Hi all,
I’m seeing the following in the PMS logs:
Jan 21, 2020 00:33:10.684 [0x80cd91600] WARN - HTTP error requesting GET https://me.plexapp.com/services/rate?guid=plex%3A%2F%2Ftrack%XXX&rating=6×tamp=1579527188&signature=XXX (0, No error) (SSL certificate problem: certificate has expired)
It’s not constant, only when me.plexapp.com resolves to 52.50.3.159. I’m guessing someone forgot to run the LE update script on a server somewhere.
Here’s the cURL output from the command line for the same URL:
# curl -v --insecure "https://me.plexapp.com/services/rate?guid=plex%3A%2F%2Ftrack%XXX&rating=6×tamp=1579527188&signature=XXX
* STATE: INIT => CONNECT handle 0x801485800; line 1491 (connection #-5000)
* Added connection 0. The cache now contains 1 members
* STATE: CONNECT => WAITRESOLVE handle 0x801485800; line 1532 (connection #0)
* Trying 52.50.3.159:443...
* TCP_NODELAY set
* STATE: WAITRESOLVE => WAITCONNECT handle 0x801485800; line 1611 (connection #0)
* Connected to me.plexapp.com (52.50.3.159) port 443 (#0)
* STATE: WAITCONNECT => SENDPROTOCONNECT handle 0x801485800; line 1667 (connection #0)
* Marked for [keep alive]: HTTP default
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /usr/local/share/certs/ca-root-nss.crt
CApath: none
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* STATE: SENDPROTOCONNECT => PROTOCONNECT handle 0x801485800; line 1682 (connection #0)
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256
* ALPN, server accepted to use http/1.1
* Server certificate:
* subject: CN=*.plexapp.com
* start date: Oct 15 05:44:08 2019 GMT
* expire date: Jan 13 05:44:08 2020 GMT
* issuer: C=US; O=Let's Encrypt; CN=Let's Encrypt Authority X3
* SSL certificate verify result: certificate has expired (10), continuing anyway.