Roku Developer Program

Join our online forum to talk to Roku developers and fellow channel creators. Ask questions, share tips with the community, and find helpful resources.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
ionatan
Roku Guru

SSL server error

I get this error from the server "error:14077458:SSL routines:SSL23_GET_SERVER_HELLO:reason(1112)" when I use roUrlTransfer for https://

request = CreateObject("roUrlTransfer")
request.SetCertificatesFile("common:/certs/ca-bundle.crt")
request.AsyncGetToString()


It seems that solution for this would be to set CURLOPT_SSLVERSION to 3 (PHP: curl_setopt($ch, CURLOPT_SSLVERSION,3); ), but is any way to do this with Roku?

Thanks,
Ionatan
0 Kudos
5 REPLIES 5
RokuJoel
Binge Watcher

Re: SSL server error

I think you are missing a step:


request = CreateObject("roUrlTransfer")
request.SetCertificatesFile("common:/certs/ca-bundle.crt")

request.initClientCertificates()

request.AsyncGetToString()


- Joel
0 Kudos
TheEndless
Channel Surfer

Re: SSL server error

Not sure that InitClientCertificates is necessary, but SetUrl definitely is. Is it safe to assume you just omitted the SetUrl() line from your sample code?
My Channels: http://roku.permanence.com - Twitter: @TheEndlessDev
Instant Watch Browser (NetflixIWB), Aquarium Screensaver (AQUARIUM), Clever Clocks Screensaver (CLEVERCLOCKS), iTunes Podcasts (ITPC), My Channels (MYCHANNELS)
0 Kudos
ionatan
Roku Guru

Re: SSL server error

Yes, I just omitted some lines in sample code. The code looks like:

request = CreateObject("roUrlTransfer")
request.SetCertificatesFile("common:/certs/ca-bundle.crt")
request.InitClientCertificates()
request.SetUrl(feed)

if (request.AsyncGetToString())
...


I've noticed that the error is returned only with old boxes/firmware (Roku software 3.1), and I think it is the same issue, or a similar issue with the one reported here viewtopic.php?f=34&t=47154&p=320833&hilit=SSL23_GET_SERVER_HELLO#p320833. So, is it possible somehow to force SSL version or to force request options?

Thanks,
Ionatan
0 Kudos
ionatan
Roku Guru

Re: SSL server error

Or is it possible to get from somewhere ca-bundle.crt file included on boxes with firmware > 3?
0 Kudos
RokuJoel
Binge Watcher

Re: SSL server error

You might be able to read the ca-bundle.crt with readasciifile("common:/certs/ca-bundle.crt") and print it to your console, see if that works.

- Joel
0 Kudos