[BUG] SSL certificate verify failed

[TheParaTiger]

Describe the bug

While trying to download from Qobuz, i encountered this error while trying to download from both URL as well as a file containing URLs. On Linux, streamrip has been running fine but i changed to Windows again only for this error to appear.

This Bug has been reported already, thought the solutions in the comments there didn't help.

Interestingly, the issue appears in Streamrip 1.9.7 as well as 2.0.3. A few users reported that it worked on this version as intended.

Command Used

rip url https://play.qobuz.com/album/tuzhj8k94jxoc
rip file C:\Users\elias\Music\uptoalanwalker.txt

Debug Traceback

[04:20:30] INFO     App id/secrets not found, fetching                                                     qobuz.py:157
┌─────────────────────────────── Traceback (most recent call last) ────────────────────────────────┐
│ C:\Users\elias\AppData\Local\Programs\Python\Python312\Lib\site-packages\aiohttp\connector.py:10 │
│ 25 in _wrap_create_connection                                                                    │
│                                                                                                  │
│   1022 │   │   │   async with ceil_timeout(                                                      │
│   1023 │   │   │   │   timeout.sock_connect, ceil_threshold=timeout.ceil_threshold               │
│   1024 │   │   │   ):                                                                            │
│ > 1025 │   │   │   │   return await self._loop.create_connection(*args, **kwargs)                │
│   1026 │   │   except cert_errors as exc:                                                        │
│   1027 │   │   │   raise ClientConnectorCertificateError(req.connection_key, exc) from exc       │
│   1028 │   │   except ssl_errors as exc:                                                         │
│                                                                                                  │
│ C:\Users\elias\AppData\Local\Programs\Python\Python312\Lib\asyncio\base_events.py:1148 in        │
│ create_connection                                                                                │
│                                                                                                  │
│                                     ... 2 frames hidden ...                                      │
│                                                                                                  │
│ C:\Users\elias\AppData\Local\Programs\Python\Python312\Lib\asyncio\sslproto.py:560 in            │
│ _do_handshake                                                                                    │
│                                                                                                  │
│ C:\Users\elias\AppData\Local\Programs\Python\Python312\Lib\ssl.py:916 in do_handshake            │
│                                                                                                  │
│    913 │                                                                                         │
│    914 │   def do_handshake(self):                                                               │
│    915 │   │   """Start the SSL/TLS handshake."""                                                │
│ >  916 │   │   self._sslobj.do_handshake()                                                       │
│    917 │                                                                                         │
│    918 │   def unwrap(self):                                                                     │
│    919 │   │   """Start the SSL shutdown handshake."""                                           │
└──────────────────────────────────────────────────────────────────────────────────────────────────┘
SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in
certificate chain (_ssl.c:1000)

The above exception was the direct cause of the following exception:

┌─────────────────────────────── Traceback (most recent call last) ────────────────────────────────┐
│ in _run_module_as_main:198                                                                       │
│ in _run_code:88                                                                                  │
│                                                                                                  │
│                                     ... 22 frames hidden ...                                     │
│                                                                                                  │
│ C:\Users\elias\AppData\Local\Programs\Python\Python312\Lib\site-packages\aiohttp\connector.py:12 │
│ 26 in _create_direct_connection                                                                  │
│                                                                                                  │
│   1223 │   │   │   )                                                                             │
│   1224 │   │   │                                                                                 │
│   1225 │   │   │   try:                                                                          │
│ > 1226 │   │   │   │   transp, proto = await self._wrap_create_connection(                       │
│   1227 │   │   │   │   │   self._factory,                                                        │
│   1228 │   │   │   │   │   host,                                                                 │
│   1229 │   │   │   │   │   port,                                                                 │
│                                                                                                  │
│ C:\Users\elias\AppData\Local\Programs\Python\Python312\Lib\site-packages\aiohttp\connector.py:10 │
│ 27 in _wrap_create_connection                                                                    │
│                                                                                                  │
│   1024 │   │   │   ):                                                                            │
│   1025 │   │   │   │   return await self._loop.create_connection(*args, **kwargs)                │
│   1026 │   │   except cert_errors as exc:                                                        │
│ > 1027 │   │   │   raise ClientConnectorCertificateError(req.connection_key, exc) from exc       │
│   1028 │   │   except ssl_errors as exc:                                                         │
│   1029 │   │   │   raise ClientConnectorSSLError(req.connection_key, exc) from exc               │
│   1030 │   │   except OSError as exc:                                                            │
└──────────────────────────────────────────────────────────────────────────────────────────────────┘
ClientConnectorCertificateError: Cannot connect to host play.qobuz.com:443 ssl:True [SSLCertVerificationError: (1,
'[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain
(_ssl.c:1000)')]

Config File

[downloads]
# Folder where tracks are downloaded to
folder = "C:\\Users\\elias\\StreamripDownloads"
# Put Qobuz albums in a 'Qobuz' folder, Tidal albums in 'Tidal' etc.
source_subdirectories = false

# Download (and convert) tracks all at once, instead of sequentially. 
# If you are converting the tracks, or have fast internet, this will 
# substantially improve processing speed.
concurrency = true
# The maximum number of tracks to download at once
# If you have very fast internet, you will benefit from a higher value,
# A value that is too high for your bandwidth may cause slowdowns
# Set to -1 for no limit
max_connections = 6
# Max number of API requests per source to handle per minute
# Set to -1 for no limit
requests_per_minute = 60

[qobuz]
# 1: 320kbps MP3, 2: 16/44.1, 3: 24/<=96, 4: 24/>=96
quality = 4
# This will download booklet pdfs that are included with some albums
download_booklets = true

# Authenticate to Qobuz using auth token? Value can be true/false only
use_auth_token = true
# Enter your userid if the above use_auth_token is set to true, else enter your email
email_or_userid = "2709472"
# Enter your auth token if the above use_auth_token is set to true, else enter the md5 hash of your plaintext password
password_or_token = "redacted"
# Do not change
app_id = ""
# Do not change
secrets = []

[tidal]
# 0: 256kbps AAC, 1: 320kbps AAC, 2: 16/44.1 "HiFi" FLAC, 3: 24/44.1 "MQA" FLAC
quality = 3
# This will download videos included in Video Albums.
download_videos = true

# Do not change any of the fields below
user_id = ""
country_code = ""
access_token = ""
refresh_token = ""
# Tokens last 1 week after refresh. This is the Unix timestamp of the expiration
# time. If you haven't used streamrip in more than a week, you may have to log
# in again using `rip config --tidal`
token_expiry = ""

[deezer]
# 0, 1, or 2
# This only applies to paid Deezer subscriptions. Those using deezloader
# are automatically limited to quality = 1
quality = 2
# An authentication cookie that allows streamrip to use your Deezer account
# See https://github.com/nathom/streamrip/wiki/Finding-Your-Deezer-ARL-Cookie
# for instructions on how to find this
arl = ""
# This allows for free 320kbps MP3 downloads from Deezer
# If an arl is provided, deezloader is never used
use_deezloader = true
# This warns you when the paid deezer account is not logged in and rip falls
# back to deezloader, which is unreliable
deezloader_warnings = true

[soundcloud]
# Only 0 is available for now
quality = 0
# This changes periodically, so it needs to be updated
client_id = ""
app_version = ""

[youtube]
# Only 0 is available for now
quality = 0
# Download the video along with the audio
download_videos = false
# The path to download the videos to
video_downloads_folder = "C:\\Users\\elias\\StreamripDownloads\\YouTubeVideos"

[database]
# Create a database that contains all the track IDs downloaded so far
# Any time a track logged in the database is requested, it is skipped
# This can be disabled temporarily with the --no-db flag
downloads_enabled = true
# Path to the downloads database 
downloads_path = "C:\\Users\\elias\\AppData\\Roaming\\streamrip\\downloads.db"
# If a download fails, the item ID is stored here. Then, `rip repair` can be
# called to retry the downloads
failed_downloads_enabled = true
failed_downloads_path = "C:\\Users\\elias\\AppData\\Roaming\\streamrip\\failed_downloads.db"

# Convert tracks to a codec after downloading them.
[conversion]
enabled = false
# FLAC, ALAC, OPUS, MP3, VORBIS, or AAC
codec = "ALAC"
# In Hz. Tracks are downsampled if their sampling rate is greater than this. 
# Value of 48000 is recommended to maximize quality and minimize space
sampling_rate = 48000
# Only 16 and 24 are available. It is only applied when the bit depth is higher
# than this value.
bit_depth = 24
# Only applicable for lossy codecs
lossy_bitrate = 320

# Filter a Qobuz artist's discography. Set to 'true' to turn on a filter.
# This will also be applied to other sources, but is not guaranteed to work correctly
[qobuz_filters]
# Remove Collectors Editions, live recordings, etc.
extras = false
# Picks the highest quality out of albums with identical titles.
repeats = false
# Remove EPs and Singles
non_albums = false
# Remove albums whose artist is not the one requested
features = false
# Skip non studio albums
non_studio_albums = false
# Only download remastered albums
non_remaster = false

[artwork]
# Write the image to the audio file
embed = true
# The size of the artwork to embed. Options: thumbnail, small, large, original.
# "original" images can be up to 30MB, and may fail embedding. 
# Using "large" is recommended.
embed_size = "large"
# If this is set to a value > 0, max(width, height) of the embedded art will be set to this value in pixels
# Proportions of the image will remain the same
embed_max_width = -1
# Save the cover image at the highest quality as a seperate jpg file
save_artwork = true
# If this is set to a value > 0, max(width, height) of the saved art will be set to this value in pixels
# Proportions of the image will remain the same
saved_max_width = -1


[metadata]
# Sets the value of the 'ALBUM' field in the metadata to the playlist's name. 
# This is useful if your music library software organizes tracks based on album name.
set_playlist_to_album = true
# If part of a playlist, sets the `tracknumber` field in the metadata to the track's 
# position in the playlist instead of its position in its album
renumber_playlist_tracks = true
# The following metadata tags won't be applied
# See https://github.com/nathom/streamrip/wiki/Metadata-Tag-Names for more info
exclude = []

# Changes the folder and file names generated by streamrip.
[filepaths]
# Create folders for single tracks within the downloads directory using the folder_format
# template
add_singles_to_folder = false
# Available keys: "albumartist", "title", "year", "bit_depth", "sampling_rate",
# "id", and "albumcomposer"
folder_format = "{albumartist} - {title} ({year}) [{container}] [{bit_depth}B-{sampling_rate}kHz]"
# Available keys: "tracknumber", "artist", "albumartist", "composer", "title",
# and "albumcomposer", "explicit"
track_format = "{tracknumber:02}. {artist} - {title}{explicit}"
# Only allow printable ASCII characters in filenames.
restrict_characters = false
# Truncate the filename if it is greater than this number of characters
# Setting this to false may cause downloads to fail on some systems
truncate_to = 120

# Last.fm playlists are downloaded by searching for the titles of the tracks
[lastfm]
# The source on which to search for the tracks.
source = "qobuz"
# If no results were found with the primary source, the item is searched for 
# on this one.
fallback_source = ""

[cli]
# Print "Downloading {Album name}" etc. to screen
text_output = true
# Show resolve, download progress bars
progress_bars = true
# The maximum number of search results to show in the interactive menu
max_search_results = 100

[misc]
# Metadata to identify this config file. Do not change.
version = "2.0.3"
# Print a message if a new version of streamrip is available 
check_for_updates = true

Operating System

Windows 10

streamrip version

2.0.5, 2.0.3, 1.9.7

Screenshots and recordings

No response

Additional context

No response