SSL issue with netsh not running

Help & Support
1

I’ve seen multiple posts about this but they all don’t seem to be my issue. I’m running Windows 8.1 with .NET 4.5.1 installed. I’ve tried running the nzbdrone.console as administrator as well. I did all the steps to see if there were phantom white spaces in my hash to no avail. The problem is in my logs it appears that nzbdrone doesn’t even attempt to do the netsh process. I am running with elevated permissions. Trace logging doesn’t show me anything either in regards to the issue. I have the certificates imported correctly and if I manually run the netsh process it works but the next time I start nzbdrone it’s gone since the program doesn’t even attempt to register as seen by the below log.

14-9-6 10:07:59.6|Info|Bootstrap|Starting NzbDrone - C:\ProgramData\NzbDrone\bin\NzbDrone.Console.exe - Version 2.0.0.1861
14-9-6 10:08:00.0|Info|MigrationLogger|*** Migrating data source=C:\ProgramData\NzbDrone\nzbdrone.db;cache size=-10485760;datetimekind=Utc;journal mode=Wal ***
14-9-6 10:08:00.1|Info|MigrationLogger|*** Migrating data source=C:\ProgramData\NzbDrone\logs.db;cache size=-10485760;datetimekind=Utc;journal mode=Wal ***
14-9-6 10:08:00.1|Info|Router|Application mode: Interactive
14-9-6 10:08:00.4|Info|OwinHostController|Listening on the following URLs:
14-9-6 10:08:00.4|Info|OwinHostController| http://:8989/
14-9-6 10:08:00.4|Info|OwinHostController| https://:9898/
14-9-6 10:08:00.6|Info|lambda_method|Starting NzbDrone API
14-9-6 10:08:01.4|Info|SceneMappingService|Updating Scene mappings
14-9-6 10:08:01.4|Info|HousekeepingService|Running housecleaning tasks

my config:

<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<Config>
  <Port>8989</Port>
  <SslPort>9898</SslPort>
  <EnableSsl>True</EnableSsl>
  <LaunchBrowser>False</LaunchBrowser>
  <ApiKey>removed</ApiKey>
  <AuthenticationEnabled>True</AuthenticationEnabled>
  <Branch>master</Branch>
  <Username>******</Username>
  <Password>*******</Password>
  <LogLevel>Info</LogLevel>
  <SslCertHash>‎‎removed</SslCertHash>
  <UrlBase></UrlBase>
  <UpdateMechanism>BuiltIn</UpdateMechanism>
</Config>
2

You’re only going to see netsh run if you have trace logging enabled (and it wasn’t registered already).

There should be two commands run, one for the URL with httpsys and another to register the certificate with that port.

3

That log file I pasted was with trace logging enabled. The config shows Info only because I reverted back to info log level prior to pasting it here.

If I run the command to see if anything is bound it’s not.

C:\WINDOWS\system32> netsh.exe http show sslcert ipport=0.0.0.0:9898

SSL Certificate bindings:

The system cannot find the file specified.

4

Looks like the startup process only logs at info and above currently. I just pushed a change to develop that will log all events on startup and then fallback to the configured logging level.

Build 2.0.0.1941 and above has this change. You can change to develop via this process: https://github.com/NzbDrone/NzbDrone/wiki/Release-Branches

5

Thanks. Doing that showed there were still some phantom spaces so I did the same procedure as outlined in another topic by deleting and retyping the characters and now it binds but my logs show these messages not sure if they mean anything:

14-9-6 11:47:21.6|Debug|netsh.exe|Starting netsh.exe http add urlacl http://:8989/ sddl=D:(A;;GX;;;S-1-1-0)
14-9-6 11:47:21.7|Debug|netsh.exe|Url reservation add failed, Error: 183
14-9-6 11:47:21.7|Debug|netsh.exe|Cannot create a file when that file already exists.
14-9-6 11:47:21.7|Debug|netsh.exe|Starting netsh.exe http add urlacl https://:9898/ sddl=D:(A;;GX;;;S-1-1-0)
14-9-6 11:47:21.7|Debug|netsh.exe|Url reservation add failed, Error: 183
14-9-6 11:47:21.7|Debug|netsh.exe|Cannot create a file when that file already exists.

Also now that I can get in via SSL my console is showing this message which doesn’t show when I connect to the non-ssl port:

app.js : 32823
Uncaught SecurityError: Failed to read the ‘localStorage’ property from ‘Window’: Access is denied for this document.

6

Those failures are okay, since the URL has already been registered.

Which browser are you getting that error in? Make sure private browser isn’t enabled (in some browsers it can cause issues).

7

Chrome. Is private browsing incognito? I’m not doing that. But oddly if I use IE there’s no issue.

Edit: Nevermind. I forgot I use a Script Blocker in Chrome and I didn’t have it set up for the SSL port. Problem solved. Thanks for your help :smile: