refresh SSL error [NOT SOLVED]

Post by wishx » Mon Oct 15, 2018 7:03 pm

It's happening again as of today (October 15, 2018).
Attachments
Screenshot from 2018-10-15 18-48-57.png
Last edited by wishx on Fri Dec 28, 2018 4:18 am, edited 1 time in total.

wishx
Level 1
Level 1
Posts: 11
Joined: Sat Aug 22, 2015 7:45 pm

Re: applets, desklets, extentions Cache refresh SSL error [NOT SOLVED]

Post by wishx » Tue Dec 04, 2018 10:56 am

2 months later and it's still happening. Anyone?

Edit: The certificate isn't expired (expires January 18, 2019), so it's something else. Is there an exception that can be made somewhere to bypass the check from themes and applets from inside Linux Mint Cinnamon?

Edit: I even went so far as to import the .crt from spices into /usr/share/ca-certificates/extra and update the certs, but no joy. :( I'm lost on this one.
Last edited by wishx on Fri Dec 28, 2018 4:18 am, edited 1 time in total.

wishx
Level 1
Level 1
Posts: 11
Joined: Sat Aug 22, 2015 7:45 pm

Re: applets, desklets, extentions Cache refresh SSL error [NOT SOLVED]

Post by wishx » Fri Dec 28, 2018 3:55 am

...and now I've updated to Linux Mint 19.1 Cinnamon (Cinnamon 4.0.8) and I'm still getting the same error message.

Any help would be greatly appreciated, even wild shots in the dark. Thank you.

User avatar
kelebek333
Level 2
Level 2
Posts: 58
Joined: Sat Jun 25, 2011 11:57 am
Location: Turkey
Contact:

Re: applets, desklets, extentions Cache refresh SSL error [NOT SOLVED]

Post by kelebek333 » Wed Jan 09, 2019 12:32 pm

You can try to apply following temp solution.

Open Spices.py with following command.

Code: Select all

xed admin:///usr/share/cinnamon/cinnamon-settings/bin/Spices.py
Find following line in Spices.py file,

Code: Select all

    import datetime
and add following line to its bottom line (pay attention to line indents).

Code: Select all

    import ssl
After this, add following line to the end of the file without indents and save file.

Code: Select all

ssl._create_default_https_context = ssl._create_unverified_context
Notice: as a result of this process, certificate check will not be performed, therefore it may create a secure connection problem.

wishx
Level 1
Level 1
Posts: 11
Joined: Sat Aug 22, 2015 7:45 pm

Re: applets, desklets, extentions Cache refresh SSL error [NOT SOLVED]

Post by wishx » Thu Jan 10, 2019 7:19 pm

kelebek333 wrote:
Wed Jan 09, 2019 12:32 pm
You can try to apply following temp solution.
Open Spices.py with following command.
~~snip~~
Notice: as a result of this process, certificate check will not be performed, therefore it may create a secure connection problem.
This worked! In all the research I did, I found:

Code: Select all

ssl._create_default_https_context = ssl._create_unverified_context
but had no idea where to put it (what py file(s) or what else to add to said file). This definitely did the trick.

Question: What makes this a temp solution? Will this get overwritten with every little Cinnamon update? Will I need to apply it more than once and, if so, what would change to necessitate redoing this fix?

Thanks so much for this fix, even if temporary! It's been driving me crazy for ages! :D

User avatar
kelebek333
Level 2
Level 2
Posts: 58
Joined: Sat Jun 25, 2011 11:57 am
Location: Turkey
Contact:

Re: applets, desklets, extentions Cache refresh SSL error [NOT SOLVED]

Post by kelebek333 » Fri Jan 11, 2019 10:34 am

wishx wrote:
Thu Jan 10, 2019 7:19 pm
Question: What makes this a temp solution? Will this get overwritten with every little Cinnamon update? Will I need to apply it more than once and, if so, what would change to necessitate redoing this fix?
This ignores certificate query of SSL certificate, this only for turn around.

Alternatively, You can try to open modules with LC_ALL=C parameter.

Code: Select all

LC_ALL=C cinnamon-settings applets #For applets
LC_ALL=C cinnamon-settings desklets #For desklets
LC_ALL=C cinnamon-settings extensions #For extensions
LC_ALL=C cinnamon-settings themes #For themes
Instead of them, You can apply this fix with following commands. So you don't ignore the ssl certificate query too.

Code: Select all

wget --no-check-certificate https://raw.githubusercontent.com/linuxmint/Cinnamon/584cbed6b908090531467fe00adb4909245a12f3/files/usr/share/cinnamon/cinnamon-settings/bin/Spices.py

Code: Select all

sudo cp -rf ./Spices.py /usr/share/cinnamon/cinnamon-settings/bin/

wishx
Level 1
Level 1
Posts: 11
Joined: Sat Aug 22, 2015 7:45 pm

Re: applets, desklets, extentions Cache refresh SSL error [NOT SOLVED]

Post by wishx » Wed Jan 16, 2019 3:39 pm

kelebek333 wrote:
Fri Jan 11, 2019 10:34 am
Instead of them, You can apply this fix with following commands. So you don't ignore the ssl certificate query too.

Code: Select all

wget --no-check-certificate https://raw.githubusercontent.com/linuxmint/Cinnamon/584cbed6b908090531467fe00adb4909245a12f3/files/usr/share/cinnamon/cinnamon-settings/bin/Spices.py

Code: Select all

sudo cp -rf ./Spices.py /usr/share/cinnamon/cinnamon-settings/bin/
@kelebek333 When I applied the temp fixes from before, everything worked. I just applied the fix and command quoted above and I am back to getting the same error, but it is (_ssl.c: 847) instead of 841, but you get the idea. I also have OpenSSL 1.1.1a from before the temporary fix thinking that might have been the problem.

Code: Select all

OpenSSL 1.1.1a  20 Nov 2018
built on: Sat Dec 29 01:34:02 2018 UTC
platform: linux-x86_64
options:  bn(64,64) rc4(16x,int) des(int) idea(int) blowfish(ptr) 
compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DNDEBUG
OPENSSLDIR: "/usr/local/ssl"
ENGINESDIR: "/usr/local/lib/engines-1.1"
Seeding source: os-specific
I had to reapply the temp fix to get it to work again.

User avatar
kelebek333
Level 2
Level 2
Posts: 58
Joined: Sat Jun 25, 2011 11:57 am
Location: Turkey
Contact:

Re: applets, desklets, extentions Cache refresh SSL error [NOT SOLVED]

Post by kelebek333 » Wed Jan 16, 2019 6:24 pm

Hi @wishx,

I guess, You installed Openssl with compile from source, if so this can't solve the issue. I tried it too.

Could You try to update Openssl with PPA repo.

For Linux Mint 19.x

Code: Select all

sudo add-apt-repository ppa:mgrocock/openssl
For Linux Mint 18.x

Code: Select all

sudo add-apt-repository ppa:carsten-uppenbrink-net/postfix
After You must refresh Mintupdate and install packages related with Openssl.

wishx
Level 1
Level 1
Posts: 11
Joined: Sat Aug 22, 2015 7:45 pm

Re: applets, desklets, extentions Cache refresh SSL error [NOT SOLVED]

Post by wishx » Thu Jan 17, 2019 3:23 pm

You're right, I did compile from source originally.

However, I did as you suggested and added the repo, updated, refreshed, installed the libs it recommended and rebooted. I tried and it gave the same [SSL: CERTIFICATE_VERIFY_FAILED] it usually gives. I tried to re-wget the files and cp it into place, but it still failed after that. So far, the ONLY thing that has worked has been bypassing it from within Spices.py with:

Code: Select all

ssl._create_default_https_context = ssl._create_unverified_context
Edit: I also ran "env LC_ALL=C cinnamon-settings desklets" as a test and it failed with the error as usual. Opened it, clicked on "Download", it says "Your cache is out of date. Would you like to update it now?", I click Yes and it fails as usual.

Now what? How do we solve this without turning it off completely? I added a comment to the github thread, but it's still closed. Ideas?

User avatar
kelebek333
Level 2
Level 2
Posts: 58
Joined: Sat Jun 25, 2011 11:57 am
Location: Turkey
Contact:

Re: applets, desklets, extentions Cache refresh SSL error [NOT SOLVED]

Post by kelebek333 » Thu Jan 17, 2019 4:45 pm

First you must uninstall compiled version of openssl. You can run following command in Openssl source dir.

Code: Select all

sudo make uninstall
Then you must undo your adjustments. These may be in the following files. I don't know what you did after installation

Code: Select all

/etc/environment
~/.bashrc
You can check the active files with the following commands.

Code: Select all

which openssl
whereis openssl
If you have a guide for compile, you can share.

User avatar
mahmutelmas06
Level 1
Level 1
Posts: 7
Joined: Sun Nov 04, 2018 8:21 am

Re: applets, desklets, extentions Cache refresh SSL error [NOT SOLVED]

Post by mahmutelmas06 » Thu Jan 24, 2019 5:18 pm

No developer here ?

After 2 years i am also getting this error after fresh install Linux Mint 19.1 Cinnamon.
Image

User avatar
mahmutelmas06
Level 1
Level 1
Posts: 7
Joined: Sun Nov 04, 2018 8:21 am

Re: applets, desklets, extentions Cache refresh SSL error [NOT SOLVED]

Post by mahmutelmas06 » Fri Jan 25, 2019 3:34 pm

Here is the fix.


copy paste on terminal.

Code: Select all

wget --no-check-certificate https://raw.githubusercontent.com/linuxmint/Cinnamon/584cbed6b908090531467fe00adb4909245a12f3/files/usr/share/cinnamon/cinnamon-settings/bin/Spices.py

Code: Select all

sudo cp -rf ./Spices.py /usr/share/cinnamon/cinnamon-settings/bin/
Image

Post Reply

Return to “Newbie Questions”