Thanks, ReneV. At least I know I'm not crazy. :)
Setting certfile to the absolute path should work ;-)
Setting certfile to the absolute path should work ;-)
That did it! Thanks! Totally overlooked that.
Hi all,
I'm struggling to make the new SSL stuff work on ubuntu as well. I had it working before the update. Since the SSL update, I've done the following:
1. Upgraded Plex to 0.9.8.4 (this seemed painless, and all seems to be working from browser)
2. Updated PlexConnect (pulled latest from github about an hour ago)
3. Created and installed the certs
Troubleshooting:
- Checked that I had right path to certfile in my config
- tried different permissions for cert file (444,777)
- added a debug line to print out certfile location in log
Any suggestions?
Here's my config. Plexmedia and plexconnect are running on 192.168.0.10, ATV is 192.168.0.121
[PlexConnect]
logpath = .
enable_dnsserver = True
ip_webserver = 0.0.0.0
prevent_atv_update = True
enable_plexconnect_autodetect = True
port_pms = 32400
port_webserver = 8080
ip_plexconnect = 0.0.0.0
certfile = /usr/lib/plexmediaserver/trailers.pem
ip_dnsmaster = 8.8.8.8
loglevel = Normal
ip_pms = 192.168.0.10
enable_plexgdm = True
port_ssl = 443
And here's my log (started PlexConnect, opened trailers app on ATV, got the "trailers unavailable, try again later" message, stopped PlexConnect)
11:13:37 PlexConnect: ***
11:13:37 PlexConnect: PlexConnect
11:13:37 PlexConnect: Press CTRL-C to shut down.
11:13:37 PlexConnect: ***
11:13:37 PlexConnect: started: 11:13:37
11:13:37 PlexConnect: IP_self: 192.168.0.10
11:13:37 DNSServer: started: 11:13:37
11:13:37 DNSServer: ***
11:13:37 DNSServer: Starting up.
11:13:37 DNSServer: intercept: ['trailers.apple.com', 'atv.plexconnect'] => 192.168.0.10
11:13:37 DNSServer: restrain: ['mesu.apple.com', 'appldnld.apple.com', 'appldnld.apple.com.edgesuite.net'] => 127.0.0.1
11:13:37 DNSServer: forward other to higher level DNS: 8.8.8.8
11:13:37 DNSServer: ***
11:13:37 WebServer: started: 11:13:37
11:13:37 WebServer: certfile /usr/lib/plexmediaserver/trailers.pem
11:13:37 WebServer: ***
11:13:37 WebServer: WebServer: Serving HTTP on 0.0.0.0 port 8080.
11:13:37 WebServer: WebServer: Serving HTTPS on 0.0.0.0 port 443.
11:13:37 WebServer: ***
11:13:37 PlexGDM: ***
11:13:37 PlexGDM: looking up Plex Media Server
11:13:37 PlexGDM: ***
11:13:38 PlexGDM: servers discovered: 1
11:13:38 XMLConverter: PlexGDM - PMS: 192.168.0.10:32400
11:13:39 DNSServer: DNS request received!
11:13:39 DNSServer: Source: ('192.168.0.121', 60852)
11:13:39 DNSServer: Domain: p18-buy.itunes.apple.com.akadns.net
11:13:39 DNSServer: ***forward request
11:13:39 DNSServer: -> DNS response from higher level
11:13:40 DNSServer: DNS request received!
11:13:40 DNSServer: Source: ('192.168.0.121', 60920)
11:13:40 DNSServer: Domain: itunes-cdn.apple.com.akadns.net
11:13:40 DNSServer: ***forward request
11:13:40 DNSServer: -> DNS response from higher level
11:13:41 DNSServer: DNS request received!
11:13:41 DNSServer: Source: ('192.168.0.121', 63066)
11:13:41 DNSServer: Domain: ax.init-cdn.itunes.apple.com.akadns.net
11:13:41 DNSServer: ***forward request
11:13:41 DNSServer: -> DNS response from higher level
11:13:41 DNSServer: DNS request received!
11:13:41 DNSServer: Source: ('192.168.0.121', 52638)
11:13:41 DNSServer: Domain: se-cdn.itunes.apple.com.akadns.net
11:13:41 DNSServer: ***forward request
11:13:41 DNSServer: -> DNS response from higher level
11:13:41 DNSServer: DNS request received!
11:13:41 DNSServer: Source: ('192.168.0.121', 56503)
11:13:41 DNSServer: Domain: trailers.apple.com
11:13:41 DNSServer: ***intercept request
11:13:41 DNSServer: -> DNS response: 192.168.0.10
11:13:41 WebServer: serving application.js
11:13:41 DNSServer: DNS request received!
11:13:41 DNSServer: Source: ('192.168.0.121', 50664)
11:13:41 DNSServer: Domain: atv.plexconnect
11:13:41 DNSServer: ***intercept request
11:13:41 DNSServer: -> DNS response: 192.168.0.10
11:13:45 DNSServer: DNS request received!
11:13:45 DNSServer: Source: ('192.168.0.121', 55983)
11:13:45 DNSServer: Domain: upp.itunes.apple.com
11:13:45 DNSServer: ***forward request
11:13:45 DNSServer: -> DNS response from higher level
11:13:47 DNSServer: DNS request received!
11:13:47 DNSServer: Source: ('127.0.0.1', 53200)
11:13:47 DNSServer: Domain: daisy.ubuntu.com
11:13:47 DNSServer: ***forward request
11:13:47 DNSServer: -> DNS response from higher level
11:13:51 DNSServer: DNS request received!
11:13:51 DNSServer: Source: ('127.0.0.1', 39720)
11:13:51 DNSServer: Domain: daisy.ubuntu.com
11:13:51 DNSServer: ***forward request
11:13:51 DNSServer: -> DNS response from higher level
11:13:58 DNSServer: DNS request received!
11:13:58 DNSServer: Source: ('192.168.0.121', 55948)
11:13:58 DNSServer: Domain: a771.da1.akamai.net
11:13:58 DNSServer: ***forward request
11:13:58 DNSServer: -> DNS response from higher level
11:13:59 DNSServer: DNS request received!
11:13:59 DNSServer: Source: ('127.0.0.1', 40346)
11:13:59 DNSServer: Domain: videosearch.ubuntu.com
11:13:59 DNSServer: ***forward request
11:13:59 DNSServer: -> DNS response from higher level
^C11:14:12 PlexConnect: Shutting down.
11:14:13 WebServer: Shutting down.
11:14:14 DNSServer: Shutting down.
11:14:14 PlexConnect: shutdown
Might seem silly, but try restarting the ATV.
I am also struggling with SSL issue.
On Centos 6 with httpd turned off all seems set.
I think its not plexconnect or atv but apache itself.
while apache and plexconnect running I type in browser the following address "http://trailers.apple.com"
and got the following error which is expected.
----------------
Error response
Error code 403.
Message: Not Serving Client 192.168.80.5.
Error code explanation: 403 = Request forbidden -- authorization will not help.
---------------
When I write "https://trailers.apple.com" get the following:
---------------
Proxy Error
The proxy server received an invalid response from an upstream server.
The proxy server could not handle the request GET /.
Reason: Error reading from remote server
Apache/2.2.15 (CentOS) Server at trailers.apple.com Port 443
----------------
In httpd error_log file get this one:
----------------
[Thu Aug 29 20:15:30 2013] [error] [client 192.168.80.35] (104)Connection reset by peer: proxy: error reading status
line from remote server 192.168.80.5
[Thu Aug 29 20:15:30 2013] [error] [client 192.168.80.35] proxy: Error reading from remote server returned by /
192.168.80.35 - - [29/Aug/2013:20:15:30 +0300] "GET / HTTP/1.1" 502 464 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2
3.0) Gecko/20100101 Firefox/23.0"
----------------
Just stuck at this level. Googling gave some tips like adding lines to httpd and ssl conf files but none of them worked.
Any one?
Prior to Apple's updates I had this all working wonderfully. Yesterday I took the effort to fix correct PlexConnect to get it all running again on it's own and it will work now when I have Apache SSL disabled...
I think I found the solution elsewhere on this forum...
Might seem silly, but try restarting the ATV.
Always good to ask. Have tried restarting the atv, and also done a complete power off by pulling the plug. No love.
Looking at the log, it seems to get stuck loading application.js, or maybe the step after where it tries to connect to atv.plexconnect
Evvert has created a new init script for ubuntu and debian that does not use screen and shuts down plexconnect correctly so it saves ATVSettings.cfg that the old scripts did not do.
Only differences between the init scripts is that the run level differs.
Only thing needed to change in the script is INSTDIR="/path_to/PlexConnect"
BR
Christian
Turned up the log level on the PlexConnect webserver. ATV seems to get the application.js file, and then goes on to request DNS for atv.plexconnect, but I never see that request hit the Plexconnect webserver. , Maybe this is helpful to some genius out there?
14:09:05 DNSServer: Domain: trailers.apple.com
14:09:05 DNSServer: ***intercept request
14:09:05 DNSServer: -> DNS response: 192.168.0.10
14:09:05 WebServer: http request header:
Host: trailers.apple.com
Accept-Encoding: gzip, deflate
Accept: */*
Accept-Language: en;q=0.9
Cookie: itspod=18; ns-mzf-inst=35-153-80-110-106-8079-182058-18-nk11; Pod=18; mz_at0-15096434=AwQAAAEMAADEfAAAAABSH5xHhwOmCW74HE9LDKfYfJ3S1+QdNvQ=; mz_at_ssl-15096434=AwUAAAEMAADEfAAAAABSH5xHmI/MDA0VYhvwK8V5vG88WY6As7Y=; X-Dsid=15096434; s_vi=[CS]v1|290D46E205011B72-600001382001A21A[CE]
Connection: keep-alive
X-Apple-TV-Resolution: 1080
X-Apple-TV-Version: 5.3
User-Agent: iTunes-AppleTV/5.3 (3; 8GB; dt:12)
14:09:05 WebServer: http request path:
/appletv/us/js/application.js
14:09:05 WebServer: cleaned path:
/appletv/us/js/application.js
14:09:05 WebServer: request options:
{'aTVLanguages': 'en;q=0.9'}
14:09:05 WebServer: serving application.js
14:09:05 DNSServer: DNS request received!
14:09:05 DNSServer: Source: ('192.168.0.121', 62237)
14:09:05 DNSServer: Domain: atv.plexconnect
14:09:05 DNSServer: ***intercept request
14:09:05 DNSServer: -> DNS response: 192.168.0.10
Now it is working.
Here is my plex_ssl.conf file at /etc/httpd/conf.d in case anyone needs it.
NameVirtualHost *:443 # This is the VHost for Plex Connect ServerName trailers.apple.com ServerAlias atv.plexconnect ProxyRequests Off ProxyPreserveHost On SSLEngine on SSLProxyEngine On SSLProtocol all -SSLv2 SSLCertificateFile /usr/local/lib/plexconnect/cert/trailers.der SSLCertificateKeyFile /usr/local/lib/plexconnect/cert/trailers.key Order allow,deny Allow from all ProxyPass / https://192.168.80.5:453/ ProxyPassReverse / https://192.168.80.5:453/
The point is that SSLCertificateFile and SSLCertificateKeyFile must be the same files you used to create the profile for atv.
Hope this helps.
If have updated my blog how to set up PlexConnect on a Linux Debian Server because of the latest SSL update. See http://eye-vision.homeip.net/1422/plexconnect-update/ for more info. It is in Dutch, but I guess with Google Translate you can figure out what I did ;-).
I figured out my problem, I think.
ServerAlias atv.plexconnect
this line was missing from my virtual host config file. Apache didn't know what to do with requests for atv.plexconnect. At some point after I originally installed plexconnect (and it was working), the developer started using atv.plexconnect for requests, in addtion to trailers.apple.com. When I upgraded to handle the ssl stuff, along came atv.plexconnect.
I followed this guide in the beginning. Can someone please point me to a guide on how to properly update to newer versions? Or did I miss it somewhere in here?
Also, I still can't figure out how what to change in the PC scripts and daemon scripts so that it launches with a separate install of Python. Anyone?
When you installed it with GIT, then updating is very simple. Just type the command: git pull
Evvert has created a new init script for ubuntu and debian that does not use screen and shuts down plexconnect correctly so it saves ATVSettings.cfg that the old scripts did not do.
Only differences between the init scripts is that the run level differs.
Only thing needed to change in the script is INSTDIR="/path_to/PlexConnect"
BR
Christian
Any chance for Centos?
I tried using the ubuntu version of this script on my 12.04 LTS box, and it says "Starting the process plexconnect", yet when I try to access the trailers app it gives me "Trailers is unavailble. Try again later." Launching the script manually from bash works just fine. Do you have any ideas what might be wrong? I was previously using the screen method however it stopped working once I implemented the SSH changes.
Evvert has created a new init script for ubuntu and debian that does not use screen and shuts down plexconnect correctly so it saves ATVSettings.cfg that the old scripts did not do.
Only differences between the init scripts is that the run level differs.
Only thing needed to change in the script is INSTDIR="/path_to/PlexConnect"
BR
Christian
Delete /var/run/PlexConnect.pid if it exists. Then try start the script.
I had to do that was well. You could also add a line to the script that tells you it found a PID file and is not starting Plex. That will save you troubleshooting time in the future.
Another note, I used the git install for the first time yesterday, and I noted it creates the PlexConnect folder as "PlexConnect". Originally I had it as "plexconnect" as in the tutorial, but I've changed it to PlexConnect to be inline with what the git installer creates.
To recap:
I created and installed the certificate on my Apple TV
I kept the cer, pem, and key files in /tmp on my Linux box
I copies my Plexconnect Settings.cfg file to /tmp
I deleted /usr/lib/local/plexconnect folder
I cd'd to /usr/local/lib and ran "git clone https://github.com/iBaa/PlexConnect.git"
I copied Settings.cfg into the newly-created PlexConnect folder
I coped the .cer,.key, and .pem files into /usr/local/lib/PlexConnect/assets/certificates
I updated the /etc/init.d/plexconnect scrtipt to point to /usr/local/lib/PlexConnect folder
I ran /etc/init.d/plexconnect start
and finally, I ran nslookup www.amd.com to make sure that it was working.
Funny thing is, I'm getting ready to move my Plex server into a Virtual Machine, so I get to do it all over.
There wasn't a /var/run/PlexConnect.pid file, so I'm not quite sure where else to troubleshoot. When I run the script, it creates the file, but plexconnect does not work. Gracefully shutting down the script with /etc/init.d/plexconnect stop stops the script and removes the .pid file. Any other ideas?
Anybody? Bueller?
