Plex app missing valid digital signature on QNAP server

Plex Media Server NAS & Devices
1

Server Version#:1.18.0
Player Version#:N/A

Probably a non-issue, but noticed on my QNAP NAS drive that the plex app does not have a valid digital signature associated with it. This was reported as a security issue from within a QNAP scan. This is the only app on the drive lacking this- is this something the plex folks left out? or forgot?
works fine otherwise- just wondering.

2

QTS 4.4.1 does check.
We are implementing the signature now.

Be advised, QTS 4.4.1 has been withdrawn by QNAP back to BETA status.

This having been said, I posted an announcement (pinned here in server-qnap), the officially supported QTS version at this time has returned to 4.3.6.

EDIT: 1-Dec-2019

It seems 4.4.1 is now Official again. Plex/QNAP signed packages which address the warning will start publishing soon.

3

I just started seeing the same thing on my QNAP with PlexMediaServer-1.18.2.2058-e67a4e892-x86_64

4

We will start publishing this again soon. Likely with the next update.

5

I attempted to install the latest version today but I’m unable to do so. I get the following message in my log files. Just for grins I did try renaming the file (removing the .codesigning extension) but I get the same results (as expected). Is there some new step I’m missing or was the wrong file uploaded? Also of note, the file that I downloaded (both via Plex Dashboard and from the site directly) were only 33 bytes which seem incorrect.

Severity Level Date Time Users Source IP Application Category Content
Error 2019/12/03 07:39:32 System 127.0.0.1 App Center App Installation [App Center] Failed to install PlexMediaServer-1.18.3.2111-5a96726d0-x86_64.qpkg.codesigning due to a file format error.

1 Like
6

It should only be a warning by default, unless I’m mistaken ?

7

It turns out the link to the download the file (both in PMS and on the website) is the wrong URL. If you take the URL and remove the .codesigning extension the correct file (much larger) is downloaded and it installs as expected. I found that answer in this topic.

8

Thank you!

Notifying operations team now.

1 Like
9

Should be OK now. please verify

10

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.