WebException: Error: SecureChannelFailure

Sonarr version (exact version): 2.0.0.5344
Mono version (if Sonarr is not running on Windows): 5.20.1.34
OS: Synology DSM 6.2.3-25426 Update 3
Debug logs: https://drive.google.com/file/d/1P7GH7YN80AZpXkgC5UiL3hf3DTqerNx4/view?usp=sharing
Description of issue:
I run Sonarr on my Synology NAS. A few days ago I updated some packages to the latest version including Sonarr and Mono. Now I get an error in Sonarr that it can’t find any indexers. I switched the log level to trace, tested my indexer and found this error in the log:

21-1-8 16:14:42.6|Debug|NewznabCapabilitiesProvider|Failed to get newznab api capabilities from https://api.nzbgeek.info

[v2.0.0.5344] System.Net.WebException: Error: SecureChannelFailure (Authentication failed, see inner exception.): 'https://api.nzbgeek.info/api?t=caps&apikey=(removed) ---> System.Net.WebException: Error: SecureChannelFailure (Authentication failed, see inner exception.) ---> System.Security.Authentication.AuthenticationException: Authentication failed, see inner exception. ---> Mono.Btls.MonoBtlsException: Ssl error:0f000078:elliptic curve routines:OPENSSL_internal:POINT_IS_NOT_ON_CURVE
  at /spksrc/spk/mono/work-aarch64-6.1/mono-5.20.1.34/external/boringssl/crypto/ec/ec.c:835
  at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00038] in <c5f4e317158343a5916a953327f92540>:0 
  at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status, System.Boolean renegotiate) [0x000a1] in <c5f4e317158343a5916a953327f92540>:0 
  at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus,bool)
  at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <c5f4e317158343a5916a953327f92540>:0 
  at Mono.Net.Security.AsyncProtocolRequest.ProcessOperation (System.Threading.CancellationToken cancellationToken) [0x000ff] in <c5f4e317158343a5916a953327f92540>:0 
  at Mono.Net.Security.AsyncProtocolRequest.StartOperation (System.Threading.CancellationToken cancellationToken) [0x0008b] in <c5f4e317158343a5916a953327f92540>:0

When I open the url https://api.nzbgeek.info/api?t=caps&apikey=(removed) in my browser, then it loads without problems and also without certificate errors.

It may be a problem of nzbgeek. I added another indexer and that one works.

On nzbgeek.info you currently find this message:

Sorry about the site downtime, we're working on getting it running asap, but it isn't going to be in the next few days.
Your API calls from Sonarr & Radarr etc. are working as normal.

They claim that the API should work and as I said above, I can load the caps manually.

This seems to be a problem with the current Mono installation.

I found a similar problem and some steps to downgrade Mono.

These steps did not work exactly for me, but they gave me an idea what to do.

  1. I connected to my NAS via SSH
  2. edited /var/packages/mono/INFO
    • change version from “5.20.1.34” to “0.5.20.1”
    • note arch
  3. browse to https://synocommunity.com/package/mono, find release 5.8.0.108-11 and copy the link to your architecture.
  4. in the shell do “wget <link to Mono on your architecture>
  5. synopkg install <downloaded .spk file>
  6. restart your NAS
  7. check if Mono is running after the restart

I now run a 2 year old Mono version, but everything seems to work again. Maybe a newer version also works, but I didn’t want to check each and every version inbetween.

1 Like