Win7: Could not establish trust relationship

[simistef]

Hi there,

Trying to install radio toolbox on a Windows 7 machine i get the following error when trying to login into the account.

Code: Select all

 The underlying connection was closed:
Could not establish trust relationship for the SSL/TLS secure channel.

Any suggestions on where can i start to fix this. For reference, it works just fine on my Win11 machine.

Thanks

[Jay]

I will need to setup a Windows 7 VM to try this out, I think some underlying change has occurred with certs that are negatively impacting some users.

[simistef]

I managed to capture the error in the event logs:

"Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/m ... ootstl.cab> with error: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider."

So it seems related to the certs you were referring to. Let me know if I can be of any help

[Jay]

Yep, it appears that Microsoft has ended support for Windows 7

https://www.bleepingcomputer.com/news/m ... n-tuesday/

We cannot help much here, if you can find someway to update your certificate root chain, that may be the answer. We are researching if this is possible but as for now, Radio Toolbox no longer officially supports Windows 7.

[Max]

These links may provide a possible fix.

This one directly relates to the certificate provider we use (LetsEncrypt).
https://superuser.com/questions/1679135 ... -are-there

This one directly relates to the error message you got in some way.
https://support.microsoft.com/en-us/top ... 1f38be8b77

And this one is for the automated update process Windows 7 (and similar) try to use to get fresh root certificates.
https://support.microsoft.com/en-us/top ... 7982bf3ea5

[simistef]

Thanks @Max. I managed to pass onto the login and opened the application. Though, I now face an error when logging in to Icecast server for getting listeners (main reason I would like to use Radiobox).

So, if I try to connect via https to my Icecast admin interface, I get these errors in RadioBox logs:

Code: Select all

RadioToolbox.Inspector.Server.UpdateStats
https://live.XXXXXXX.ro:8443: Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host.

   at System.Net.Sockets.NetworkStream.EndRead(IAsyncResult asyncResult)
   at RadioToolbox.Inspector.Network.HTTPStream.AsyncRead(Byte[] buffer, Int32 offset, Int32 size)
   at RadioToolbox.Inspector.Network.HTTPStream..ctor(String url)
   at RadioToolbox.Inspector.Server.ConnectToStream()
   at RadioToolbox.Inspector.Server.UpdateStats()

If I try to connect non-SSL, so trough http://live.XXXXXXX.ro:8123 I get this error:

Code: Select all

RadioToolbox.Inspector.ServerParsers.Icecast2.GetStats
System.NullReferenceException: Object reference not set to an instance of an object.

   at RadioToolbox.Inspector.ServerParsers.Icecast2.GetStats()

Hope on another idea that might save me from moving to another Windows version. Thanks

[Max]

The SSL error would be due to that Icecast server requiring SSL settings that Windows 7's .NET Framework cannot provide.

Which version of Icecast and is it modified in any way?

[simistef]

I am using Icecast 2.4.4-7 (https://synocommunity.com/package/icecast).

If SSL does not work, I am wondering why would I be a problem for non-SSL version then. This exact setup is working on a Windows11. The only thing I changes was the machine to a Windows 7.

[Max]

So Radio Toolbox is written in C#. Which uses .NET Framework libraries (version 4.5) to work. These libraries are what actually turn RTB's code into something that can do anything. So if the libraries are out of date they can present random issues. There also then use libraries that are a part of Windows for SSL communication. You'd need to make sure that Windows 7 installation is fully up to date with the last patches from Microsoft.

[simistef]

I do have installed the 4.5.5 version of.NET on this machine. About the rest of libraries needed unsure what is missing. It would have helped to see a list of KBs needed to be installed. Anyways, I understand that now win7 is not going to be supported so it would help other users is this is being updated on the first page for downloading the program. Thanks and all the best