Some SSL error with custom certificate

General Discussions
1

I try to gen p12 key, but some error happend

openssl pkcs12 -export -out my-fdqn-tld.p12 -in mydomain.pem -inkey mydomain.key -password pass:mypass -certpbe AES-256-CBC -keypbe AES-256-CBC -macalg SHA256

Use grep -i "ssl\|cert" *.log

Plex Media Server.log:Oct 18, 2023 00:18:37.095 [139667367430800] DEBUG - [CERT] Subject name is /CN=*.bc2fa5bbe27c46e38593e0cc845bbc59.plex.direct
Plex Media Server.log:Oct 18, 2023 00:18:37.095 [139667367430800] DEBUG - [CERT] Installed certificate with fingerprint 6c:41:95:13:23:3c:b4:5b:61:66:97:d8:41:af:0c:a1:40:b0:7a:5f.
Plex Media Server.log:Oct 18, 2023 00:18:37.095 [139667367430800] DEBUG - [CERT/OCSP] Stapling requests will be made to 'http://r3.o.lencr.org/'.
Plex Media Server.log:Oct 18, 2023 00:18:37.095 [139667367430800] INFO - [CERT/OCSP] Successfully retrieved response from cache.
Plex Media Server.log:Oct 18, 2023 00:18:37.095 [139667367430800] ERROR - [CERT] Found a user-provided certificate, but couldn't install it.
Plex Media Server.log:Oct 18, 2023 00:18:41.574 [139667256576824] DEBUG - CERT: Certificate will not expire soon; we'll check again in a week.
Plex Media Server.log:Oct 18, 2023 00:18:41.578 [139667299056440] DEBUG - [CERT] Subject name is /CN=*.bc2fa5bbe27c46e38593e0cc845bbc59.plex.direct
Plex Media Server.log:Oct 18, 2023 00:18:41.578 [139667299056440] DEBUG - [CERT] Installed certificate with fingerprint 6c:41:95:13:23:3c:b4:5b:61:66:97:d8:41:af:0c:a1:40:b0:7a:5f.
Plex Media Server.log:Oct 18, 2023 00:18:41.578 [139667299056440] DEBUG - [CERT/OCSP] Stapling requests will be made to 'http://r3.o.lencr.org/'.
Plex Media Server.log:Oct 18, 2023 00:18:41.578 [139667299056440] INFO - [CERT/OCSP] Successfully retrieved response from cache.
Plex Media Server.log:Oct 18, 2023 00:18:41.578 [139667299056440] ERROR - [CERT] Found a user-provided certificate, but couldn't install it.
Plex Media Server.log:Oct 18, 2023 00:18:42.009 [139667299056440] DEBUG - [CERT] MyPlex: Last published value didn't change, we're done.

The file info is:

-rw-r--r--  1 plex plex 4.5K Oct 17 23:56 my-fdqn-tld.p12

PMS version is 1.32.7.7571

2

A couple questions / points to check.

  1. Have you included the CA with your cert?
    (Self-signed certs are not accepted)

  2. If you are using a cert with CA. Please consider the updated SSL v3.0.0 encryption requirement.

3

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.