Can't play HTTPS stream (missing DST Root CA trust?)

I'm trying to play FunRadio streams, which are available via a HTTPS with certificates signed by DST Root CA/R3 Intermediary.

Description

FunRadio provides the following streams (for one of the stations):

• https://stream.funradio.sk/80-90-128.mp3
• https://stream.funradio.sk/80-90-64.mp3
• https://stream.funradio.sk/80-90-128.ogg

The host presents a certificate signed by DST Root CA and R3 intermediary and is, as of time of reporting, still valid:

vlc_logcat_20210530_110022.log

Entering the stream URL in VLC results in no feedback whatsoever - the URL textfield is cleared, and nothing happens. Looking into logcat, the issue is that the cert is not trusted. Not sure why - the stream plays in Android Firefox just fine.

Expected behavior

Stream should play, or error message should be displayed.

Actual behavior

Nothing happens.

Steps to reproduce

1. Enter one of the above stream URLs into the More -> Streams -> New Stream -> Stream text field and hit Enter/tap Send icon.
2. Check if stream plays.

Context

App version

3.3.4

Android version

10

Device model

YT-X705L

App mode

Not sure - which mode is used on tablets?

Smartphone

TV

Auto

Oh... just noticed #1398 (closed) which seems to describe the same issue, but is still not addressed AFAICS.

In fact, it should have been addressed in !966 (merged) and !976 (merged). Could you please try with a nightly version (https://nightlies.videolan.org/) and see if it works correctly?

added Needs more info label

With nightly from 2021-05-31, the certificate is still untrusted, but at least I'm able to bypass that error and accept the cert manually.

1. "Sending" the URL the first time results in "untrusted certificate" warning. So I hit "accept 24hr". The stream still doesn't play, with "Stream could not be played" error.
2. I hit "Send" with the same URL again, and this time the stream does play without further prompts.
3. I cleared the app data and tried again, and this time the stream played the first time after accepting the certificate. Is there perhaps a timeout that pass in the first attempt?...

Sorry to ask this here, but how do I get logs from the nightly build? The "debug logs" screen I used in the release version just isn't there. I do have adb installed, so if there's a good filter/set of parameters I should use with logcat, that would be preferred.

EDIT: I tried logcat VLC *:S, hopefully that matches all that's relevant. I replicated the "waited too long at the cert prompt" - which is fairly short, about 10-15 seconds.

vlc-2021-05-31-HTTP_stream2.log

Sorry to ask this here, but how do I get logs from the nightly build? From the logcat indeed as this is a debug version, meant to be used by developers.

About your issue, I will take a look. It's probably a race condition indeed.

I can reproduce this exact behavior on VLC desktop. It's probably a core issue.

After some more testing, this is due to a timeout on the server side. Fixing it would be overkill, so I will close the issue.

removed Needs more info label

added bug label

assigned to @Aza

changed milestone to %3.4.x

removed bug label

added VLC core label

assigned to @tguillem and unassigned @Aza

closed

marked #2061 (closed) as a duplicate of this issue

marked this issue as related to #2061 (closed)

marked #1398 (closed) as a duplicate of this issue

marked this issue as related to #1398 (closed)