I finally had a chance to rebuild my Plex server but running into issue where I cannot add the Certificate to the ATV3 using "http://trailers.apple.com/trailers.cer". Although, if I use "http://10.9.1.25/trailers.cer" I can add the Certificate but cannot open the Trailers app successfully. Plex itself is working just fine and can be accessed via browser or by Plex applications.
Plex version
0.9.11.7.803-87d0708
Here's my PlexConnect.log file:
14:33:03 PlexConnect: started: 14:33:03
14:33:03 PlexConnect: Version: 0.5-dev
14:33:03 PlexConnect: Python: 2.7.9 (default, Dec 12 2014, 10:25:04)
[GCC 4.4.7 20120313 (Red Hat 4.4.7-11)]
14:33:03 PlexConnect: Host OS: linux2
14:33:03 PlexConnect: PILBackgrounds: Is PIL installed? False
14:33:03 Settings: getsetting enable_plexconnect_autodetect=False
14:33:03 Settings: getsetting ip_plexconnect=127.0.0.1
14:33:03 PlexConnect: IP_self (from settings): 127.0.0.1
14:33:03 Settings: getsetting hosttointercept=trailers.apple.com
14:33:03 ATVSettings: init class CATVSettings
14:33:03 ATVSettings: load settings
14:33:03 Settings: getsetting enable_dnsserver=False
14:33:03 WebServer: started: 14:33:03
14:33:03 Settings: getsetting port_webserver=8080
14:33:03 WebServer: ***
14:33:03 WebServer: WebServer: Serving HTTP on 127.0.0.1 port 8080.
14:33:03 WebServer: ***
14:33:03 Settings: getsetting enable_webserver_ssl=False
15:27:22 WebServer: http request header:
Host: 10.9.1.25^M
Accept-Encoding: gzip, deflate^M
User-Agent: AppleTV/7.0 iOS/8.0 AppleTV/7.0 model/AppleTV3,2 build/12A365b (3; dt:12)^M
Accept-Language: en^M
Accept: */*^M
X-Forwarded-For: 10.9.1.78^M
X-Forwarded-Host: 10.9.1.25^M
X-Forwarded-Server: trailers.apple.com^M
Connection: Keep-Alive^M
15:27:22 WebServer: http request path:
/trailers.cer
15:27:22 Localize: aTVLanguage: en
15:27:22 WebServer: pms address:
15:27:22 WebServer: cleaned path:
/trailers.cer
15:27:22 WebServer: PlexConnect options:
{'aTVScreenResolution': '720', 'aTVFirmwareVersion': '5.1', 'aTVLanguage': 'en', 'aTVAddress': '10.9.1.78'}
15:27:22 WebServer: additional arguments:
15:27:22 WebServer: serving *.cer: /trailers.cer
15:27:22 Settings: getsetting certfile=/etc/pki/plexconnect/trailers.pem
15:27:22 Settings: getsetting certfile=/etc/pki/plexconnect/trailers.pem
15:28:03 WebServer: http request header:
Host: trailers.apple.com^M
Accept: */*^M
Accept-Encoding: gzip, deflate^M
Accept-Language: en^M
Cookie: xp_ci=3z44smKgzEt7z4THz90szhBFRo7sX; s_vi=[CS]v1|2997933685012147-60000131E0056EC2[CE]^M
Here's my Settings.cfg file
[PlexConnect]
enable_plexgdm = True
ip_pms = 10.9.1.25
port_pms = 32400
enable_dnsserver = False
port_dnsserver = 53
ip_dnsmaster = 8.8.8.8
prevent_atv_update = False
enable_plexconnect_autodetect = False
ip_plexconnect = 127.0.0.1
hosttointercept = trailers.apple.com
port_webserver = 8080
enable_webserver_ssl = False
port_ssl = 443
certfile = /etc/pki/plexconnect/trailers.pem
loglevel = High
logpath = /var/log/plexconnect
Here's my plexconnect.conf file:
NameVirtualHost *:80
NameVirtualHost *:443
ServerName trailers.apple.com
ServerAlias secure.marketwatch.com
ProxyRequests Off
ProxyPreserveHost On
BrowserMatch "^(iTunes-)?AppleTV" appletv
ErrorLog logs/plexconnect-error_log
CustomLog logs/plexconnect-access_log combined
Order deny,allow
Deny from all
Allow from env=appletv
ServerName trailers.apple.com
ServerAlias secure.marketwatch.com
ProxyRequests Off
ProxyPreserveHost On
BrowserMatch "^(iTunes-)?AppleTV" appletv
SSLEngine on
SSLProxyEngine On
SSLProtocol all -SSLv2
SSLCertificateFile /etc/pki/plexconnect/trailers.cer
SSLCertificateKeyFile /etc/pki/plexconnect/trailers.key
ErrorLog logs/plexconnect-error_log
CustomLog logs/plexconnect-access_log combined
Order deny,allow
Deny from all
Allow from env=appletv
Here's my IPTables:
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 8080 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 32400 -j ACCEPT
-A INPUT -p udp -m state --state NEW -m udp --dport 32410 -j ACCEPT
-A INPUT -p udp -m state --state NEW -m udp --dport 32412 -j ACCEPT
-A INPUT -p udp -m state --state NEW -m udp --dport 32414 -j ACCEPT
-A INPUT -p udp -m state --state NEW -m udp --dport 1900 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT
Thank you for any assistance.