Re: Feedback from JRES in Dijon

[Bengt Richter <bokr@bokr.com>]

Hi Timothy,

On +2019-12-07 11:35:02 -0500, Timothy Sample wrote:
> Hello,
> 
> Konrad Hinsen <konrad.hinsen@fastmail.net> writes:
> 
> > Hi Bengt,
> >
> >>> [1]
> >>> https://webcast.in2p3.fr/video/les-enjeux-et-defis-de-la-recherche-reproductible
> >>> https://aramis.resinfo.org/wiki/lib/exe/fetch.php?media=pleniaires:aramis_keynote_enjeux-et-defis-recherche-reproductible_konrad_hinsen.pdf
> >>>
> >>
> >> Is [1] available as a libre video download?
> >
> > No idea. I can answer most questions about the content since I am the
> > speaker, but I was not involved with recording and publishing.
> 
> I was able to play it on Guix System with VLC.  The following URL uses
> “MPEG-DASH” for streaming, and VLC understands that.
> 
>     https://ccwebcast.in2p3.fr/vod/_definst_/mp4:media/5c/e6/5ce6537209640/5ce6537209640.mp4/manifest.mpd
> 
> Unfortunately, I got certificate errors, but VLC lets you temporarily
> ignore those.
> 
> HTH!
> 
> (Thanks Konrad!  I’m looking forward to watching it later.)
> 
> 
> -- Tim

Thanks Tim, but unfortunately I don't have VLC loaded (I'll look into it)
.
I have a little scriptlet that takes an executable name and
extracts urls from piped-in whatever and gives me a choice
which url to be returned to call the executable with, so I tried wget to
see if I could see what the .mpd was:

--8<---------------cut here---------------start------------->8---
Choose from the following urls to be returned:
1) https://aramis.resinfo.org/wiki/lib/exe/fetch.php?media=pleniaires:aramis_keynote_enjeux-et-defis-recherche-reproductible_konrad_hinsen.pdf
2) https://ccwebcast.in2p3.fr/vod/_definst_/mp4:media/5c/e6/5ce6537209640/5ce6537209640.mp4/manifest.mpd
3) https://webcast.in2p3.fr/video/les-enjeux-et-defis-de-la-recherche-reproductible
#? 2
--2019-12-07 16:58:15--  https://ccwebcast.in2p3.fr/vod/_definst_/mp4:media/5c/e6/5ce6537209640/5ce6537209640.mp4/manifest.mpd
Loaded CA certificate '/etc/ssl/certs/ca-certificates.crt'
Resolving ccwebcast.in2p3.fr (ccwebcast.in2p3.fr)... 134.158.69.183
Connecting to ccwebcast.in2p3.fr (ccwebcast.in2p3.fr)|134.158.69.183|:443... connected.
ERROR: The certificate of ?ccwebcast.in2p3.fr? is not trusted.
ERROR: The certificate of ?ccwebcast.in2p3.fr? doesn't have a known issuer.
Press any key to continue...
--8<---------------cut here---------------end--------------->8---

Then, to see if youtube-dl could handle it:

--8<---------------cut here---------------start------------->8---
Choose from the following urls to be returned:
1) https://aramis.resinfo.org/wiki/lib/exe/fetch.php?media=pleniaires:aramis_keynote_enjeux-et-defis-recherche-reproductible_konrad_hinsen.pdf
2) https://ccwebcast.in2p3.fr/vod/_definst_/mp4:media/5c/e6/5ce6537209640/5ce6537209640.mp4/manifest.mpd
3) https://webcast.in2p3.fr/video/les-enjeux-et-defis-de-la-recherche-reproductible
#? 2
[generic] manifest: Requesting header
WARNING: Could not send HEAD request to https://ccwebcast.in2p3.fr/vod/_definst_/mp4:media/5c/e6/5ce6537209640/5ce6537209640.mp4/manifest.mpd: <urlopen error [S
SL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1108)>
[generic] manifest: Downloading webpage
ERROR: Unable to download webpage: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:110
8)> (caused by URLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:
1108)')))
Press any key to continue...
--8<---------------cut here---------------end--------------->8---

I have not yet configured dnsmasq -- do you think the above is a DNSSEC problem
that would be solved by dnsmasq? (does someone have a QND quick-and-dirty how-to
for configuring dnsmasq, spelling out any gotchas -- or should RTFM suffice?)

Or do you think ccwebcast.in2p3.fr might have the same/similar subdomain issues as savannah?

I can ping both domain and subdomain though:

--8<---------------cut here---------------start------------->8---
$ ping ccwebcast.in2p3.fr
PING ccpntc08c.in2p3.fr (134.158.69.183) 56(84) bytes of data.
64 bytes from ccpntc08c.in2p3.fr (134.158.69.183): icmp_seq=1 ttl=41 time=182 ms
64 bytes from ccpntc08c.in2p3.fr (134.158.69.183): icmp_seq=2 ttl=41 time=179 ms
64 bytes from ccpntc08c.in2p3.fr (134.158.69.183): icmp_seq=3 ttl=41 time=178 ms
^C
--- ccpntc08c.in2p3.fr ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 3606ms
rtt min/avg/max/mdev = 177.732/179.508/181.948/1.783 ms
$ ping in2p3.fr
PING in2p3.fr (134.158.69.48) 56(84) bytes of data.
64 bytes from ccwbvip13.in2p3.fr (134.158.69.48): icmp_seq=1 ttl=41 time=176 ms
64 bytes from ccwbvip13.in2p3.fr (134.158.69.48): icmp_seq=2 ttl=41 time=178 ms
^C
--- in2p3.fr ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1003ms
rtt min/avg/max/mdev = 176.318/176.911/177.505/0.593 ms
$
--8<---------------cut here---------------end--------------->8---

... so idk -- maybe I can bypass DNSSEC problemss with /etc/hosts ...
Will try that, just to add a data point :)

Nope, doesn't seem to change anything ;-/

--8<---------------cut here---------------start------------->8---
$ wget $(stack)
--2019-12-07 18:21:22--  https://ccwebcast.in2p3.fr/vod/_definst_/mp4:media/5c/e6/5ce6537209640/5ce6537209640.mp4/manifest.mpd
Loaded CA certificate '/etc/ssl/certs/ca-certificates.crt'
Resolving ccwebcast.in2p3.fr (ccwebcast.in2p3.fr)... 134.158.69.183
Connecting to ccwebcast.in2p3.fr (ccwebcast.in2p3.fr)|134.158.69.183|:443... connected.
ERROR: The certificate of ?ccwebcast.in2p3.fr? is not trusted.
ERROR: The certificate of ?ccwebcast.in2p3.fr? doesn't have a known issuer.
$ echo wget $(stack)
wget https://ccwebcast.in2p3.fr/vod/_definst_/mp4:media/5c/e6/5ce6537209640/5ce6537209640.mp4/manifest.mpd
--8<---------------cut here---------------end--------------->8---


--8<---------------cut here---------------start------------->8---
$ youtube-dl $(stack)
[generic] manifest: Requesting header
WARNING: Could not send HEAD request to https://ccwebcast.in2p3.fr/vod/_definst_/mp4:media/5c/e6/5ce6537209640/5ce6537209640.mp4/manifest.mpd: <urlopen error [S
SL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1108)>
[generic] manifest: Downloading webpage
ERROR: Unable to download webpage: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:110
8)> (caused by URLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:
1108)')))
--8<---------------cut here---------------end--------------->8---

Anyone see an easy explanation?

TIA
-- 
Regards,
Bengt Richter