[Solved] Picard cannot fetch data from Musicbrainz.org

ksynwa · May 31, 2020, 4:35am

Since this morning, Picard has been unable to fetch music info from the musicbrainz.org database.

Version:

Picard 2.3.2, Python 3.8.3, PyQt 5.13.2, Qt 5.14.2, Mutagen 1.43.0, Discid is not installed, astrcmp Python, SSL LibreSSL 3.0.2

Link to the debug output: dpaste

The command I used was picard -d Music/Porridge\ Radio\ -\ Every\ Bad\ \(2020\) 2>&1 | tee picard_log .

Thought I would ask here before filing an issue on the tracker.

Any input is appreciated.

Deleted_Editor_2136044 · May 31, 2020, 4:43am

Log says SSL handshake failed. This usually happens when your clock is wrong.

outsidecontext · May 31, 2020, 8:37am

There seems to be an issue with the SSL certificates on mb.org, one of the certificates in the certificate chain expired yesterday.

This was also discussed on IRC, see https://chatlogs.metabrainz.org/brainzbot/musicbrainz/2020-05-31/?msg=4596512&page=1

ksynwa · May 31, 2020, 9:17am

Thanks for replying everyone.

Did some digging and it seems to be a libressl issue. Tried curl https://musicbrainz.org on Android(Termux) which uses openssl and it works fine while it fails on my Void Linux desktop.

I don’t know if libressl is broken or if the certs are actually faulty.

chaban · May 31, 2020, 9:49am

https://www.agwa.name/blog/post/fixing_the_addtrust_root_expiration

https://twitter.com/ChristianHeimes/status/1266814501929791489

ksynwa · May 31, 2020, 10:14am

Thanks. The distro pushed an upgrade for a package called ca-certificates that fixes this issue. I’ll change the title to indicate that the problem has been solved.

MrCruesliPants · May 31, 2020, 10:32am

I also seem to be affected by this issue. Can you explain a bit more what you did to solve the problem? I’m afraid I’m not fully able to follow your last post. Thank you!

ksynwa · May 31, 2020, 10:52am

The Linux distro I use is called Void Linux. It has a package called ca-certificates which provides “common CA certificates for SSL/TLS”. I am not a technical person so I don’t know what this means, but the distro upgraded this package which fixes this issue.

What OS are you on? And what errors are you getting? It will be easier to find what’s wrong if you post the error.

jagabandhu · May 31, 2020, 11:09am

Same problem for me since yesterday. Picard won’t get any data. Can’t sign into picard either. Version 2.3.2 on windows 7.

chaban · May 31, 2020, 11:29am

SSL config on servers were updated. You might want to try again.

Zas · May 31, 2020, 11:35am

We had certificates from Gandi embedding expired root certicates, so I had to get rid of them. Also upgraded our gateway servers to use most recent ssl stuff and did a bunch of cleanup in the way we manage certificates.
The root cause was certificates as provided by Gandi. This isn’t yet solved on their side, but it should happen very soon.

Sorry for the inconvenience, this certificate expiration has caused a lot of problems it seems.

jagabandhu · May 31, 2020, 11:40am

Bingo. Working fine now. Thank you!

Mr_R · May 31, 2020, 12:56pm

Still experiencing the issue here.

diegoverde · May 31, 2020, 3:02pm

Not working for me either, still getting “SSL handshake failed (QT code 6, HTTP code None)”
On MacOS 10.11.6 and Picard 2.1.3.

ivoales · June 1, 2020, 12:06am

Not working for me yet. “SSL handshake failed ” start few days ago on OSX 10.11.6 and Picard 2.1.3.
Also Picard can’t connect server to control new version. I know this is the last for my OS but simply I’ve checked connection and it does not work.

I tried to uninstall completely Picard included preference and caches and reinstall it with no solution.

If the problem is about expired certificates I don’t know how solve the problem. Someone suggest a way to resolve? Thanks.

Freso · June 1, 2020, 8:59am

The issue should be fixed on MusicBrainz’s side, but some systems have the root certificates installed locally and will need those updated.

For some people, the solution will be a system update. Most Linux distributions should have an update to “ca-certificates” out by now. Don’t know how this works with macOS or Windows. Just check your system updates daily, I guess?

Mr_R · June 1, 2020, 10:41am

Took a look this morning, same issue, the Gandi certs are still being served up:

diegoverde · June 1, 2020, 3:38pm

Working for me now. Huge thank you!

castro67 · June 2, 2020, 10:21am

Hey there…

Unfortunatly since Saturday Picard cannot load album…

I’m using Picard 1.4.2 on windows 10…

Would be very glad if someone had some advice…

castro67 · June 2, 2020, 10:23am

…and that’s what log says…:

E: 12:11:00 Network request error for https://musicbrainz.org:443/ws/2/release/913b2d7a-0849-4d7c-a3e6-ff5623d40987?inc=release-groups+media+recordings+artist-credits+artists+aliases+labels+isrcs+collections+artist-rels+release-rels+url-rels+recording-rels+work-rels: SSL handshake failed (QT code 6, HTTP code None)

E: 12:11:00 SSL handshake failed

D: 12:11:00 Updating file <File u"01 Rock ‘n’ Roll Damnation.flac">

D: 12:11:00 Loading album d2490e7b-7f9f-48fd-ac72-1b78cff7b0c8 …

D: 12:11:00 Moving <File u"01 Rock ‘n’ Roll Damnation.flac"> from <Cluster u’Unmatched Files’> to <Cluster u’Unmatched Files’>

D: 12:11:00 Updating file <File u’02 Down Payment Blues.flac’>