[BUG] SSL: WRONG_SIGNATURE_TYPE for podnapisi.net

[Freekers]

Is there an existing issue for this?

• I have searched the existing issues

Current Behavior

Bazarr will throttle provider Podnapisi every 10 minutes because of 'SSLError'.

HTTPSConnectionPool(host='www.podnapisi.net', port=443): Max retries exceeded with url: /subtitles/search/old?sXML=1&sL=nl&sK=Beverly+Hills+Cop+III&sY=1994 (Caused by SSLError(SSLError(1, '[SSL: WRONG_SIGNATURE_TYPE] wrong signature type (_ssl.c:997)'))), retrying in 5 seconds...

In the official Bazarr Discord it was established this seems to be related to openssl configuration in latest versions. Apparently podnapisi now uses a ssl cipher that the specific openssl version in the lsio docker image does not allow.

Podnapisi does work in hotio's Bazarr docker image. Here's the difference in openssl version between the two images, maybe it helps debugging:

~ 33.1s | 111 ❱ docker run --rm linuxserver/bazarr curl -V
...
curl 7.87.0 (aarch64-alpine-linux-musl) libcurl/7.87.0 OpenSSL/3.0.7 zlib/1.2.13 brotli/1.0.9 nghttp2/1.51.0
...

~ 41.1s ❱ docker run --rm hotio/bazarr curl -V
...
curl 7.83.1 (aarch64-alpine-linux-musl) libcurl/7.83.1 OpenSSL/1.1.1s zlib/1.2.12 brotli/1.0.9 nghttp2/1.47.0
...

Expected Behavior

Bazarr should not throttle provider Podnapisi every 10 minutes because of 'SSLError'.

Steps To Reproduce

1. Navigate to Settings --> Providers
2. Enable Podnapisi
3. Search for subtitles
4. Navigate to System --> Providers
5. Observe podnapisi having status 'SSLError'

Environment

- OS: Ubuntu 22.04 LTS
- How docker service was installed: distro's packagemanager

CPU architecture

x86-64

Docker creation

services:
  bazarr:
   image: lscr.io/linuxserver/bazarr:latest
   container_name: bazarr
   environment:
     - PUID=1000
     - PGID=1000
     - TZ=Europe/Amsterdam
   devices:
     - /dev/dri:/dev/dri
   volumes:
     - /opt/docker/bazarr/config:/config
     - /syno/video/tv:/tv
     - /syno/video/movies:/movies
   restart: unless-stopped

Container logs

2023-01-27 13:59:43,961 - retry.api                        (7faad83cab38) :  WARNING (api:40) - HTTPSConnectionPool(host='www.podnapisi.net', port=443): Max retries exceeded with url: /subtitles/search/old?sXML=1&sL=nl&sK=s+w+a+t&sTS=6&sTE=10&sY=2017 (Caused by SSLError(SSLError(1, '[SSL: WRONG_SIGNATURE_TYPE] wrong signature type (_ssl.c:997)'))), retrying in 5 seconds...
2023-01-27 13:59:49,137 - retry.api                        (7faad83cab38) :  WARNING (api:40) - HTTPSConnectionPool(host='www.podnapisi.net', port=443): Max retries exceeded with url: /subtitles/search/old?sXML=1&sL=nl&sK=s+w+a+t&sTS=6&sTE=10&sY=2017 (Caused by SSLError(SSLError(1, '[SSL: WRONG_SIGNATURE_TYPE] wrong signature type (_ssl.c:997)'))), retrying in 5 seconds...
2023-01-27 13:59:54,458 - root                             (7faad83cab38) :  INFO (get_providers:287) - Throttling podnapisi for 10 minutes, until 23/01/27 14:09, because of: SSLError. Exception info: MaxRetryError("HTTPSConnectionPool(host='www.podnapisi.net', port=443): Max retries exceeded with url: /subtitles/search/old?sXML=1&sL=nl&sK=s+w+a+t&sTS=6&sTE=10&sY=2017 (Caused by SSLError(SSLError(1, '[SSL: WRONG_SIGNATURE_TYPE] wrong signature type (_ssl.c:997)')))")
2023-01-27 14:10:46,875 - root                             (7faae2eafb38) :  INFO (get_providers:132) - Using podnapisi again after 10 minutes, (disabled because: SSLError)
2023-01-27 14:10:47,870 - retry.api                        (7faad83cab38) :  WARNING (api:40) - HTTPSConnectionPool(host='www.podnapisi.net', port=443): Max retries exceeded with url: /subtitles/search/old?sXML=1&sL=nl&sK=diagnosis+murder&sTS=2&sTE=7&sY=1993 (Caused by SSLError(SSLError(1, '[SSL: WRONG_SIGNATURE_TYPE] wrong signature type (_ssl.c:997)'))), retrying in 5 seconds...
2023-01-27 14:10:50,361 - root                             (7faae29a0b38) :  INFO (movies:44) - BAZARR Search is throttled by adaptive search for this movie /movies/The Incredible Hulk (2008)/The.Incredible.Hulk.2008.Blu-ray.СEE.1080p.H.264.DD5.1-HDCLUB.iso and language: en
2023-01-27 14:10:50,454 - root                             (7faae29a0b38) :  ERROR (utils:53) - BAZARR Error ('.iso' is not a valid video extension) trying to get video information for this file: /movies/The Incredible Hulk (2008)/The.Incredible.Hulk.2008.Blu-ray.СEE.1080p.H.264.DD5.1-HDCLUB.iso
2023-01-27 14:10:51,397 - retry.api                        (7faad78abb38) :  WARNING (api:40) - HTTPSConnectionPool(host='www.podnapisi.net', port=443): Max retries exceeded with url: /subtitles/search/old?sXML=1&sL=nl&sK=Beverly+Hills+Cop+III&sY=1994 (Caused by SSLError(SSLError(1, '[SSL: WRONG_SIGNATURE_TYPE] wrong signature type (_ssl.c:997)'))), retrying in 5 seconds...
2023-01-27 14:10:53,162 - retry.api                        (7faad83cab38) :  WARNING (api:40) - HTTPSConnectionPool(host='www.podnapisi.net', port=443): Max retries exceeded with url: /subtitles/search/old?sXML=1&sL=nl&sK=diagnosis+murder&sTS=2&sTE=7&sY=1993 (Caused by SSLError(SSLError(1, '[SSL: WRONG_SIGNATURE_TYPE] wrong signature type (_ssl.c:997)'))), retrying in 5 seconds...
2023-01-27 14:10:56,599 - retry.api                        (7faad78abb38) :  WARNING (api:40) - HTTPSConnectionPool(host='www.podnapisi.net', port=443): Max retries exceeded with url: /subtitles/search/old?sXML=1&sL=nl&sK=Beverly+Hills+Cop+III&sY=1994 (Caused by SSLError(SSLError(1, '[SSL: WRONG_SIGNATURE_TYPE] wrong signature type (_ssl.c:997)'))), retrying in 5 seconds...
2023-01-27 14:10:58,434 - root                             (7faad83cab38) :  INFO (get_providers:287) - Throttling podnapisi for 10 minutes, until 23/01/27 14:20, because of: SSLError. Exception info: MaxRetryError("HTTPSConnectionPool(host='www.podnapisi.net', port=443): Max retries exceeded with url: /subtitles/search/old?sXML=1&sL=nl&sK=diagnosis+murder&sTS=2&sTE=7&sY=1993 (Caused by SSLError(SSLError(1, '[SSL: WRONG_SIGNATURE_TYPE] wrong signature type (_ssl.c:997)')))")
2023-01-27 14:11:01,942 - root                             (7faad78abb38) :  INFO (get_providers:287) - Throttling podnapisi for 10 minutes, until 23/01/27 14:21, because of: SSLError. Exception info: MaxRetryError("HTTPSConnectionPool(host='www.podnapisi.net', port=443): Max retries exceeded with url: /subtitles/search/old?sXML=1&sL=nl&sK=Beverly+Hills+Cop+III&sY=1994 (Caused by SSLError(SSLError(1, '[SSL: WRONG_SIGNATURE_TYPE] wrong signature type (_ssl.c:997)')))")
2023-01-27 14:11:12,597 - root                             (7faad75a2b38) :  INFO (get_providers:287) - Throttling subscene for 10 minutes, until 23/01/27 14:21, because of: HTTPError. Exception info: '409 Client Error: Conflict for url: https://subscene.com/subtitles/searchbytitle'
2023-01-27 14:12:26,077 - root                             (7faae2eafb38) :  INFO (series:137) - BAZARR Finished searching for missing Series Subtitles. Check History for more information.

[github-actions]

Thanks for opening your first issue here! Be sure to follow the bug or feature issue templates!

[github-actions]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[Freekers]

Issue still persists

[thespad]

It's been fixed in the upstream development builds, it should be included in the next stable release.

[github-actions]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[Freekers]

Issue is still there

[thespad]

You have three options: make the site fix its shitty TLS config, switch to the bazarr dev branch, or wait for the next stable release.

There's nothing we can do to fix it at a container level that won't break other things.

[Freekers]

Alright, thanks for the info.