# Some SSL error with custom certificate

**URL:** <https://forums.plex.tv/t/some-ssl-error-with-custom-certificate/856932>\
**Category:** General Discussions\
**Tags:** server-linux\
**Created:** [October 17, 2023, 4:34pm UTC](https://forums.plex.tv/t/some-ssl-error-with-custom-certificate/856932 "2023-10-17T16:34:20Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![moyu22](https://avatars.discourse-cdn.com/v4/letter/m/e36b37/32.png) [@moyu22](https://forums.plex.tv/u/moyu22)\
**Post date:** [October 17, 2023, 4:34pm UTC](https://forums.plex.tv/t/some-ssl-error-with-custom-certificate/856932/1 "2023-10-17T16:34:20Z")

</div>

I try to gen p12 key, but some error happend

```auto
openssl pkcs12 -export -out my-fdqn-tld.p12 -in mydomain.pem -inkey mydomain.key -password pass:mypass -certpbe AES-256-CBC -keypbe AES-256-CBC -macalg SHA256

```

Use `grep -i "ssl\|cert" *.log`

```auto
Plex Media Server.log:Oct 18, 2023 00:18:37.095 [139667367430800] DEBUG - [CERT] Subject name is /CN=*.bc2fa5bbe27c46e38593e0cc845bbc59.plex.direct
Plex Media Server.log:Oct 18, 2023 00:18:37.095 [139667367430800] DEBUG - [CERT] Installed certificate with fingerprint 6c:41:95:13:23:3c:b4:5b:61:66:97:d8:41:af:0c:a1:40:b0:7a:5f.
Plex Media Server.log:Oct 18, 2023 00:18:37.095 [139667367430800] DEBUG - [CERT/OCSP] Stapling requests will be made to 'http://r3.o.lencr.org/'.
Plex Media Server.log:Oct 18, 2023 00:18:37.095 [139667367430800] INFO - [CERT/OCSP] Successfully retrieved response from cache.
Plex Media Server.log:Oct 18, 2023 00:18:37.095 [139667367430800] ERROR - [CERT] Found a user-provided certificate, but couldn't install it.
Plex Media Server.log:Oct 18, 2023 00:18:41.574 [139667256576824] DEBUG - CERT: Certificate will not expire soon; we'll check again in a week.
Plex Media Server.log:Oct 18, 2023 00:18:41.578 [139667299056440] DEBUG - [CERT] Subject name is /CN=*.bc2fa5bbe27c46e38593e0cc845bbc59.plex.direct
Plex Media Server.log:Oct 18, 2023 00:18:41.578 [139667299056440] DEBUG - [CERT] Installed certificate with fingerprint 6c:41:95:13:23:3c:b4:5b:61:66:97:d8:41:af:0c:a1:40:b0:7a:5f.
Plex Media Server.log:Oct 18, 2023 00:18:41.578 [139667299056440] DEBUG - [CERT/OCSP] Stapling requests will be made to 'http://r3.o.lencr.org/'.
Plex Media Server.log:Oct 18, 2023 00:18:41.578 [139667299056440] INFO - [CERT/OCSP] Successfully retrieved response from cache.
Plex Media Server.log:Oct 18, 2023 00:18:41.578 [139667299056440] ERROR - [CERT] Found a user-provided certificate, but couldn't install it.
Plex Media Server.log:Oct 18, 2023 00:18:42.009 [139667299056440] DEBUG - [CERT] MyPlex: Last published value didn't change, we're done.

```

The file info is:

```auto
-rw-r--r-- 1 plex plex 4.5K Oct 17 23:56 my-fdqn-tld.p12

```

PMS version is _1.32.7.7571_

---

<div class="post-metadata">

**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\
**Post date:** [October 17, 2023, 5:24pm UTC](https://forums.plex.tv/t/some-ssl-error-with-custom-certificate/856932/2 "2023-10-17T17:24:07Z")

</div>

A couple questions / points to check.

1. Have you included the CA with your cert?  
(Self-signed certs are not accepted)

2. If you are using a cert with CA. Please consider the updated SSL v3.0.0 encryption requirement.

> [@Linux Tips](https://forums.plex.tv/t/linux-tips/276247/25):
>
> OpenSSL v3.0.0 and PMS. For those using their own domains and certificates with PMS , PMS 1.32.0.6865 and above updates OpenSSL from v1.1.1 to v3.0.0 . (changed the numbering scheme in the process) The consequence of this is OpenSSL v3 removed several “less secure” encryption methods. The impact on you, if you’re using an older distributions where openssl v3 is not the default, if not already doing so, you will need pay special attention to how your certificates are generated As example,…

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/plex/original/3X/2/a/2acb9765406f63293d357b4ec509ec39aa28f2ad.png) [@system](https://forums.plex.tv/u/system)\
**Post date:** [January 15, 2024, 5:24pm UTC](https://forums.plex.tv/t/some-ssl-error-with-custom-certificate/856932/3 "2024-01-15T17:24:51Z")

</div>

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.