Authentication Error

[Ryan6578]

ryan@r6578-G75VW:~/Programs/MinecraftChat$ mono MinecraftClient.exe
Console Client for MC 1.4.6 to 1.8.4 - v1.8.2 - By ORelio & Contributors
Connecting to Minecraft.net...

Unhandled Exception:
System.IO.IOException: The authentication or decryption has failed. ---> Mono.Security.Protocol.Tls.TlsException: Invalid certificate received from server.
at Mono.Security.Protocol.Tls.Handshake.Client.TlsServerCertificate.LocalValidation (Mono.Security.Protocol.Tls.ClientContext context, AlertDescription description) [0x00000] in :0
at Mono.Security.Protocol.Tls.Handshake.Client.TlsServerCertificate.validateCertificates (Mono.Security.X509.X509CertificateCollection certificates) [0x00000] in :0
at Mono.Security.Protocol.Tls.Handshake.Client.TlsServerCertificate.ProcessAsTls1 () [0x00000] in :0
at Mono.Security.Protocol.Tls.Handshake.HandshakeMessage.Process () [0x00000] in :0
at (wrapper remoting-invoke-with-check) Mono.Security.Protocol.Tls.Handshake.HandshakeMessage:Process ()
at Mono.Security.Protocol.Tls.ClientRecordProtocol.ProcessHandshakeMessage (Mono.Security.Protocol.Tls.TlsStream handMsg) [0x00000] in :0
at Mono.Security.Protocol.Tls.RecordProtocol.InternalReceiveRecordCallback (IAsyncResult asyncResult) [0x00000] in :0
--- End of inner exception stack trace ---
at Mono.Security.Protocol.Tls.SslStreamBase.AsyncHandshakeCallback (IAsyncResult asyncResult) [0x00000] in :0
[ERROR] FATAL UNHANDLED EXCEPTION: System.IO.IOException: The authentication or decryption has failed. ---> Mono.Security.Protocol.Tls.TlsException: Invalid certificate received from server.
at Mono.Security.Protocol.Tls.Handshake.Client.TlsServerCertificate.LocalValidation (Mono.Security.Protocol.Tls.ClientContext context, AlertDescription description) [0x00000] in :0
at Mono.Security.Protocol.Tls.Handshake.Client.TlsServerCertificate.validateCertificates (Mono.Security.X509.X509CertificateCollection certificates) [0x00000] in :0
at Mono.Security.Protocol.Tls.Handshake.Client.TlsServerCertificate.ProcessAsTls1 () [0x00000] in :0
at Mono.Security.Protocol.Tls.Handshake.HandshakeMessage.Process () [0x00000] in :0
at (wrapper remoting-invoke-with-check) Mono.Security.Protocol.Tls.Handshake.HandshakeMessage:Process ()
at Mono.Security.Protocol.Tls.ClientRecordProtocol.ProcessHandshakeMessage (Mono.Security.Protocol.Tls.TlsStream handMsg) [0x00000] in :0
at Mono.Security.Protocol.Tls.RecordProtocol.InternalReceiveRecordCallback (IAsyncResult asyncResult) [0x00000] in :0
--- End of inner exception stack trace ---
at Mono.Security.Protocol.Tls.SslStreamBase.AsyncHandshakeCallback (IAsyncResult asyncResult) [0x00000] in :0
ryan@r6578-G75VW:~/Programs/MinecraftChat$

[ORelio]

Hello,

In fact this exception is handled but Mono framework seems to ignore it and crash anyway:

catch (System.IO.IOException e)
{
    if (e.Message.Contains("authentication"))
    {
        return LoginResult.SSLError;
    }
    else return LoginResult.OtherError;
}

(See ProtocolHandler > GetLogin)

If this weird crash wasn't happening, the app would tell you:

It appears that you are using Mono to run this program.
The first time, you have to import HTTPS certificates using:
mozroots --import --ask-remove

So just run the command to install HTTPS certificates and authentication should work :)

[Sheridan]

Not worked for me :(

[Sheridan]

Only ignoring certificate validation results helping me.

[ORelio]

Make sure you have mono-complete and version >= 4.0, just in case.
There may be weird issues with older versions or with mono-runtime.

[Sheridan]

sheridan@eee ~/soft/Minecraft/mcc $ mono -V                                     
Mono JIT compiler version 4.4.0 (Stable 4.4.0.40/f8474c4 Wed Apr 27 09:30:50 MSK 2016)
Copyright (C) 2002-2014 Novell, Inc, Xamarin Inc and Contributors. www.mono-project.com
        TLS:           __thread
        SIGSEGV:       altstack
        Notifications: epoll
        Architecture:  x86
        Disabled:      none
        Misc:          softdebug 
        LLVM:          supported, not enabled.
        GC:            sgen

[Sheridan]

sheridan@eee ~/soft/Minecraft/mcc $ mono MinecraftClient.exe MinecraftClient.ini
Console Client for MC 1.4.6 to 1.9.0 - v1.9.0 - By ORelio & Contributors
Connecting to Minecraft.net...

Unhandled Exception:
System.IO.IOException: The authentication or decryption has failed. ---> System.IO.IOException: The authentication or decryption has failed. ---> Mono.Security.Protocol.Tls.TlsException: Invalid certificate received from server. Error code: 0x0
  at Mono.Security.Protocol.Tls.RecordProtocol.EndReceiveRecord (IAsyncResult asyncResult) <0xb4c27bc8 + 0x000db> in <filename unknown>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.SafeEndReceiveRecord (IAsyncResult ar, Boolean ignoreEmpty) <0xb4c27b20 + 0x0001f> in <filename unknown>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.NegotiateAsyncWorker (IAsyncResult result) <0xb4c22000 + 0x0019f> in <filename unknown>:0 
  --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslClientStream.EndNegotiateHandshake (IAsyncResult result) <0xb4a7b740 + 0x000a7> in <filename unknown>:0 
  at Mono.Security.Protocol.Tls.SslStreamBase.AsyncHandshakeCallback (IAsyncResult asyncResult) <0xb4a7b550 + 0x0005f> in <filename unknown>:0 
  --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslStreamBase.EndRead (IAsyncResult asyncResult) <0xb4c83548 + 0x0012b> in <filename unknown>:0 
  at Mono.Net.Security.Private.LegacySslStream.EndAuthenticateAsClient (IAsyncResult asyncResult) <0xb4c83360 + 0x00034> in <filename unknown>:0 
  at Mono.Net.Security.Private.LegacySslStream.AuthenticateAsClient (System.String targetHost, System.Security.Cryptography.X509Certificates.X509CertificateCollection clientCertificates, SslProtocols enabledSslProtocols, Boolean checkCertificateRevocation) <0xb4cefe70 + 0x00050> in <filename unknown>:0 
  at Mono.Net.Security.Private.LegacySslStream.AuthenticateAsClient (System.String targetHost) <0xb4cefdb0 + 0x000bc> in <filename unknown>:0 
  at Mono.Net.Security.Private.MonoSslStreamImpl.AuthenticateAsClient (System.String targetHost) <0xb4cc1f70 + 0x00027> in <filename unknown>:0 
  at System.Net.Security.SslStream.AuthenticateAsClient (System.String targetHost) <0xb4cd1f40 + 0x00027> in <filename unknown>:0 
  at MinecraftClient.Protocol.ProtocolHandler+<>c__DisplayClass5.<doHTTPSRequest>b__4 () <0xb569d7c0 + 0x0006f> in <filename unknown>:0 
  at System.Threading.ThreadHelper.ThreadStart_Context (System.Object state) <0xb569d700 + 0x00066> in <filename unknown>:0 
  at System.Threading.ExecutionContext.RunInternal (System.Threading.ExecutionContext executionContext, System.Threading.ContextCallback callback, System.Object state, Boolean preserveSyncCtx) <0xb569d350 + 0x001be> in <filename unknown>:0 
  at System.Threading.ExecutionContext.Run (System.Threading.ExecutionContext executionContext, System.Threading.ContextCallback callback, System.Object state, Boolean preserveSyncCtx) <0xb569d268 + 0x00027> in <filename unknown>:0 
  at System.Threading.ExecutionContext.Run (System.Threading.ExecutionContext executionContext, System.Threading.ContextCallback callback, System.Object state) <0xb569d138 + 0x0004f> in <filename unknown>:0 
  at System.Threading.ThreadHelper.ThreadStart () <0xb569cf38 + 0x0002b> in <filename unknown>:0 
[ERROR] FATAL UNHANDLED EXCEPTION: System.IO.IOException: The authentication or decryption has failed. ---> System.IO.IOException: The authentication or decryption has failed. ---> Mono.Security.Protocol.Tls.TlsException: Invalid certificate received from server. Error code: 0x0
  at Mono.Security.Protocol.Tls.RecordProtocol.EndReceiveRecord (IAsyncResult asyncResult) <0xb4c27bc8 + 0x000db> in <filename unknown>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.SafeEndReceiveRecord (IAsyncResult ar, Boolean ignoreEmpty) <0xb4c27b20 + 0x0001f> in <filename unknown>:0 
  at Mono.Security.Protocol.Tls.SslClientStream.NegotiateAsyncWorker (IAsyncResult result) <0xb4c22000 + 0x0019f> in <filename unknown>:0 
  --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslClientStream.EndNegotiateHandshake (IAsyncResult result) <0xb4a7b740 + 0x000a7> in <filename unknown>:0 
  at Mono.Security.Protocol.Tls.SslStreamBase.AsyncHandshakeCallback (IAsyncResult asyncResult) <0xb4a7b550 + 0x0005f> in <filename unknown>:0 
  --- End of inner exception stack trace ---
  at Mono.Security.Protocol.Tls.SslStreamBase.EndRead (IAsyncResult asyncResult) <0xb4c83548 + 0x0012b> in <filename unknown>:0 
  at Mono.Net.Security.Private.LegacySslStream.EndAuthenticateAsClient (IAsyncResult asyncResult) <0xb4c83360 + 0x00034> in <filename unknown>:0 
  at Mono.Net.Security.Private.LegacySslStream.AuthenticateAsClient (System.String targetHost, System.Security.Cryptography.X509Certificates.X509CertificateCollection clientCertificates, SslProtocols enabledSslProtocols, Boolean checkCertificateRevocation) <0xb4cefe70 + 0x00050> in <filename unknown>:0 
  at Mono.Net.Security.Private.LegacySslStream.AuthenticateAsClient (System.String targetHost) <0xb4cefdb0 + 0x000bc> in <filename unknown>:0 
  at Mono.Net.Security.Private.MonoSslStreamImpl.AuthenticateAsClient (System.String targetHost) <0xb4cc1f70 + 0x00027> in <filename unknown>:0 
  at System.Net.Security.SslStream.AuthenticateAsClient (System.String targetHost) <0xb4cd1f40 + 0x00027> in <filename unknown>:0 
  at MinecraftClient.Protocol.ProtocolHandler+<>c__DisplayClass5.<doHTTPSRequest>b__4 () <0xb569d7c0 + 0x0006f> in <filename unknown>:0 
  at System.Threading.ThreadHelper.ThreadStart_Context (System.Object state) <0xb569d700 + 0x00066> in <filename unknown>:0 
  at System.Threading.ExecutionContext.RunInternal (System.Threading.ExecutionContext executionContext, System.Threading.ContextCallback callback, System.Object state, Boolean preserveSyncCtx) <0xb569d350 + 0x001be> in <filename unknown>:0 
  at System.Threading.ExecutionContext.Run (System.Threading.ExecutionContext executionContext, System.Threading.ContextCallback callback, System.Object state, Boolean preserveSyncCtx) <0xb569d268 + 0x00027> in <filename unknown>:0 
  at System.Threading.ExecutionContext.Run (System.Threading.ExecutionContext executionContext, System.Threading.ContextCallback callback, System.Object state) <0xb569d138 + 0x0004f> in <filename unknown>:0 
  at System.Threading.ThreadHelper.ThreadStart () <0xb569cf38 + 0x0002b> in <filename unknown>:0 

[Sheridan]

Maybe option "Ignore certificate errors"? :)

[ORelio]

That would be insecure. Maybe make sure your certificates are up to date with mozroots --sync?

[Sheridan]

sheridan@eee ~/soft/Minecraft/mcc $ mozroots --import --ask-remove
Mozilla Roots Importer - version 4.4.0.0
Download and import trusted root certificates from Mozilla's MXR.
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.

Downloading from 'http://mxr.mozilla.org/seamonkey/source/security/nss/lib/ckfw/builtins/certdata.txt?raw=1'...
Importing certificates into user store...
Import process completed.

sheridan@eee ~/soft/Minecraft/mcc $ mozroots --sync               
Mozilla Roots Importer - version 4.4.0.0
Download and import trusted root certificates from Mozilla's MXR.
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.

Downloading from 'http://mxr.mozilla.org/seamonkey/source/security/nss/lib/ckfw/builtins/certdata.txt?raw=1'...
sheridan@eee ~/soft/Minecraft/mcc $ mono MinecraftClient.exe MinecraftClient.ini
Console Client for MC 1.4.6 to 1.9.0 - v1.9.0 - By ORelio & Contributors
Connecting to Minecraft.net...

Unhandled Exception:
.......

[Sheridan]

Maybe this?

sheridan@eee ~/soft/Minecraft/mcc $ certmgr -ssl https://authserver.mojang.com                      
Mono Certificate Manager - version 4.4.0.0
Manage X.509 certificates and CRL from stores.
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed.


X.509 Certificate v3
   Issued from: C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
   Issued to:   C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3
   Valid from:  05.11.2013 21:36:50
   Valid until: 20.05.2022 21:36:50
   *** WARNING: Certificate signature is INVALID ***
This certificate is already in the CA store.

X.509 Certificate v3
   Issued from: C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3
   Issued to:   C=SE, S=Stockholm, L=Stockholm, O=Mojang AB, CN=*.mojang.com
   Valid from:  12.05.2015 0:00:00
   Valid until: 11.05.2017 23:59:59
This certificate is already in the AddressBook store.

No certificate were added to the stores.

[ORelio]

Seems like the root certificate is rejected by mono in your setup.
Maybe because it is signed with SHA-1 only, that's a weak signature algorithm:
https://www.ssllabs.com/ssltest/analyze.html?d=authserver.mojang.com states:

GeoTrust Global CA   Self-signed    
Fingerprint SHA1: de28f4a4ffe5b92fa3c503d1a349a7f9962a8212
Pin SHA256: h6801m+z8v3zbgkRHpq6L29Esgfzhj89C1SyUCOQmqU=
RSA 2048 bits (e 65537) / SHA1withRSA
Weak or insecure signature, but no impact on root certificate

Official website http://www.mono-project.com/download/ says latest version is 4.2, not 4.4. Weird.
Maybe they started rejecting SHA-1 certificates in latest builds.

[Sheridan]

ghm... mono version: 4.4.0

sheridan@eee ~/soft/Minecraft/mcc $ emerge mono -pv
These are the packages that would be merged, in order:
Calculating dependencies                             ... done!  
[ebuild   R   ~] dev-lang/mono-4.4.0.40::gentoo  USE="nls (-doc) -minimal -pax_kernel -xen" 0 KiB
Total: 1 package (1 reinstall), Size of downloads: 0 KiB

ok, I'll try to install 4.2

[Sheridan]

With 4.2.3 certificate accept. Thank.