SSL Certificate Errors

Plex Media Server
,
319

Hello all
@ChuckPa could you also reset my cert please? After you reset I just need to restart the server?

When I try to play anything in samsung or LG it doesn’t play anything that needs to be transcoded ( due to codecs ) unless I change settings to allowed unsecure connections

I did try to remove cert from cache directory and after restart pms so it would generate a new one, but issue still the same
error:

[0x7effe2143b38] DEBUG - CERT: incomplete TLS handshake from XXXXX:XXXX: sslv3 alert certificate expired

Thank you in advance

320

Hi can you please restart my server as well, i’m having the same error on rasp plex connection
CERT: incomplete TLS handshake from [::ffff:xxx.xxx.x.xxx]:38722: sslv3 alert certificate expired

321

Hey @ChuckPa please reset on mine as well, if that’s a solution. Nothing has changed on my end, would appreciate it. Will reboot ever few hours.

322

@tavo4464

I cannot restart your server. I don’t have that level of access.

The most I can do is reset your certificate at Plex.tv

Regarding RasPlex – Read above. A solution to the expired RasPlex certificate as been found.

ALSO,

I hear someone recompiled RasPlex and updated its certificate to resolve the problem properly.

New binary available at the RasPlex github.

323

RASPLEX USERS

324

@tavo4464

I apologize. I misread. I have reset your certificate as well as removed the old servers from years back from your account.

Please restart your server.

325

Hello @ChuckPa , if I am getting the following error only from certain devices such as MacOS Chrome web app and Playstation Plex app, but it’s working fine on PC Chrome web app and iOS Plex app, would a “certificate reset” fix the problem? Please advise. Thank you.

CERT: incomplete TLS handshake: sslv3 alert certificate unknown

326

Hi, could you please reset my certificate too? Thanks!

327

@iceton

Your certificate is new and does not need resetting:

CREATED: Sat, 02 Oct 2021 21:36:17 +0000

You are running PMS 1.21.0.3711-B509CC236 and really should consider updating to current.

By doing so you’ll get a lot of bug fixes, the new agents, the faster and smaller server code and some new features.

328

@edibleDuc

Your certificate is new and does not need resetting.

CREATED: Sat, 02 Oct 2021 20:11:40 +0000

If you’ve not restarted the host since that time, I suggest you retry.
If you have, then the device apps might need reinstall.

I am seeing several cases where Apple products are not accepting the valid certificates.

If you look above, one user shows where Safari is clearly reporting incorrectly.

329

Hello @ChuckPa,

My Rasplex cannot connect to my plex server unless I set Secure Connections to Disabled.

I see a lot this entry in the log.

CERT: incomplete TLS handshake from “IP ADDRESS”: sslv3 alert certificate expired.

Could you please reset the certs on both of my plex servers.

Thank you very much.

330

Thanks for your prompt @ChuckPa ! I have already tried restarting the host several times before I reached out, hoping that will somehow fix itself. :slightly_smiling_face: Too bad it didn’t work.

Let me try reinstalling the Playstation app.

When you say ‘Apple products’, does it include Chrome browser on Mac OSX because both Chrome and Safari didn’t work? But Chrome on PC (Windows 10) works fine so far (knock on wood). :thinking:

331

I’m not fully understanding what this issue is. Isn’t the sslv3 cert given out by Plex to servers and/or clients? If it’s an expired issue then renewing it should fix it right? Does the Samsung firmware need updating in order to get a new cert? Or is this cert from Samsung to the smart TVs and they aren’t allowing it to update?

If it is just on the Plex side which needs a renewed cert could you please reset mine as well?
Thanks in advance,

332

le même problème

333

@kumaran21

Please scroll back in this thread. The solutions to your Rasplex have already been posted above

I have reset both machines’ certificates to bring them past the Oct 1 start date.
Restart the servers.
Update the Rasplex clients

334

@Antrux

Plex’s certificate, which encrypts the traffic in the connection, relies on the actual connection the TV OS creates.

The problem here is that the TV’s certificate has expired.

Plex can only function securely if the TV, using its certificate + Plex’s certificate are current. In this case, the TV’s certificate has expired.

A rough analogy is like you driving your car. Your licence may be valid but if the vehicle registration is expired then you have a problem.

335

Getting this error too, mind if you can reset certs for me too? Thanks.

CERT: incomplete TLS handshake from [::ffff:192.168.1.196]:58872: sslv3 alert certificate expired

336

Thank you. This means I can raise hell then with Samsung for either purposefully or haphazardly creating TV software that creates a partial planned obsolescence situation. Sounds like they really don’t need new TV firmware but rather to maintain a minor service, license renewal, for existing products. Which to me and knowing about SSL certs is not a function of continued support unless the SSL cert protocol needs modified which has been around for a long time and should be working for a long time more. An analogy being a domain name’s IP changed and instead of updating the A record’s IP address they just say ‘we no longer support that TV.’

337

@doskelion

I have reset your certificate. Please restart the server.

If you are using a RasPlex player – see above for the solution (they updated its cert)

338

@Antrux

Yes, an analogy is the domain renewal came due and nobody updated it so now it’s no longer valid.

Look at the year and model of your TV and the details in the announcement from Plex. A few, but not all inclusive, list was shown.