joje
April 4, 2023, 4:25pm
1
Server Version#: 1.32.0.6865
Just upgraded to this new version on my Windows server and I now get certificate problems. I have my own certificate on the server that works on previous versions but now it seems to do some kind of redirect when connecting to server so that the certificate don’t match the url anymore.
I have the same problem, plex is not using my custom certificate and defaulting to the *.plex.direct cert.
I generate the certificate bundle with acme.sh: acme.sh --to-pkcs12 --password ##### -d my.domain.com
From the plex media server log:
Apr 04, 2023 11:43:18.316 [] INFO - Plex Media Server v1.32.0.6865-ba892e5ce - Docker Docker Container x86_64 - build: linux-x86_64 debian - GMT -05:00
...
Apr 04, 2023 11:43:18.360 [] ERROR - [CERT] PKCS12_parse failed: error:0308010C:digital envelope routines::unsupported
Apr 04, 2023 11:43:18.360 [] ERROR - [CERT] Found a user-provided certificate, but couldn't install it.
I’ve had exactly the same problem today as well with the new version.
WooSai
April 4, 2023, 9:22pm
5
I’m having the same issue on Ubuntu 22.04. I thought I was going insane.
maxsac
April 5, 2023, 2:28am
6
Same issue here. Had to downgrade to latest stable. Was constant cert errors with no custom certs.
@flow
Thanks for pointing me here.
The full details are here and why there are mixed results for folks.
OpenSSL v3.0.0 and PMS.
For those using their own domains and certificates with PMS ,
PMS 1.32.0.6865 and above updates OpenSSL from v1.1.1 to v3.0.0 .
(changed the numbering scheme in the process)
The consequence of this is OpenSSL v3 removed several “less secure” encryption methods.
The impact on you, if you’re using an older distributions where openssl v3 is not the default, if not already doing so, you will need pay special attention to how your certificates are generated
As example…
2 Likes
system
Closed
July 4, 2023, 6:03am
9
This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.