Sonos: incomplete TLS handshake: no shared cipher

Hi everyone,

Thanks for having me. I am running the following configuration:

Server Version#: 1.24.3.5033 (as docker) on Ubuntu 20.04.3 LTS (GNU/Linux 5.4.0-86-generic x86_64)
Player Version#: Sonos Connect S1

I have the same problem as mentioned in the following closed thread: https://forums.plex.tv/t/sonos-incomplete-tls-handshake-no-shared-cipher/699668/10

Sonos this week suddenly (from one day to another) stopped playing songs from the Plex media server. The strange thing is, that I am both able to search through my library from the Sonos app as well as the album cover is showing in the player. It is “just” not playing the audio. The resulting error on Plex’s side is as follows:

Sep 26, 2021 08:54:19.386: [0x7f188939fb38] DEBUG - CERT: incomplete TLS handshake from x.x.x.x:port: no shared cipher

In the above mentioned thread it was stated that the Sonos S1 controller might have issues with the certificates created by Plex. As I am using old Sonos HW, upgrading the Sonos SW to S2 is not working for me.

After the first occurrence, I did some up- and downgrades of the Plex container without any improvements.
Any idea why this is happening right now without either updating Plex or Sonos in prior?
As no other open thread was available by the time of writing this (at least I have not found it), is somebody else facing this or is there a solution I have missed?
Many thanks in advance!

Hi. I think this could be related to that now the SSL certificate is checked so turning of encryption doesn’t work anymore. The solution for me was upgrading to Sonos S2 and turning on encryption on the Plex server. It looks like now everything works for me.
Also, S2 seems to be ok by now (except you have old speakers or old phones to control your Sonos system as on our iPhone 4 that we used as remote it wasn’t possible to update to S2 if I remember well).
Regards
Petr

Thanks for the fast response.
In the old thread @johnclayton said something about a certificate change to RSA-based. So I was wondering if that was already implemented and could potentially solve the issues for S1 users.
As said, I am one of those people that still do have old speakers and cannot upgrade to S2 without breaking their whole multi room setup (having one S2 instance and one S1 with all the old speakers).

Sorry not sure if I maybe misunderstood your point: if you only want it to work local you can still turn off encryption on your plex server in the network settings I assume. The issue I had was that plex remote access stoped working like that somewhere in August. So I need to turn on encryption again which stoped the S1 access locally.

I have a Sonos account with both S1 and S2 networks associated and I’ve found Plex is able to direct playback to speakers under either version, so unless having S2 somehow makes the S1 work I doubt there is a core certificate issue. I have server 1.24.3.5033 on a QNAP NAS (Intel).

I did have an issue yesterday where the Plex Web client couldn’t drive the Sonos API (was returning HTTP error 500) but it’s working again today.

Sorry for the delay, wasn’t at home. But, oh wow… finally it is working again. Unticking the box on “Strict TLS configuration” again and restarting the container several times again did the trick. Thanks for the support!
One additional question @petr_beles_com: I am using Plex locally with my Sonos (of course over the needed remote access) but also with the Plex Android app (with remote access) anywhere I go. I do not have the remote access problems you are talking about, but will I have a big security issue with TLS disabled here?

EDIT: I was too fast with my excitement… I now do have the same problem as you → I had to set the “Secure connection” to “disabled” as it was not even working with the “preferred” solution and now the remote access (Android app and web is not working any more). It’s rather stupid, that the “preferred” option here is not working.

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.