Add custom ssl certs, now available for everyone. How to?

Anyone knowledgeable with this willing to create YT how-to? I’ve not touched SSL in a long time.

This inability to edit is frustrating… I just noticed that this is for Linux, I’m looking for a How-to SSL Plex for Windows. Please spare the move to Linux montra, I know it’s superior, but I’m on Windows and many others use plex on Windows as well.

I’ve configured my letsencrypt cert and it’s setup for my synology server.

See the working url at emeraldjava.noip.me:5001/

I then generated a pkcs12 cert with this command

openssl pkcs12 -export -out emeraldjava.noip.me.pfx -inkey privkey.pem -in cert.pem -certfile chain.pem -name "emeraldjava.noip.me"

I then attempt to access my plex server via emeraldjava.noip.me:32400/web but it fails

Any recommendations?

@henkierani @Night_2

@emeraldjava

Found this thread in https://forums.plex.tv/discussion/219323/how-to-add-personal-domain-ssl-certificate-to-plex-on-synology

Though I’d just post what I did to get it working and I hope it might help anyone else :slight_smile:

Here’s what I did, http://imgur.com/a/9UKLh

3 Likes

Hey @ all,

@henkierani thank you for the great how to. I got an error by using the lets encrypt certificate. Can you help me? The Plex Log shows:
ERROR - CERT: PKCS12_parse failed: error:23076071:PKCS12 routines:PKCS12_parse:mac verify failure
Mar 08, 2017 22:30:29.817 [0x7f762c26d800]

ERROR - CERT: Found a user-provided certificate, but couldn’t install it.

i can´t find a solution. Can you help me please?

Thank you soo much :wink:

@binarytec said:
Hey @ all,

ERROR - CERT: PKCS12_parse failed: error:23076071:PKCS12 routines:PKCS12_parse:mac verify failure
Mar 08, 2017 22:30:29.817 [0x7f762c26d800]

ERROR - CERT: Found a user-provided certificate, but couldn’t install it.

i can´t find a solution. Can you help me please?

Thank you soo much :wink:

Have you tried this? Plex/Synology - Custom domain with HTTPS - Album on Imgur

Yooo, I’m having this same problem after renewing my Certs.

Used open SSL to renew, and I’m using them on a couple diff programs to include my IIS webserver, so I know they are good.

However, I did export them using:

openssl pkcs12 -export -out cert1.pfx -inkey cert1.key -in cert1.pem

So my settings are as follows:

Custom certificate location
c:\plex\SSL\cert1.pfx

Custom certificate encryption key:
c:\plex\ssl\cert1.key

But i’m still getting this error:

CERT: PKCS12_parse failed: error:23076071:PKCS12 routines:PKCS12_parse:mac verify failure
ERROR CERT: Found a user-provided certificate, but couldn’t install it.

Any ideas?

I have the same question. I tried this guide, but it didn’t work for me. Anyone here who actually got ssl on a custon domain working?

Okay, so I THINK I figured it out.

See this Thread:

Essentially, the PMS settings under “Custom certificate encryption key” is actually the Password to the PKCS NOT the PATH to the key.pem file. (I THINK).

Is there a Custom Cert How-to for Windows PMS installs? I am not on a domain so I am not sure how to generate the .pfx…

also, I don’t care about a public DNS name… I’m cool with https://publicIPaddress:32400/web that is what all my users have today… I just want to encrypt now that the Trump-kins has rolled back Net privacy

you can use “acme.sh” create PKCS #12 format cert , It uses Letsencrypt

e.g
You must issue the cert first.
acme.sh --issue -d mydomain.com
Then convert it to pkcs12 format:
acme.sh --topkcs -d mydomain.com

OK, I got this to work, but now I’d like to turn it off. The UI is gone - do I just need to disable remote access completely first?

I’ve made a guide and script to easily do this using letsencrypt.
You can find it here: https://oisec.net/blog/plex-letsencrypt