Plex Certificate "404" -- Unable to obtain Certificate from cloud

Plex Media Server
246

For anyone who has the openssl tool installed on their system, or willing to install…

Plex.tv team requests the following command be run from the command line prompt:

openssl s_client -showcerts -connect 127.0.0.1:32400

They would like to see the output.

247

Server name NUC, currently unable to download certificate-

Oct 04, 2020 21:36:23.459 [0x7f075d7fa700] ERROR - CERT: Could not fetch certificate from the cloud: 404
Oct 04, 2020 21:36:27.115 [0x7f077529e700] ERROR - CERT: Could not fetch certificate from the cloud: 404

248

@daniel_33k_org

Which OS please? Linux?

Would you mind running the openssl command now and then after I reset the cert?

249

Howdy, after restarting a few times I am still having an error, but a new one: Oct 04, 2020 12:42:46.430 [0x70000bbdf000] ERROR - CERT: PKCS12_parse failed: error:23076071:PKCS12 routines:PKCS12_parse:mac verify failure Oct 04, 2020 12:42:46.430 [0x70000bbdf000] ERROR - CERT: Found a certificate, but couldn't install it.

and then after another restart back to: Oct 04, 2020 12:52:24.223 [0x70000d13e000] ERROR - CERT: Could not fetch certificate from the cloud: 404

Here’s the openssl result on osx 10.12.5: CONNECTED(00000003) 55791:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:/BuildRoot/Library/Caches/com.apple.xbs/Sources/OpenSSL098/OpenSSL098-64.50.6/src/ssl/s23_lib.c:185:

250

@markario

Thank you…

Now shut it down and I will reset.

Let’s see what happens on round 2

251

It’s down now

252

Restart please and then pull another openssl test and grab what it shows in Plex Media Server.log

253

Working as expected now.

openssl result returned:
**CONNECTED(00000003)** **depth=1 /C=US/O=Plex, Inc./CN=Plex Devices High Assurance CA3** **verify error:num=20:unable to get local issuer certificate** **verify return:0** **---** Certificate chain 0 s:/C=US/ST=California/L=Los Gatos/O=Plex, Inc./CN=*.94f52f87a819491aba8cabf1005581cf.plex.direct i:/C=US/O=Plex, Inc./CN=Plex Devices High Assurance CA3

Followed by the certs

254

Remote Access too?

255

Remote access is working now.

256

:thinking:

257

Hi @ChuckPa, once certificate on ‘SynologyNAS’ has been reset do I need to just quit and relaunch Plex or my actual NAS?
Thanks

258

@ChuckPa Thanks for the help, I appreciate it! If you need/want to debug more let me know.

259

@MCH01

Yes… Just stop and restart.

It will obtain a fresh certificate upon restart

260

@yevaman44

Please do the following:

  1. Stop the server
  2. Verify the system time is perfectly in sync with the Internet time servers
  3. Let me know when you’re ready.
261

@ChuckPa I’m ready ! :slight_smile:

262

Restart it and then, after about 1 minute, pull the openssl command from above (less the actual cert body)

263

@ChuckPa This message is for me ? How do u pull this command, and where ?

264

No luck with the restart. If I attach the logs here is there anything I need to remove from them for security reasons or can I send you them privately?

265

Linux and Mac users should have this natively.