Webradio won't play. Certificate?

Volumio Version:2.779
Hardware: Raspberry 3+ and Hifiberry DAC

Hello,
I want to add costom web radio stations. If I add:
https://unifm-streams.uni-freiburg.de/unifm.mp3
it won’t play. With the message:

Error
Failed to decode https://unifm-streams.uni-freiburg.de/unifm.mp3; CURL failed: server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none

However, in VLC media player or in a web browser (Firefox) it works.

What can I do?

Different browsers say, that the certificate is ok.
Trying http instead of https doesn’t work here.

I made it.
I downloaded the certificate with firefox by playing the webradio clicking on the lock symbol.
Then I followed these steps:


“Installing a CA” response by M. Haase
like this (I renamed the downloaded pem-file):
volumio@volumio-music:~$ sudo cp unicross-ub-uni-freiburg-de.crt /usr/local/share/ca-certificates
[sudo] password for volumio:
volumio@volumio-music:~$ sudo update-ca-certificates
Updating certificates in /etc/ssl/certs... 1 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d....done.

This was successfull. :grinning:
Before that I tried:

curl --insecure https://unifm-streams.uni-freiburg.de/unifm.mp3

However, it didn’t work. It gave me a an infinite amount unreadable ASCII-symbols as output. :thinking:

Excellent. I like volumio. This would never be possible with commercial internet radio receivers!

I had a similar issue, where one certificate in the certificate chain of a site was expired. I followed this Thread. The TLDR Solution:

  1. Edit /etc/ca-certificates.conf and put a bang/exclamation mark (!) before mozilla/AddTrust_External_Root.crt
  2. Run update-ca-certificates

Was the radio playing fine before the 30th May? Then it is probably due to the expired AddTrust certificate. See my Solution for more details.