Smashwords Plugin SSL Certificate failure

[Rellwood]

Not sure if this is on my end, and if so, what do I do?

Failed to make identify query: u'https://www.smashwords.com/books/search?query=9780993287855'
Traceback (most recent call last):
File "calibre_plugins.smashwordsmetadata.__init__", line 188, in identify
File "site-packages\mechanize\_mechanize.py", line 239, in open_novisit
File "site-packages\mechanize\_mechanize.py", line 284, in _mech_open
File "site-packages\mechanize\_opener.py", line 195, in open
File "site-packages\mechanize\_urllib2_fork.py", line 352, in _open
File "site-packages\mechanize\_urllib2_fork.py", line 340, in _call_chain
File "site-packages\calibre\utils\browser.py", line 30, in https_open
File "site-packages\mechanize\_urllib2_fork.py", line 1160, in do_open
URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:727)>

[davidfor]

The most likely problem is that the CA on you computer is out of date. The fix for this is to open the site in IE (or whatever MS is calling their browser now). That should trigger things to update. After that, this should work.

The alternative is that Smashwords certificate is bad. Doing the above would be a way to see this the case. If it is, you'll need to wait for them to fix it.

[Rellwood]

Originally Posted by davidfor

The most likely problem is that the CA on you computer is out of date. The fix for this is to open the site in IE (or whatever MS is calling their browser now). That should trigger things to update. After that, this should work.

The alternative is that Smashwords certificate is bad. Doing the above would be a way to see this the case. If it is, you'll need to wait for them to fix it.

Not sure what you mean? what does "CA" mean?

I use foxfire, it is up to date.

[JSWolf]

Originally Posted by Rellwood

Not sure what you mean? what does "CA" mean?

I use foxfire, it is up to date.

A CA certificate is a digital certificate issued by a certificate authority (CA). The CA verifies trusted certificates for trusted roots. Trusted roots are the foundation upon which chains of trust are built in certificates. Trusting a CA root means that you trust all certificates issued by that CA.

If you run Windows 10, run the Edge browser and browse to Smashwords. If all is well, this should update the SSL certificate. The plugin should then work.

[Rellwood]

Originally Posted by JSWolf

If you run Windows 10, run the Edge browser and browse to Smashwords. If all is well, this should update the SSL certificate. The plugin should then work.

I run windows 7 and mozilla, but I still went to their site and wasn't able to update the certificate

[JSWolf]

Originally Posted by Rellwood

I run windows 7 and mozilla, but I still went to their site and wasn't able to update the certificate

You have to go to Smashwords with Internet Explorer to update the certificate that the plugin uses.

[theducks]

The mechanism for updating certificates requires you use the MS browser.
It does all the work. I really think the sit needs to be less M$ centric and offer a link to the certificate to allow other browsers to get it to MANUALLY import it (AKA Manage Certificates)

[davidfor]

Originally Posted by theducks

The mechanism for updating certificates requires you use the MS browser.
It does all the work. I really think the sit needs to be less M$ centric and offer a link to the certificate to allow other browsers to get it to MANUALLY import it (AKA Manage Certificates)

I don't think this is a site issue. It is more an issue of which applications are allowed to update the CA store. MS might be blocking all 3rd party applications, or just ones that don't have appropriate permissions. The CA's are the certificates used to validate site certificates. A little extra care with them is reasonable. I've never bother to look as I don't find opening IE once a year to much of a pain.

@Rellwood: Please follow the instructions I gave. They weren't idle. They were the actions that solved this type of problem on Windows machines every other time they have been reported.

[BetterRed]

↑ ↑ ↑ ✔

The MS browser feature is a user friendly way to manage certificates on Windows, but it's not the only way to do it in Windows.

You can manage certificates using the Local Group Policy Editor or the MS Management Console Certificates snapin. You have to you know how to use them, and how to get the certificates from GoDaddy, Comodo etc. I've never had to use either, and I wouldn't recommend anyone not familiar with secpol or mmc snapins etc to do so.

BR