"API Rate Limit Exceeded" - Can't Access Plex Securely

When I try to access my Plex server via plex.tv (or through any client securely), it says that app.plex.tv is unable to connect to my server securely. Upon examining the logs, I see:

CERT: Error acquiring new certificate: Failed to upload CSR: 429, <?xml version="1.0" encoding="UTF-8"?>

I saw a previous post with the same issue where Plex devs had to manually reset the certificate, so I’m wondering if this has to be done for me. Thank you for your help.

Server Version#:1.23.3.4707
Player Version#:

@DanSaba

Would you please do the following:

  1. IF you can access PMS via the UI, verify DEBUG logging is enabled; VERBOSE disabled. SAVE if changes.
  2. Restart PMS
  3. Wait 2 minutes for it to start.
  4. Stop PMS
  5. Download the logs via the UI or manually as a tar.gz
  6. Attach here.

Plex Media Server Logs_2021-07-02_17-50-41.zip (2.0 MB)
Attached are the logs.

dan,

no cert errors anywhere in this log set.

Where’s this coming from? web app → app.plex.tv ??

I see the cert errors in Plex Media Server.1.log. A set of them starts at 17:05:08.737. Do you see them there? After restarting, remote access is no longer working either.

Thank you… I see it now.

Your network is flapping. That will cause problems.

Jul 02, 2021 17:23:39.187 [0x7f0dc9b2bb38] DEBUG - Completed: [127.0.0.1:33332] 200 GET /activities (10 live) GZIP 0ms 350 bytes (pipelined: 5)
Jul 02, 2021 17:23:39.323 [0x7f0dc9b4eb38] DEBUG - EventSource: Got event [data] '<Message address="173.68.120.79" port="32400" asyncIdentifier="d226b2be-5334-41fc-a49d-60acb93af341" connectivity="1" command="notifyConnectivity"/>'
Jul 02, 2021 17:23:39.323 [0x7f0dc9b4eb38] DEBUG - PubSub: Got notified of reachability for async identifier d226b2be-5334-41fc-a49d-60acb93af341: 1 for 173.68.120.79:32400 (responded in 1319 ms)
Jul 02, 2021 17:23:39.323 [0x7f0dc9b4eb38] DEBUG - MyPlex: reachability check - current mapping state: 'Mapped'.
Jul 02, 2021 17:23:39.323 [0x7f0dc9b4eb38] DEBUG - MyPlex: mapping state set to 'Mapped'.
Jul 02, 2021 17:23:39.351 [0x7f0dc9b4eb38] DEBUG - Auth: authenticated user 1 as DanSaba
Jul 02, 2021 17:23:39.351 [0x7f0dcb378b38] DEBUG - Request: [127.0.0.1:33332 (Loopback)] GET /myplex/account (10 live) GZIP Signed-in Token (DanSaba)
Jul 02, 2021 17:23:39.353 [0x7f0dc9b4eb38] DEBUG - Completed: [127.0.0.1:33332] 200 GET /myplex/account (10 live) GZIP 1ms 3458 bytes (pipelined: 6)
Jul 02, 2021 17:23:47.413 [0x7f0dc90e9b38] DEBUG - NetworkInterface: received Netlink message len=80, type=RTM_GETADDR, flags=0x0
Jul 02, 2021 17:23:47.413 [0x7f0dc90e9b38] DEBUG - NetworkInterface: Netlink address message family=2, index=10, flags=0x80
Jul 02, 2021 17:23:47.413 [0x7f0dc90e9b38] DEBUG - Network change.
Jul 02, 2021 17:23:47.413 [0x7f0dc90e9b38] DEBUG - NetworkInterface: Notified of network changed (force=0)
Jul 02, 2021 17:23:47.416 [0x7f0dc90e9b38] DEBUG - Network change notification but nothing changed.
Jul 02, 2021 17:23:47.416 [0x7f0dc90e9b38] DEBUG - NetworkInterface: received Netlink message len=1360, type=RTM_NEWLINK, flags=0x0
Jul 02, 2021 17:23:47.416 [0x7f0dc90e9b38] DEBUG - NetworkInterface: Netlink information message family=0, type=65534, index=10, flags=0x1090, change=0x41
Jul 02, 2021 17:23:47.416 [0x7f0dc90e9b38] DEBUG - Network change.
Jul 02, 2021 17:23:47.416 [0x7f0dc90e9b38] DEBUG - NetworkInterface: Notified of network changed (force=0)
Jul 02, 2021 17:23:47.416 [0x7f0dc90e9b38] DEBUG - Network change notification but nothing changed.
Jul 02, 2021 17:23:47.416 [0x7f0dc90e9b38] DEBUG - NetworkInterface: received Netlink message len=596, type=RTM_DELLINK, flags=0x0
Jul 02, 2021 17:23:47.416 [0x7f0dc90e9b38] DEBUG - NetworkInterface: Netlink information message family=0, type=65534, index=10, flags=0x1090, change=0xffffffff
Jul 02, 2021 17:25:14.130 [0x7f0dc96d9b38] DEBUG - CERT: Version mismatch, fetching a new one.
Jul 02, 2021 17:25:14.130 [0x7f0dc96d9b38] DEBUG - CERT: Certificate did not exist, fetching a new one.
Jul 02, 2021 17:25:14.131 [0x7f0dc96d9b38] DEBUG - HTTP requesting GET https://plex.tv/api/v2/devices/7c17998d4def6a20424babeda1c31547763f953e/certificate/subject
Jul 02, 2021 17:25:14.651 [0x7f0dc96d9b38] DEBUG - HTTP/1.1 (0.5s) 200 response from GET https://plex.tv/api/v2/devices/7c17998d4def6a20424babeda1c31547763f953e/certificate/subject
Jul 02, 2021 17:25:14.652 [0x7f0dc96d9b38] DEBUG - HTTP requesting PUT https://plex.tv/api/v2/devices/7c17998d4def6a20424babeda1c31547763f953e/certificate/csr?reason=missing&invalidIn=0
Jul 02, 2021 17:25:14.822 [0x7f0dc96d9b38] DEBUG - HTTP/1.1 (0.2s) 429 response from PUT https://plex.tv/api/v2/devices/7c17998d4def6a20424babeda1c31547763f953e/certificate/csr?reason=missing&invalidIn=0 (reused)
Jul 02, 2021 17:25:14.822 [0x7f0dc96d9b38] ERROR - CERT: Error acquiring new certificate: Failed to upload CSR: 429, <?xml version="1.0" encoding="UTF-8"?>
<errors>
  <error code="1003" message="API rate limit exceeded"/>
</errors>
Jul 02, 2021 17:25:14.822 [0x7f0dc9b2bb38] DEBUG - [CERT] MyPlex: Last published value didn't change, we're done.
Jul 02, 2021 17:25:40.484 [0x7f0dc90e9b38] DEBUG - NetworkInterface: received Netlink message len=1356, type=RTM_NEWLINK, flags=0x0
Jul 02, 2021 17:25:40.484 [0x7f0dc90e9b38] DEBUG - NetworkInterface: Netlink information message family=0, type=65534, index=11, flags=0x1090, change=0xffffffff
Jul 02, 2021 17:25:40.484 [0x7f0dc90e9b38] DEBUG - Network change.
Jul 02, 2021 17:25:40.484 [0x7f0dc90e9b38] DEBUG - NetworkInterface: Notified of network changed (force=0)
Jul 02, 2021 17:25:40.485 [0x7f0dc90e9b38] DEBUG - Network change notification but nothing changed.
Jul 02, 2021 17:25:40.487 [0x7f0dc90e9b38] DEBUG - NetworkInterface: received Netlink message len=1360, type=RTM_NEWLINK, flags=0x0
Jul 02, 2021 17:25:40.487 [0x7f0dc90e9b38] DEBUG - NetworkInterface: Netlink information message family=0, type=65534, index=11, flags=0x110d1, change=0x1
Jul 02, 2021 17:25:40.487 [0x7f0dc90e9b38] DEBUG - Network change.
Jul 02, 2021 17:25:40.487 [0x7f0dc90e9b38] DEBUG - NetworkInterface: Notified of network changed (force=0)
Jul 02, 2021 17:25:40.488 [0x7f0dc90e9b38] DEBUG - Network change notification but nothing changed.
Jul 02, 2021 17:25:40.494 [0x7f0dc90e9b38] DEBUG - NetworkInterface: received Netlink message len=80, type=RTM_DELADDR, flags=0x0
Jul 02, 2021 17:25:40.494 [0x7f0dc90e9b38] DEBUG - NetworkInterface: Netlink address message family=2, index=11, flags=0x80
Jul 02, 2021 17:25:40.494 [0x7f0dc90e9b38] DEBUG - Network change.
Jul 02, 2021 17:25:40.494 [0x7f0dc90e9b38] DEBUG - NetworkInterface: Notified of network changed (force=0)
Jul 02, 2021 17:25:40.495 [0x7f0dc90e9b38] DEBUG - Network change notification but nothing changed.
Jul 02, 2021 17:26:03.431 [0x7f0dc9b4eb38] DEBUG - WebSocket: client initiated close
Jul 02, 2021 17:26:03.431 [0x7f0dc9b2bb38] DEBUG - NotificationStream: Removing because of close
Jul 02, 2021 17:26:03.431 [0x7f0dc9b4eb38] DEBUG - handleStreamRead code 2: End of file
Jul 02, 2021 17:26:03.432 [0x7f0dc9b4eb38] DEBUG - Completed after connection close: [127.0.0.1:33350] -3 GET /:/websockets/notifications?filters=log (4 live) GZIP 144261ms 11507 bytes
Jul 02, 2021 17:26:03.472 [0x7f0dc9b4eb38] DEBUG - Auth: authenticated user 1 as DanSaba

Check your DHCP server lease time / WiFi signal / wired connectors. Something is not stable there.

I think that was a transient issue caused by me disconnecting and reconnecting a VPN and is not related to the issue with Plex. Attached is another set of logs I just got where that same message is only present in several instances at the same timestamp. What would be the connection with the API rate limit error when attempting to pull a certificate? Also, this message appears a ton of times:

Jul 02, 2021 18:35:50.371 [0x7f1ee3fc5b38] DEBUG - Request: [108.6.218.222:63188] rejected because secure connections are require

Could it be a similar issue to this case? "API rate limit exceeded" When Getting Certificate

Plex Media Server Logs_2021-07-02_18-47-54.zip (2.0 MB)

Dan, if you’re going for a certificate --or-- using Plex on two different networks (effectively at random) it’s going to go update plex.tv.

This might not be a certificate issue at all.

You might actually be updating IPs (API calls) faster than it allows for a host.

I will reset the cert but if the API comes back with you flip/flopping then you’ll know.

Here you are.. Current status at plex.tv before I reset it.

Definitely flopping around and it not liking it.

Do those times correlate to anything ?

I think the issue might be from me removing and re-adding my custom certificate while troubleshooting this issue. Perhaps I made it worse or created a new problem in doing so. I won’t be using a custom certificate going forward anyways.

If those times, which are GMT , make sense to you, then you have something to pin it to.

I think that was most likely the cause. It’s working properly again now. Thanks so much for your help!

sorry for taking extra time but now we have a good idea of the root cause for the future.

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.