Plexamp on Android cannot connect remotely — error 60 / plex.direct certificate issue

Plex Labs
,
1

Server Version#:4.160.0
Player Version#:4.12.4
Mac OS 13.7.8

Phone: Honor 600 pro Android 16

Plexamp works normally when my phone is connected to my home Wi-Fi.

When I disconnect Wi-Fi and use Telstra 5G, Plexamp cannot find my Plex server and eventually reports that no servers are available.

However, Plex itself is accessible remotely:

  • Plex Remote Access reports Fully accessible outside your network
  • Plex Web works over 5G
  • I can log into Plex Web on the Honor and see my library
  • I can stream music successfully through Plex Web over 5G
  • Plexamp works normally over my home Wi-Fi
  • Plexamp fails consistently over 5G

I previously used Plexamp remotely over cellular on an iPhone with this same server without problems.

Troubleshooting already performed

I’ve checked the following:

  • Remote Access is configured on port 32400
  • Remote Access can remain green and report fully accessible
  • Server is configured for IPv4
  • Secure connections are set to Preferred
  • Honor has mobile data access enabled for Plexamp
  • Cleared Plexamp app data and logged back in
  • Tested with Wi-Fi completely disabled
  • Tested with Tailscale disabled
  • Tested with Tailscale enabled
  • With Tailscale enabled, I can directly access the Plex server from the Honor using the server’s Tailscale IP and port in Chrome
  • Plex Web can access and play music remotely without Tailscale

Relevant log errors

The Plexamp logs showed connection failures with:

Error 60

SSL certificate problem: unable to get local issuer certificate

The Plex Media Server logs also show:

error 60 — SSL certificate problem: unable to get local issuer certificate

and:

CERT: incomplete TLS handshake

with:

tlsv1 alert unknown ca

This appears to be occurring when Plex attempts to establish the secure plex.direct connection.

I have also checked the Plex Media Server data/cache locations on the Mac but cannot find a cert-v2.p12 or other obvious Plex certificate file.

At this point I’m wondering whether there is an issue with the Plex server’s plex.direct TLS certificate/certificate chain, particularly because Plex Web works remotely but Plexamp on Android does not.

Could someone from Plex please take a look at the certificate associated with my server or advise how I should regenerate/reset it?

I have not deleted or modified any certificate files.

Thanks!

Plex Media Server.log (7.1 MB)

2

I think this is a known issue; Let’s Encrypt changed their roots or intermediates and newly issues certs aren’t compatible with Plexamp’s certs. This will be fixed in the next Plexamp release.