Problem With Plex Certificate Web App

General Discussions
1

Every time I use the web app, I’m getting report something wrong with the certificate. I gave it time for Plex to renew the certificate, but that’s not happening after this long. I would really like to see this resolved.

Thanks

2

Please report the exact error message. Make a screenshot if possible.
This usually only happens when there are other parties interfering, like corporate firewalls or anti virus software.

3

Yes, it’s Kaspersky terminating it. When I get home, I’ll take a screenshot and write down the message as well.

Thanks

4

I am pretty confident that it is Kaspersky which is the reason for the failure in the first place.

When Kaspersky is decrypting the secure communication between the Plex clients and the server, it does the following:

  1. decrypt the packet
  2. inspect the packet
  3. re-ecrypt the packet - but this time using its own cyrptographic “intermediate” certificate.
    And that is making the data packet invalid, because the certificate and the domain name from where it is coming from don’t match anymore.

Without Kaspersky’s interference, the packet would have a certificate that shows your Plex server’s fully qualified domain name.

You must tell Kaspersky to not decrypt encrypted communication.

5

I am pretty confident that it is Kaspersky which is the reason for the failure in the first place.

When Kaspersky is decrypting the secure communication between the Plex clients and the server, it does the following:

  1. decrypt the packet
  2. inspect the packet
  3. re-ecrypt the packet - but this time using its own cyrptographic “intermediate” certificate.
    And that is making the data packet invalid, because the certificate and the domain name from where it is coming from don’t match anymore.

Without Kaspersky’s interference, the packet would have a certificate that shows your Plex server’s fully qualified domain name.

You must tell Kaspersky to not decrypt encrypted communication.

6

q7smxwxwv4xa.jpg616×520 106 KB

ob7jxowohtlp.jpg638×771 148 KB

Certificate error
Self-signed certificate

7

@OttoKerner said:
I am pretty confident that it is Kaspersky which is the reason for the failure in the first place.

When Kaspersky is decrypting the secure communication between the Plex clients and the server, it does the following:

  1. decrypt the packet
  2. inspect the packet
  3. re-ecrypt the packet - but this time using its own cyrptographic “intermediate” certificate.
    And that is making the data packet invalid, because the certificate and the domain name from where it is coming from don’t match anymore.

Without Kaspersky’s interference, the packet would have a certificate that shows your Plex server’s fully qualified domain name.

You must tell Kaspersky to not decrypt encrypted communication.

Spot on. It is Kaspersky. =)

8

I have a similar problem when connecting to my server directly (https://server.url:32400):
While Firefox/Win7 at work shows it trusts the certificate, Chromium/Linux says it’s not a secure connection.
Who is right? :smiley:

9

@Coxeroni said:
I have a similar problem when connecting to my server directly (https://server.url:32400):
While Firefox/Win7 at work shows it trusts the certificate, Chromium/Linux says it’s not a secure connection.
Who is right? :smiley:

Are you using Kaspersky?

10

Nope, so probably I wasn’t allowed to hijack the thread? :wink:

11

@asaintfort said:

Could you also show what’s on the ’ General’ and ‘Details’ tabs?