Would you please open the command line window and run
openssl.exe s_client -showcerts -connect 127.0.0.1:32400
(or just openssl on Linux and Mac)
We would like to see what you’re getting. They’re trying to solve your machine now.
@ChuckPa done, would you like the txt of the result ? or what shall I paste ?
@ChuckPa Just send you the result via pm
THanks… Forwarded
@ChuckPa I was watching a movie via Plex in my home. Shall I stop or it is possible to continue even if thoses guys are lookin for my problem ?
Continue as you are for now. There’s no need to stop unless they need.
They are doing some deep diving here to figure out why only you have this problem.
@ChuckPa
That’s cool ! I never change anyhting ( config, os, modem rooter etc…) It came 2 or 3 days ago, as everybody ! 
Hope they can find something.
In the meantimes, thks them for me for the time spended to try to resolve this ! Sorry for that !
Are you running your own domain/certificates there?
@ChuckPa
Not at all, “traditional installation” internet - modem - pc
I’m having this issue as well… Stinks
Plex running on Synlogy Nas, already tried restart of plex a few times. Only insecure works now.
Noticed in log from Nvidia shield:
Plex peer certificate failed verification
When certificate verification fails: 1. password 2. System time (doesn’t match internet time servers) – Please check that first.
Your logs, collected about a minute after Plex starts, will allow me to confirm the rest.
Thanks for reply.
-
Password is for sure good. No change in awhile.
-
Time is NTP via pool.ntp.org - confirmed looks good still
Ran that openssl command and working on getting you logs.
Edit: See. https://support.plex.tv/articles/201643703-reporting-issues-with-plex-media-server/ but that page does not seem to exst. I turned on the logging and restarted plex but there is NOT Troubleshooting page and advanced view is enabled.
Meah that a bad support page. The correct one is @ https://support.plex.tv/articles/200250417-plex-media-server-log-files/
openssl s_client -showcerts -connect plexIP:32400
CONNECTED(00000003)
depth=0 C = US, ST = California, L = Los Gatos, O = "Plex, Inc.", CN = *.d9d65703a6ef45d2ac2f2e1dcac9308a.plex.direct
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 C = US, ST = California, L = Los Gatos, O = "Plex, Inc.", CN = *.d9d65703a6ef45d2ac2f2e1dcac9308a.plex.direct
verify error:num=21:unable to verify the first certificate
verify return:1
---
Certificate chain
0 s:/C=US/ST=California/L=Los Gatos/O=Plex, Inc./CN=*.d9d65703a6ef45d2ac2f2e1dcac9308a.plex.direct
i:/C=US/O=Plex, Inc./CN=Plex Devices High Assurance CA3
---
Server certificate
subject=/C=US/ST=California/L=Los Gatos/O=Plex, Inc./CN=*.d9d65703a6ef45d2ac2f2e1dcac9308a.plex.direct
issuer=/C=US/O=Plex, Inc./CN=Plex Devices High Assurance CA3
---
No client certificate CA names sent
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 3409 bytes and written 322 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
---
closed
Thanks. That confirms your certs were hit by the outage. Plex.tv and your PMS don’t agree.
I reset the certificate.
You can restart it now.
Perfect,thank you.
Confirmed, fixed
Here is what good output looks like:
openssl s_client -showcerts -connect plexIP:32400
CONNECTED(00000003)
depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert High Assurance EV Root CA
verify return:1
depth=1 C = US, O = "Plex, Inc.", CN = Plex Devices High Assurance CA3
verify return:1
depth=0 C = US, ST = California, L = Los Gatos, O = "Plex, Inc.", CN = *.d97c719f55ec4df99784a67eccf38655.plex.direct
verify return:1
---
Certificate chain
0 s:/C=US/ST=California/L=Los Gatos/O=Plex, Inc./CN=*.d97c719f55ec4df99784a67eccf38655.plex.direct
i:/C=US/O=Plex, Inc./CN=Plex Devices High Assurance CA3
much better
Encountering the same thing as well. Same symptoms - remote access worked fine 36-48 hours ago and then suddenly stopped working.
Tried multiple restarts of the application as well as the PMS server itself.
I’ve followed the process for stopping/starting the service and getting the log files for the past minute and I see several entries which say:
Oct 05, 2020 18:51:32.136 [0x7f86864a1700] DEBUG - HTTP 404 response from POST https://plex.tv/devices/024e9917f57a9ca19be2cd500bd515ce0b9b66b4/certificate?version=2&X-Plex-Token=xxxxxxxxxxxxxxxxxxxx
Are my certs also affected by the outage?
I just tried the following, but the issue still persists:
- Turning off Remote Access
- Restarting Plex server
- Turning on Remote Access
Looking in the log files, I see the following:
Oct 05, 2020 20:28:47.002 [0x7fcd477b7700] ERROR - OCSP: Our certificate (SN: 09E648D71C96AD27A39F8760274FFDDF) has been revoked. Revocation reason: ‘(UNKNOWN)’. Not refreshing OSCP.
Oct 05, 2020 20:28:47.002 [0x7fcd477b7700] INFO - OSCP: fetching new certificate to replace revoked one.
Oct 05, 2020 20:28:47.002 [0x7fcd477b7700] DEBUG - CERT: Forcing refresh.
Oct 05, 2020 20:28:47.002 [0x7fcd477b7700] DEBUG - HTTP requesting POST https://plex.tv/devices/024e9917f57a9ca19be2cd500bd515ce0b9b66b4/certificate?version=2&X-Plex-Token=xxxxxxxxxxxxxxxxxxxx
Oct 05, 2020 20:28:47.404 [0x7fcd477b7700] DEBUG - HTTP 404 response from POST https://plex.tv/devices/024e9917f57a9ca19be2cd500bd515ce0b9b66b4/certificate?version=2&X-Plex-Token=xxxxxxxxxxxxxxxxxxxx
Oct 05, 2020 20:28:47.405 [0x7fcd477b7700] ERROR - CERT: Could not fetch certificate from the cloud: 404
And then later on in the logs:
Oct 05, 2020 20:28:56.041 [0x7fcd0e5a1700] DEBUG - CERT: Existing certificate doesn’t have expected certificate identifier, fetching a new one.
Oct 05, 2020 20:28:56.041 [0x7fcd0e5a1700] DEBUG - HTTP requesting POST https://plex.tv/devices/024e9917f57a9ca19be2cd500bd515ce0b9b66b4/certificate?version=2&X-Plex-Token=xxxxxxxxxxxxxxxxxxxx
Oct 05, 2020 20:28:56.064 [0x7fcd0fa23700] DEBUG - HTTP 200 response from GET https://plex.tv/media/providers?X-Plex-Token=xxxxxxxxxxxxxxxxxxxx
Oct 05, 2020 20:28:56.078 [0x7fccc7d11700] DEBUG - HTTP 422 response from POST https://plex.tv/servers.xml?auth_token=xxxxxxxxxxxxxxxxxxxx
Oct 05, 2020 20:28:56.079 [0x7fccc7d11700] DEBUG - MyPlex: Published Mapping State response was 422
Oct 05, 2020 20:28:56.079 [0x7fccc7d11700] DEBUG - MyPlex: Got response for 024e9917f57a9ca19be2cd500bd515ce0b9b66b4 ~ registered :0
Oct 05, 2020 20:28:56.079 [0x7fccc7d11700] DEBUG - MyPlex: updating mapped state - current state: ‘Unknown’
Oct 05, 2020 20:28:56.079 [0x7fccc7d11700] DEBUG - MyPlex: mapping state set to ‘Mapped - Publishing’.
Oct 05, 2020 20:28:56.079 [0x7fccc7d11700] WARN - MyPlex: attempted a reachability check but we’re not yet online.
Oct 05, 2020 20:28:56.449 [0x7fcd0e5a1700] DEBUG - HTTP 404 response from POST https://plex.tv/devices/024e9917f57a9ca19be2cd500bd515ce0b9b66b4/certificate?version=2&X-Plex-Token=xxxxxxxxxxxxxxxxxxxx
Oct 05, 2020 20:28:56.450 [0x7fcd0e5a1700] ERROR - CERT: Could not fetch certificate from the cloud: 404
The symptoms are correct “404” and “Could not fetch” (as being focused in the main thread about this).
I have reset your certificate.
You may restart
Thank you @ChuckPa! It looks the issue has been resolved and Remote Access is working once again.
Hi I am experiencing the same symptoms described by others in the same time frame. Can you reset my certificate as well please? Server is now shut down.
