SSL Certificate Errors

Does OpenPHT need to be recompiled with new certs or just replace the PEM file? There is a “cacert.pem” file in the “system” subfolder.

Thanks - this fixed the issue.

May have also been the team fixing the server side certificate your end.

Done :slight_smile:

can you reset my certificate?

@kylestubbs1707_gmail.com

Cert reset, please restart the server

OpenPHT works now after I have replaced the PEM file and set the secure connections back to preferred (Network > Secure connections > Preferred).

See the thread here:

PEM file:

https://nzbget.net/info/cacert.pem

Can you reset mine please?

no joy :frowning:

Remote play on PS4 wont work

@kylestubbs1707_gmail.com

You restart the PS4 ? (so it doesn’t try to use a cached cert)

@andypayne87

I’ve reset your cert. You had 3 VALID certs in there from today. Something else is up with your local. Keep an eye open please.

Restart the server

Have disabled secure connections, still cannot access remotely with any device, or locally with any IOS device. Success with Local TV (LG OLED CX) and iMac if addressing with local IP 192.168.x.x, otherwise server shows as offline.

Have rebooted server twice each day since Sept 30, including 10min ago.

Please advise.

  {
    "type": "log:message",
    "level": 1,
    "message": "[Connections] [Loopback] is unavailable at http://127.0.0.1:32400/media/providers (Status 0)",
    "time": "2021-10-01T21:55:14.901Z"
  },
  {
    "type": "log:message",
    "level": 1,
    "message": "[Connections] [Loopback] is unavailable at http://127.0.0.1:32400/media/providers (Status 0)",
    "time": "2021-10-01T21:55:14.902Z"
  },
  {
    "type": "log:message",
    "level": 1,
    "message": "[Connections] All connections to [Loopback] failed",
    "time": "2021-10-01T21:55:14.903Z"
  },
  {
    "type": "log:message",
    "level": 4,
    "message": "[Servers] Found all servers = Bragi, plex.tv",
    "time": "2021-10-01T21:55:14.903Z"
  },
  {
    "type": "ajax",
    "url": "http://127.0.0.1:32400?X-Plex-Product=Plex%20Web&X-Plex-Version=4.12.3&X-Plex-Client-Identifier=7t6u6tq7p58vmw8bnymh4n5l&X-Plex-Platform=Chrome&X-Plex-Platform-Version=94.0&X-Plex-Sync-Version=2&X-Plex-Features=external-media%2Cindirect-media&X-Plex-Model=bundled&X-Plex-Device=OSX&X-Plex-Device-Name=Chrome&X-Plex-Device-Screen-Resolution=2560x1361%2C2560x1440&X-Plex-Language=en",
    "status": 0,
    "headers": {
      "Accept-Language": "en",
      "Accept": "application/json"
    },
    "statusText": "error",
    "time": "2021-10-01T21:55:14.905Z"
  },
  {
    "type": "log:message",
    "level": 4,
    "message": "[Connections] Testing all 1 connection(s) for iMac",
    "time": "2021-10-01T21:55:18.309Z"
  },
  {
    "type": "log:message",
    "level": 4,
    "message": "[Servers] Found all servers = Bragi, plex.tv",
    "time": "2021-10-01T21:55:18.309Z"
  },
  {
    "type": "log:message",
    "level": 4,
    "message": "[Commands] Executing testServerConnection",
    "time": "2021-10-01T21:55:18.311Z"
  },
  {
    "type": "log:message",
    "level": 4,
    "message": "[Connections] Testing connection for iMac at http://127.0.0.1:32400/media/providers",
    "time": "2021-10-01T21:55:18.311Z"
  },
  {
    "type": "log:message",
    "level": 4,
    "message": "[Connections] Retrying connection tests for iMac in 30 seconds",
    "time": "2021-10-01T21:55:18.314Z"
  },
  {
    "type": "log:message",
    "level": 1,
    "message": "[Connections] iMac is unavailable at http://127.0.0.1:32400/media/providers (Status 0)",
    "time": "2021-10-01T21:55:18.318Z"
  },
  {
    "type": "log:message",
    "level": 1,
    "message": "[Connections] All connections to iMac failed",
    "time": "2021-10-01T21:55:18.320Z"
  },
  {
    "type": "log:message",
    "level": 4,
    "message": "[Servers] Found all servers = Bragi, plex.tv",
    "time": "2021-10-01T21:55:18.320Z"
  },
  {
    "type": "ajax",
    "url": "http://127.0.0.1:32400/media/providers?X-Plex-Product=Plex%20Web&X-Plex-Version=4.12.3&X-Plex-Client-Identifier=7t6u6tq7p58vmw8bnymh4n5l&X-Plex-Platform=Chrome&X-Plex-Platform-Version=94.0&X-Plex-Sync-Version=2&X-Plex-Features=external-media%2Cindirect-media&X-Plex-Model=bundled&X-Plex-Device=OSX&X-Plex-Device-Name=Chrome&X-Plex-Device-Screen-Resolution=2560x1361%2C2560x1440&X-Plex-Token=TOKEN-U1gb-o&X-Plex-Language=en",
    "status": 0,
    "headers": {
      "Accept-Language": "en",
      "Accept": "application/json"
    },
    "statusText": "error",
    "time": "2021-10-01T21:55:18.321Z"
  }
]

MODERATOR EDIT: Logs need <code> formatting.

@Pitamandan

   "message": "[Connections] All connections to [Loopback] failed"

That’s the device giving you bad news. It can’t even talk to itself.
Nothing that I even know how to do here in the servers side.

Have you searched in the client side threads?

Im not sure what that means.
I have been having issues with freenas plugins updating to the latest version so i have just installed a fresh server instance in a freenas jail. now running latest version, but still no luck with rasplex when logged in.

@andypayne87

In this thread, they’ve shown a means by which you can update the Rasplex certificate

-or-

you can run with it all turned off.

As for the server, I was instructing you to restart it so it could get a new certificate because I reset yours as requested.

Ok i have found a fix that works for me:

Leave the server as is, leave secure connection as “preferred”

Add the local network address to the list of allowed networks without auth. (E.g. 192.168.1.0/24)

In rasplex:
Sign out
Add manual server address

Works straight away.

So i can keep my secure connections for remote and ios, etc but local rasplex can work unsecured

@dawpa2000

May you please explain how you did replace that file. I tried but since it’s in /etc/ssl and readonly, i’m not able to do so.

I am using OpenPHT on Windows, so it was pretty simple to copy and paste the PEM file in “%ProgramFiles%\OpenPHT\system”.

If you are using RasPlex, you should read this thread here:

@ChuckPa

Could you please check the certs for me as well? I’m seeing multiple errors in my logs:

DEBUG - CERT: incomplete TLS handshake from 46.51.207.89:55618: sslv3 alert certificate expired

Thank you for all the work you guys are doing!

@A-Aron_Hanson

Jarvis :white_check_mark:

Restart the server

@ChuckPa could you reset mine please? Tplex. :wink: Thanks!

@johnclayton

Done. Restart when ready

1 Like

11 posts were split to a new topic: SSL Certificate Reset - Difficult Cases