Decrypting Plex Streams

[rpfrogner]

Server Version#: 1.21.0.3616
Player Version#: IOS, AppleTV,
I am hoping to enable my firewall (Palo Alto) to decrypt plex streams so I can inspect traffic for bad behavior coming from the Internet to my server. This should work with the certificate I’ve assigned to plex, but it appears that all apps (IOS, iPadOS, AppleTV) don’t use that cert, they use the plex generated cert, similar to how requests to the server IP address present the plex generated cert. This break decryption as the firewall does not have this cert. I believe I need to force use of my custom cert (desired) or identify where the plex generated cert has been placed on my server and extract it so my firewall can present it. Has anyone considered this type of use case? Any thoughts?

[ChuckPa]

Please see this discussion.

Decrypting the plex.direct certificate?

Server Version#: 1.18.9.2578 I’m trying to decrypt the plex.direct certificate. I was told that it’s stored in the servers Cache folder, and the key is equal to SHA512("plex" + id), where ID is equal to the ProcessedMachineIdentifier in preferences. However, when I run the following commands to attempt to decrypt the key and certificate: echo "plex$machineID" | sha512sum openssl pkcs12 -in certificate.p12 -out plex.cert -clcerts -nokeys -passin "pass:<that hash>" openssl pkcs12 -in certificat…