Problem with CERT: incomplete TLS handshake: sslv3 alert certificate revoked

Hello,

I have had a plex server for a long time.

I have never had a problem so far.

But now for the past few days I have been having problems with secure connection.

This is displayed on all my clients (Like the browser)
plex1 plex2
I have tried quite a few things but without success.

Here are my logs.

Can you help me ?

Thank you.

Regards,

Plex Media Server Logs_2021-03-22_18-16-02.zip (1.3 MB)

I allow myself to bounce back on the subject.

The tests of my post above were carried out on the same local network of the plex server.

Here is a test from the outside.

@pakito69

I am looking at your account.

You have two servers named “Plex-Server”
One was seen yesterday.
The other was last seen a year ago. ( a previous installation ? )

Your logs show an error handling the certificate.

Mar 22, 2021 18:09:07.130 [0x7fe8c2709780] DEBUG - [CERT] Subject name is /C=US/ST=California/L=Los Gatos/O=Plex, Inc./CN=*.a40c931e6acc45498634681cd9c032d5.plex.direct
Mar 22, 2021 18:09:07.130 [0x7fe8c2709780] DEBUG - [CERT] Installed certificate with fingerprint d0:b3:bb:5c:49:c1:40:e7:87:73:aa:03:25:50:8e:0b:af:a6:35:44.
Mar 22, 2021 18:09:07.130 [0x7fe8c2709780] DEBUG - [CERT/OCSP] Stapling requests will be made to 'http://ocspx.digicert.com/'.
Mar 22, 2021 18:09:07.131 [0x7fe8c2709780] ERROR - [CERT/OCSP] Error opening file '"/var/lib/plexmediaserver/Library/Application Support/Plex Media Server/Cache/OCSP/main.der"' - No such file or directory (2)

I can reset the certificate for you and , when you restart, PMS will obtain a new one.

Would you like me to do this for you?
Would you also like me to remove the 1 year old duplicate server ?

I actually tested several things. I have only one plex server. Yes go on. If that can solve my problem. thank you

For information I have only one server for more than 1 year
I just tested to empty the cache as well as the properties file.
I then went back with the backup I had at the level of the properties file and the cache folder.
So I think we should not delete the old server but rather the new one. How can we verify this?
I hope not to lose any data. Can you confirm it to me ?

If that is the case. Go for it.

As long as we don’t damage the main internal storage for your metadata and the server ID (which is in Preferences.xml) then you will not lose the server.

Something just changed. You have what looks like 2 active servers.

Are you restoring things from a backup or something?

Can you help me decide which to keep?

Please notice that one is “published” (active) and the other does not seem to have one.

I confirm that we must keep the first one which has the id:
ProcessedMachineIdentifier=“xxxxxxxxxxxxxxxxxxxxxxxxxxxxx9e444c”

You can delete the other with 0 shares

Thank you…

I have cleaned up and removed the old server.

I have also reset the certificate for you so it can connect cleanly.

Please restart the server and let it download a fresh certificate.

It worked perfect.

Thank you for your work and your speed of resolution.

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.