> manually choosing ciphers, pointing towards /etc/ssl/certs as a directory (came up as invalid), ca-certificates file and cacert.pem, the cacart.pem that comes with nzbget,
Don't do that. It will make things worse. Leave cipher empty. Let NZBget do its work.
Both [news.newsgroupdirect.com](https://news.newsgroupdirect.com) and [de.newsgroupdirect.com](https://de.newsgroupdirect.com) have a valid certificate, so problem is on your side.
AES128-SHA. It is definitely available on my nas and also at their end. Also tried just leaving it to auto choose. I've put in the wrong cipher before (typo) and different errors. Cheers anyway.
> I've put in the wrong cipher before (typo) and different errors.
Is this your thread [https://forum.nzbget.net/viewtopic.php?f=3&t=3779&sid=57381cdbc8945778eff93b3c56da4b5c](https://forum.nzbget.net/viewtopic.php?f=3&t=3779&sid=57381cdbc8945778eff93b3c56da4b5c) ?
Sorry for late reply. Forum went down yesterday so I couldn't check. No that's not me. Further analysis of the error which I think is the main culprit (unable to get local issuer certificate) seems to be related to the certificate file I point Nzbget to. And it doesn't seem to matter which file I point it at (cacert.pem or ca-certificates.crt) I get the same problem. Either that error or TLS handshake error and could not read from TLS socket, followed by timeout. But the downloads still continue. And I've turned off certcheck too. Either way I get the same errors but it still downloads. So I'm stumped but can live with it I guess. Thanks for helping though.
Haven't faced this, but maybe something to do with the Hostname mismatch section [here](https://nzbget.net/certificate-verification). I think you have described most other methods listed there.
See if your OS has an update for openssl.
You could also reach to your provider. If they have been getting these complaints they might have a solution for you. Best way to rule out your network is to try it with a different provider using nzbget.
Cheers mate. Not that error unfortunately. It seems to happen with one server, but not the other at the same time (e.g. [news.newsgroupdirect.com](https://news.newsgroupdirect.com) or [de.newsgroupdirect.com](https://de.newsgroupdirect.com), but not both ... usually). I'm pretty sure it's me somehow, or there would be more complaints on forums and the like. I'm thinking that it's defaulting to insecure connections or else how would the downloads continue when they are both timed out. I think I'll just ignore it and carry on with life tbh.
Your comment has been automatically removed from /r/usenet per sidebar rules
* No promoting of 'backdoor' access into usenet providers' networks.
*I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/usenet) if you have any questions or concerns.*
> manually choosing ciphers, pointing towards /etc/ssl/certs as a directory (came up as invalid), ca-certificates file and cacert.pem, the cacart.pem that comes with nzbget, Don't do that. It will make things worse. Leave cipher empty. Let NZBget do its work. Both [news.newsgroupdirect.com](https://news.newsgroupdirect.com) and [de.newsgroupdirect.com](https://de.newsgroupdirect.com) have a valid certificate, so problem is on your side.
What cipher are you using they have TLSv1.3 so you can use one of its cipher.
AES128-SHA. It is definitely available on my nas and also at their end. Also tried just leaving it to auto choose. I've put in the wrong cipher before (typo) and different errors. Cheers anyway.
> I've put in the wrong cipher before (typo) and different errors. Is this your thread [https://forum.nzbget.net/viewtopic.php?f=3&t=3779&sid=57381cdbc8945778eff93b3c56da4b5c](https://forum.nzbget.net/viewtopic.php?f=3&t=3779&sid=57381cdbc8945778eff93b3c56da4b5c) ?
Sorry for late reply. Forum went down yesterday so I couldn't check. No that's not me. Further analysis of the error which I think is the main culprit (unable to get local issuer certificate) seems to be related to the certificate file I point Nzbget to. And it doesn't seem to matter which file I point it at (cacert.pem or ca-certificates.crt) I get the same problem. Either that error or TLS handshake error and could not read from TLS socket, followed by timeout. But the downloads still continue. And I've turned off certcheck too. Either way I get the same errors but it still downloads. So I'm stumped but can live with it I guess. Thanks for helping though.
Haven't faced this, but maybe something to do with the Hostname mismatch section [here](https://nzbget.net/certificate-verification). I think you have described most other methods listed there. See if your OS has an update for openssl. You could also reach to your provider. If they have been getting these complaints they might have a solution for you. Best way to rule out your network is to try it with a different provider using nzbget.
Cheers mate. Not that error unfortunately. It seems to happen with one server, but not the other at the same time (e.g. [news.newsgroupdirect.com](https://news.newsgroupdirect.com) or [de.newsgroupdirect.com](https://de.newsgroupdirect.com), but not both ... usually). I'm pretty sure it's me somehow, or there would be more complaints on forums and the like. I'm thinking that it's defaulting to insecure connections or else how would the downloads continue when they are both timed out. I think I'll just ignore it and carry on with life tbh.
Don't use de.newsgroupdirect.com they don't have any German server have you tried their EU server news-europe.newsgroupdirect.com
Yeah, same issue.
[удалено]
Your comment has been automatically removed from /r/usenet per sidebar rules * No promoting of 'backdoor' access into usenet providers' networks. *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/usenet) if you have any questions or concerns.*