1.32.0.6865 Breaks custom SSL certificate

Plex Media Server
9

TO ALL FOLLOWING HERE:

  1. PMS 1.32.0 updates our openSSL library to openSSL v3 and finally dumps the long-deprecated openSSL v2.

  2. As such, openSSL v3 dropped support for some encryption methods

  3. Unless you specified one of the more secure methods when you created your cert, you were likely to get one which is no longer supported by openSSL v3.

  4. Working with Engineering, and confirming PMS behavior, I have information for you on how to regenerate your certificates to be PMS-compatible moving forward

Here is my (redacted) certificate generation script

# Generate new p12 (Acme LE is valid until 2025)
openssl pkcs12 -export -out mydomain.p12 \
	-certpbe AES-256-CBC -keypbe AES-256-CBC -macalg SHA256 \
	-inkey mydomain.key -in mydomain.crt \
	-certfile Acme-LE.crt \
	-password pass:MyPasswordHere

I will add this to Linux Tips