SSL Connection Error When Logging into Spotify

When logging into Spotify, manually authorizing, or launching Lyricify, if you encounter the following prompt, you can follow the steps on this page to troubleshoot:

The SSL connection could not be established, see inner exception.
SSL connection could not be established.

Network or proxy anomalies, incorrect system time, certificate verification failures, etc., can all lead to such errors.

First Check Network and System Settings

1. Change Network or Proxy Node. If using a proxy, try switching to a different node; you can also use a mobile hotspot to check if the issue is related to the current network.
2. Check Proxy Configuration. Ensure the proxy program is running, the address and port of the Windows system proxy match those of the proxy software, and check the routing rules for accounts.spotify.com and api.spotify.com. Browser proxy plugins usually only affect the browser.
3. Sync System Time. Check the date, time, and time zone in Windows settings, and retry after syncing the time.
4. Check HTTPS Scanning or Decryption. If the proxy software or security software has these features enabled, temporarily disable them and retry, then restore the settings after testing. For company networks, contact the administrator for assistance.

If You Still Cannot Log In

Try logging in again after updating Lyricify, and check the logs around the time of the error. If you can access the main interface, click Open under Settings → Advanced → Logs.

If you cannot access the main interface, refer to Configuration File Migration to find the configuration folder and open Logs\Log.txt within it. The portable version’s logs are located in Data\Logs\Log.txt within the portable package.

When Logs Indicate TLS or Certificate Errors

• Protocol Version or Cipher Suite Negotiation Failed: Update Windows and the proxy software. If you have manually modified TLS settings, revert those changes and retry.
• Certificate Expired or Domain Name Mismatch: Check the system time, as well as the HTTPS scanning and decryption features of the proxy or security software.
• Root Certificate Untrusted (UntrustedRoot): Check if automatic updates for Windows root certificates are disabled. If you previously disabled this feature using system optimization tools, re-enable it in those tools; for organization-managed devices, contact the administrator for assistance. Refer to Microsoft’s Certificate Update Instructions.
• Incomplete Certificate Chain (PartialChain): Try changing the network or proxy node so that Windows can download the necessary intermediate certificates.
• Revocation Status Check Failed: Check if the revocation information query address listed in the certificate is accessible, and retry after switching networks or proxy nodes.

Supplement Missing Root Certificates

If you have confirmed that Windows is missing the Certainly Root R1 required for the Spotify certificate chain, follow these steps to install it:

1. Download Certainly Root R1 from the Root CA Certificates section of the Certainly Official Certificate Repository, the file name is Certainly_Root_R1.pem.

2. Open PowerShell as an administrator, switch to the download directory, and execute:

   certutil -addstore Root ".\Certainly_Root_R1.pem"

3. Completely exit Lyricify, then reopen it and log into Spotify.

Note: The downloaded and imported item is a root certificate; do not import site certificates or intermediate certificates into the “Trusted Root Certification Authorities” store.