Enabling SSL

caddish · September 26, 2013, 3:35pm

I’m trying to enable SSL but I have two problem

First the SSL field validation in the web ui is set to number only, as soon as I enter a letter the field becomes red

Second I have loaded my Certificate in Personal store of Local System then copyed my ssh thumbprint in config.xml without space.
But when I start nzbdrone.exe as administrator I get the following error

System.FormatException: Input string was not in a correct format.
at System.Text.StringBuilder.AppendFormat(IFormatProvider provider, String format, Object[] args)
at System.String.Format(IFormatProvider provider, String format, Object[] args)
at System.String.Format(String format, Object arg0, Object arg1, Object arg2)
at NzbDrone.Host.AccessControl.SslAdapter.Register() in m:\buildAgent2_work\bc9a5cca09497250\zbDrone.Host\AccessControl\SslAdapter.cs:line 39
at NzbDrone.Host.Owin.OwinHostController.StartServer() in m:\buildAgent2_work\bc9a5cca09497250\zbDrone.Host\Owin\OwinHostController.cs:line 54
at NzbDrone.Host.NzbDroneServiceFactory.Start() in m:\buildAgent2_work\bc9a5cca09497250\zbDrone.Host\ApplicationServer.cs:line 47
at NzbDrone.Host.Router.Route(ApplicationModes applicationModes) in m:\buildAgent2_work\bc9a5cca09497250\zbDrone.Host\Router.cs:line 50
at NzbDrone.Host.Bootstrap.Start(StartupArguments args, IUserAlert userAlert) in m:\buildAgent2_work\bc9a5cca09497250\zbDrone.Host\Bootstrap.cs:line 30
at NzbDrone.Console.ConsoleApp.Main(String[] args) in m:\buildAgent2_work\bc9a5cca09497250\zbDrone.Console\ConsoleApp.cs:line 20

Any suggestion ?

markus101 · September 26, 2013, 4:25pm

Build 623 fixes the Startup issue, but there seems to be something else not working with it. I need to look into it further, as for the cert hash in the UI, I’ll fix that up.

caddish · September 26, 2013, 4:43pm

That was quick Now it’s starting but I can’t connect to the ssl address

Log (hash removed):
13-9-26 16:40:38.2|Info|Bootstrap|Starting NzbDrone Console. Version 2.0.0.623
13-9-26 16:40:38.5|Info|MigrationLogger|*** Migrating data source=C:\ProgramData\zbDrone
zbdrone.db;cache size=-10485760;datetimekind=Utc;journal mode=Wal ***
13-9-26 16:40:38.7|Info|MigrationLogger|*** Migrating data source=C:\ProgramData\zbDrone\logs.db;cache size=-10485760;datetimekind=Utc;journal mode=Wal ***
13-9-26 16:40:38.7|Info|Router|Application mode: Interactive
13-9-26 16:40:38.8|Info|netsh.exe|Starting netsh.exe http show sslcert ipport=0.0.0.0:9898
13-9-26 16:40:38.8|Info|netsh.exe|Starting netsh.exe netsh http add sslcert ipport=0.0.0.0:9898 certhash=XXXXXXXXXXX appid={XXXXXXXXXXXXXXXXx}
13-9-26 16:40:38.9|Info|netsh.exe|Starting netsh.exe http add urlacl http://:8989/ sddl=D:(A;;GX;;;S-1-1-0)
13-9-26 16:40:38.9|Info|netsh.exe|Starting netsh.exe http add urlacl https://:9898/ sddl=D:(A;;GX;;;S-1-1-0)
13-9-26 16:40:39.0|Info|OwinHostController|starting server on http://*:8989/
13-9-26 16:40:39.2|Info|lambda_method|Starting NzbDrone API
13-9-26 16:40:39.8|Info|SceneMappingService|Updating Scene mapping

markus101 · September 26, 2013, 4:49pm

Yeah, doesn’t seem to be actually registering the SSL cert, still looking at that part.

markus101 · September 26, 2013, 6:20pm

Fixes should be available in 626. I’ve noticed an invisible space in front of the first character of the hash, it causes the cert registration to fail and I can’t programatically remove it, so make sure there isn’t one when saving the config file/settings in the UI.

caddish · September 26, 2013, 7:57pm

It’s working ! You guy are giving better support than payed software I’ll send you a donation when I have time

By the way two other little issue :
tapatalk 4 (android) says you are using an outdated version of the forum so push notification are disabled
And nzbdrone does not seem to be able to connect to sabnzbd on ssl using https://localhost as the host

Thanks !

markus101 · September 26, 2013, 9:13pm

We aim to please

I’ll take a look at tapatalk. Added a card for SSL support with SAB to Trello: https://trello.com/c/XSM5Vmar/401-sabnzbd-connect-over-ssl

caddish · January 20, 2014, 4:48pm

I’m trying to replace the certificate by a new one but nzbdrone seems to keep the old cert regardless of the settings in the UI, I restarted after each change yet it keeps the old certificate

markus101 · January 20, 2014, 6:25pm

Yeah, this is definitely something we overlooked. Added to Trello to deal with this better: https://trello.com/c/FXVW9Qh9/529-support-for-change-ssl-certificate

In the mean time you can manually remove the cert by running: netsh http delete sslcert ipport=0.0.0.0:8989 - replace 8989 with the port you’re using fro drone.

Then restart drone as admin and it should fix it up, if you run into any issues, let me know.

caddish · January 22, 2014, 8:57am

I deleted the sslcert and urlacl but then when I restart nzbdrone as administrator it does not seems to add the new certificate

“netsh http show sslcert” is empty

Nothing relevant in the log

markus101 · January 22, 2014, 2:19pm

Can you try adding the cert manually?
http add sslcert ipport=0.0.0.0:8989 certhash=YOUR_CERT_HASH appid={C2172AF4-F9A6-4D91-BAEE-C2E4EE680613}

Replace 8989 with your port number (if different) and YOUR_CERT_HASH with your hash/thumbprint

caddish · January 22, 2014, 2:22pm

It works, thanks !

markus101 · January 22, 2014, 2:29pm

Awesome, I’ll get this issue fixed up in a later version, but not sure why it wouldn’t automatically re-add it.

Fabian_Santiago · April 14, 2015, 2:28pm

when i try manually adding the binding, i receive this error (in Win7):

SSL Certificate add failed, Error: 1312
A specified logon session does not exist. It may already have been terminated.

what could be going on here?

Fabian_Santiago · April 14, 2015, 2:28pm

or i should have said manually adding the cert with the netsh command.

markus101 · April 15, 2015, 12:34am

Spaces/extra info in the cert hash would be my guess.

P.S. Please can edit your posts instead of double posting.