Help NETFLIX SSL not working!

[mr360]

Hey guys,

I'm having troubles connecting to NETFLIX as whenever I go on the website I receive an 'SSL connection error' message.

Any help would be greatly appreciated!

Thanks

[corporate-gadfly]

I'm having troubles connecting to NETFLIX as whenever I go on the website I receive an 'SSL connection error' message.

Do you see anything in syslog?

What device are you using to browse to netflix? A browser?

[mr360]

Hi ,
I'm using Google Chrome to access Netflix because I do not have a Tomato based router.

[themickman007]

Edit: Posted too fast...

[corporate-gadfly]

This doesn't work on the chrome cast yet issue #22 outlines the progress

@themickman007: don't think chromecast was mentioned at all.

Google Chrome should work according to the instructions. I frequently use Firefox, Safari and Google Chrome.

@mr360: you didn't mention seeing anything in syslog. Could you check?

[themickman007]

Sorry my mistake. I was referring to the lack of SSL support on some devices however seeing as mr360 mentions the website I guess he means on the PC.

[woolmonkey]

Same problem with me I can access pandora and hulu but netflix I just get an error for any movie that is not available in my country; any movie that is in my country plays fine.

[corporate-gadfly]

@mr360, @ddotmada: Please provide more information! From which country to which country? Anything in syslog?

[woolmonkey]

From Canada to the States. No my syslog was getting logs from sniproxy but then they stopped and now all I get is the reading of the config file.

[guarded-horizons-inc]

...

[corporate-gadfly]

@guarded-horizons-inc you can email me at d477999@drdrb.com (in the next 20 minutes or so)

[guarded-horizons-inc]

...

[corporate-gadfly]

@guarded-horizons-inc received

[woolmonkey]

Contact me here.
On Jan 28, 2014 3:15 PM, "Corporte Gadfly" notifications@github.com wrote:

@guarded-horizons-inc https://github.com/guarded-horizons-inc you can
email me at d477999@drdrb.com

Reply to this email directly or view it on GitHubhttps://github.com//issues/31#issuecomment-33533231
.

[corporate-gadfly]

Contact me here.

@ddotmada I haven't forgotten about you. Don't have a whole lot of suggestions.

Can you login to your VPS and execute this command and let us know the output?
echo | openssl s_client -host movies.netflix.com -port 443

[corporate-gadfly]

echo | openssl s_client -host movies.netflix.com -port 443

Make that echo | openssl s_client -host movies.netflix.com -port 443 -CApath /etc/ssl/certs

[woolmonkey]

This is what I get
CONNECTED(00000003)
depth=3 C = US, O = "VeriSign, Inc.", OU = Class 3 Public Primary
Certification Authority
verify return:1
depth=2 C = US, O = "VeriSign, Inc.", OU = VeriSign Trust Network, OU =
"(c) 2006 VeriSign, Inc. - For authorized use only", CN = VeriSign Class 3
Public Primary Certification Authority - G5
verify return:1
depth=1 C = US, O = "VeriSign, Inc.", OU = VeriSign Trust Network, OU =
Terms of use at https://www.verisign.com/rpa (c)10, CN = VeriSign Class 3
Secure Server CA - G3
verify return:1
depth=0 C = US, ST = CALIFORNIA, L = Los Gatos, O = "Netflix, Inc.", OU =
Operations, CN = movies.netflix.com

verify return:1

Certificate chain
0 s:/C=US/ST=CALIFORNIA/L=Los Gatos/O=Netflix, Inc./OU=Operations/CN=
movies.netflix.com
i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at
https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3
1 s:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at
https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3
i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign,
Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary
Certification Authority - G5
2 s:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign,
Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary
Certification Authority - G5
i:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification

Authority

Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=US/ST=CALIFORNIA/L=Los Gatos/O=Netflix, Inc./OU=Operations/CN=
movies.netflix.com
issuer=/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at

https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3

No client certificate CA names sent

SSL handshake has read 5156 bytes and written 518 bytes

New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1
Cipher : DHE-RSA-AES256-SHA
Session-ID:
1913B35DB458825DD7E5621862A9267F08F6D800B205C4D0F985725EE7FEAE09
Session-ID-ctx:
Master-Key:
430205FE807ABB5913FA0361F6D01EC9F381F42106B61782FE89B2CCF08159DE93B540F9A98B07F23FC49B6BD244FD4F
Key-Arg : None
PSK identity: None
PSK identity hint: None
SRP username: None
TLS session ticket lifetime hint: 300 (seconds)
TLS session ticket:
0000 - e4 a3 38 cc 6f 99 5c fb-83 6d 52 ff e1 a1 1e c4
..8.o...mR.....
0010 - 76 83 61 db fa cc 6a 59-3c 7a 79 7e fd 19 ef ed
v.a...jY<zy~....
0020 - c9 2e 52 09 34 1f e0 61-4b e5 02 34 b9 8c 59 d2
..R.4..aK..4..Y.
0030 - 5d 77 6f 5d d4 d2 36 37-37 2f b3 ed 2f 8d d9 9f
]wo]..677/../...
0040 - 84 72 2f 7f d1 46 1c eb-ef 02 94 04 13 71 d1 ce
.r/..F.......q..
0050 - 54 fb 09 c4 c9 de 13 00-34 06 32 b1 d0 57 c7 53
T.......4.2..W.S
0060 - 31 48 73 79 2a c3 59 04-b8 a3 17 d6 6f 45 db c7
1Hsy*.Y.....oE..
0070 - 92 29 79 53 17 18 3c 47-17 e4 b1 65 b4 4e a8 ea
.)yS..<G...e.N..
0080 - 8b 35 9c 78 42 9d 3a a2-3f fc 63 48 0f 51 1e f1
.5.xB.:.?.cH.Q..
0090 - 7e 45 41 c0 c7 be 36 b7-da 1c a6 56 1b 8d e2 af
~EA...6....V....

Start Time: 1390967865
Timeout   : 300 (sec)
Verify return code: 0 (ok)

---

DONE

On Tue, Jan 28, 2014 at 4:49 PM, Corporte Gadfly
notifications@github.comwrote:

echo | openssl s_client -host movies.netflix.com -port 443

Make that echo | openssl s_client -host movies.netflix.com -port 443
-CApath /etc/ssl/certs

Reply to this email directly or view it on GitHubhttps://github.com//issues/31#issuecomment-33541527
.

[halfbaked]

It appears the certificate authority of the netflix cert is not in Chrome.
Try with Firefox.