Arcamax images missing

[charleyn]

Arcamax recipe log has entries like this for all comics

1% Starting download in a single thread...
Could not fetch image https://resources.arcamax.com/newspi...76/2347629.gif
1% Article downloaded: BC for 9/24/2022
Could not fetch image https://resources.arcamax.com/newspi...81/2348161.jpg
1% Article downloaded: BC for 9/25/2022

[unkn0wn]

this is SSLCertVerificationError.

you can fix this by visiting the cited image link in internet explorer or edge. (its working)

Spoiler:

Could not fetch image https://resources.arcamax.com/newspi...01/2350141.gif
Traceback (most recent call last):
File "mechanize\_urllib2_fork.py", line 1236, in do_open
File "http\client.py", line 1282, in request
File "http\client.py", line 1328, in _send_request
File "http\client.py", line 1277, in endheaders
File "http\client.py", line 1037, in _send_output
File "http\client.py", line 975, in send
File "http\client.py", line 1454, in connect
File "ssl.py", line 512, in wrap_socket
File "ssl.py", line 1070, in _create
File "ssl.py", line 1341, in do_handshake
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:997)

https://www.mobileread.com/forums/sh...58&postcount=5

[charleyn]

It is a certificate problem as unkn0wn diagnosed. Unfortunately, I will need to find a different solution. I run calibre on a headless Ubuntu server and call ebook-convert from a shell script that runs as on a schedule to download newspapers and comics. I will need to get the missing certificate and install it.

[charleyn]

Arcamax comics failed to download the images from resources.arcamax.com because they failed to include the intermediate CA certificate in their CA chain. The solution was to get the missing certificate for the signing authority

Sectigo RSA Domain Validation Secure Server CA

On Windows or a Linux desktop, use Firefox to get the certificate chain. Open https://www.arcamax.com/ in Firefox. Click the lock icon in the address bar. Click "Connection secure" in the dropdown and select "More information" then select "View certificate." In the "Miscellaneous" section click on the "PEM (chain)" link to download the certificate chain. Open the downloaded file with a text editor. The required intermediate certificate will be the second one.

Copy the 2nd certificate from -----BEGIN CERTIFICATE----- through
-----END CERTIFICATE----- and paste into a file named

Sectigo_RSA_Domain_Validation_Secure_Server_CA.crt

Upload this file to the Ubuntu Linux server. On the server, run the command

$ openssl x509 -noout -in Sectigo_RSA_Domain_Validation_Secure_Server_CA.crt -subject

to confirm that it is the Sectigo signing certificate.

Copy the crt file to the local ca-certificates directory using the command

$ cp Sectigo_RSA_Domain_Validation_Secure_Server_CA.crt /usr/local/share/ca-certificates/.

Update the certificates using the command

$ update-ca-certificates

It should report that it added a new certificate. The arcamax.recipe should now work.