SSL Certificate Errors

What is the “problem”, that is what I am trying to figure out. So, I can remedy it.

I don’t know. a bad SNI name (Server Name Identifiation) error implies something is mucking with the datastream (a proxy / vpn / something) which is changing values and breaking the identification tags

1 Like

Thanks, I will try to see if I find something.

Much Appreciated.

Hello, I also have the problem that several devices cannot access the server, how can I solve it?

the tv in question is: samsung UE40MU6125

Thank you!

@iPley

Your certificate is valid:

Valid Tue, 19 Oct 2021 04:21:54 +0000 Tue, 19 Oct 2021 04:22:17 +0000

Need logs to diagnose further but suspect that Samsung is one of the problem units.

I think I’m running into a similar issue that many others are having.

I’m seeing this message:

CERT: incomplete TLS handshake from [::xxxx:xxx.xxx.xxx.xxx]:60461: An existing connection was forcibly closed by the remote host

I’ve attached my logs as well. Do I need my cert reset?

Plex Media Server Logs_2021-10-21_15-23-35.zip (1.6 MB)

@trickinit

Your certificate was valid but had been generated before Sept 30.

I reset it anyway.

You may restart the server.

Thanks!

@ChuckPa Sorry for late response.
Thanks. I didn’t realize the logs didn’t get posted. I can post again if needed.

Yes it’s intermittent…and fussy. The rokus (and one firestick) weren’t fussy before Oct 1st.
When the connection is lost it seems like switching from unsecure always back to same network and then back to always and waiting a few mins helps with securing a connection again. Although still testing that out to confirm that’s a workaround fix. They never needed the unsecure connections enabled before. Seemed a bit more stable this week.

I “think” we did try reinstalling the apps.

Hi,

I’m having issues with devices / apps no longer being able to connect to my Plex server, when I check the logs I can see certificate-related issues being logged.

I see this error consistently if I start the Plex app on my phone:

Oct 23, 2021 17:30:32.162 [0x80c570200] DEBUG - CERT: incomplete TLS handshake: sslv3 alert certificate unknown

Though if I scan back a while in the logs I can also see:

Oct 23, 2021 17:29:35.194 [0x80c570700] DEBUG - CERT: incomplete TLS handshake: tlsv1 alert unknown ca

When I check the certificate on the local server address, it says:

Not Before: Sat, 23 Oct 2021 04:26:23 GMT
Not After: Fri, 21 Jan 2022 04:26:22 GMT

So it would seem to be valid, and yet the only way I can get anything to play is by turning off secure communication.

Can anyone help me, please?

@willihone

Your certificate is up to date (today)

Valid	Sat, 23 Oct 2021 05:25:49 +0000	Sat, 23 Oct 2021 05:26:24 +0000

If the device(s) experiencing the trouble are in this list , or similarly EOL, that would be the first thing to check & confirm.

Thanks for your quick response @ChuckPa.

I have a Samsung TV in my house, but I don’t use it to watch Plex (directly). The three devices / apps that no longer connnect for me are:

  1. Amazon Echo Dot
  2. Official Plex app on Android 10 mobile
  3. Official Plex app on Android TV (Shield TV)

I’ve retried the first two again this morning but still have no connectivity.

The Console still shows the first of the two errors I mentioned happening “CERT: incomplete TLS handshake: sslv3 alert certificate unknown” whenever I try to connect with my mobile (#2 above), possibly the other devices /apps do this too, but I’m not sat watching the Console at the exact time I try to use them.

(updated as I’d put my mobile down as Android 11 originally, it’s actually Android 10)

I have built a new Plex server and this can now successfully be reached by all of the devices. I’m not sure if it was related to the version of PMS I had as it was slightly older (1.18), but in any case, issue resolved… albeit at the expense of having to rebuild the server.

Hi,
For memory : “My ipad with the plex app is the only one that can’t connect on my server. It’s notice “Server offline”.”
Thanks for answer
As an attachment, the ZIP logs. Plex Media Server Logs_2021-10-24_21-12-58.zip (837.0 KB)

@Olivier94

When working with the iPad, I find it easier to uninstall the app and reinstall it.

When reinstalling, I can easily select the server I want it to attach to.

( The default server can be changed in the app without uninstalling but I find this process awkward to complete )

@ChuckPa
I have do that but it’s not working … since 20 days …

Any help? :frowning:

@Olivier94

Your server is seen by Plex.tv and shows Remote Access active.

LOCAL ADDRESSES 192.168.1.84 
PLATFORM WINDOWS 
PLATFORM VERSION 10.0 (BUILD 19043) 
VENDOR MICROSOFT

Are the iPad and server both connected to the WiFI properly?

1 Like

Yes both of them connected on the wifi …
My ipad is a Ipad mini 2 and i can’t donwload the last version. But it’s working properly before …
I have the 6.7.2 version of the app plex.

Plex media server event logs when i try to connect :

Oct 24, 2021 22:31:10.193 [4012] Débogage — WebSocket: Performing handshake from origin https://app.plex.tv
Oct 24, 2021 22:31:10.193 [4012] Débogage — Beginning read from WebSocket
Oct 24, 2021 22:31:10.253 [4012] Débogage — Request: [192.168.1.63:57977 (Subnet)] GET /activities (8 live) TLS GZIP Signed-in Token (Olivier94)
Oct 24, 2021 22:31:10.254 [12112] Débogage — Completed: [192.168.1.63:57977] 200 GET /activities (8 live) TLS GZIP 0ms 475 bytes (pipelined: 2)
Oct 24, 2021 22:31:10.896 [5528] Débogage — Completed: [192.168.1.63:57962] 200 GET /player/proxy/poll?deviceClass=pc&protocolVersion=3&protocolCapabilities=timeline%2Cplayback%2Cnavigation%2Cmirror%2Cplayqueues&timeout=1 (8 live) TLS GZIP 20012ms 5 bytes (pipelined: 7)
Oct 24, 2021 22:31:10.903 [4012] Débogage — Request: [192.168.1.63:57962 (Subnet)] GET /player/proxy/poll?deviceClass=pc&protocolVersion=3&protocolCapabilities=timeline%2Cplayback%2Cnavigation%2Cmirror%2Cplayqueues&timeout=1 (8 live) TLS GZIP Signed-in Token (Olivier94)
Oct 24, 2021 22:31:10.904 [4012] Débogage — Content-Length is -1 (of total: -1).
Oct 24, 2021 22:31:23.611 [12112] Débogage — CERT: incomplete TLS handshake from 192.168.1.92:62961: stream truncated
Oct 24, 2021 22:31:23.641 [12112] Débogage — CERT: incomplete TLS handshake from 192.168.1.92:62960: stream truncated
Oct 24, 2021 22:31:23.870 [12112] Débogage — CERT: incomplete TLS handshake from 192.168.1.92:62969: stream truncated
Oct 24, 2021 22:31:23.977 [12112] Débogage — CERT: incomplete TLS handshake from 192.168.1.92:62964: stream truncated
Oct 24, 2021 22:31:23.998 [12112] Débogage — CERT: incomplete TLS handshake from 192.168.1.1:62968: stream truncated
Oct 24, 2021 22:31:24.042 [12112] Débogage — CERT: incomplete TLS handshake from 192.168.1.1:62967: stream truncated
Oct 24, 2021 22:31:24.111 [12112] Débogage — CERT: incomplete TLS handshake from 192.168.1.92:62975: stream truncated
Oct 24, 2021 22:31:24.187 [12112] Débogage — CERT: incomplete TLS handshake from 192.168.1.92:62974: stream truncated
Oct 24, 2021 22:31:29.314 [12112] Débogage — CERT: incomplete TLS handshake from 192.168.1.92:63024: stream truncated
Oct 24, 2021 22:31:29.458 [12112] Débogage — CERT: incomplete TLS handshake from 192.168.1.92:63025: stream truncated
Oct 24, 2021 22:31:29.566 [12112] Débogage — CERT: incomplete TLS handshake from 192.168.1.1:63028: stream truncated
Oct 24, 2021 22:31:30.481 [12112] Débogage — CERT: incomplete TLS handshake from 192.168.1.1:63026: stream truncated
Oct 24, 2021 22:31:30.618 [12112] Débogage — CERT: incomplete TLS handshake from 192.168.1.92:63027: stream truncated
Oct 24, 2021 22:31:30.677 [12112] Débogage — CERT: incomplete TLS handshake from 192.168.1.92:63023: stream truncated
Oct 24, 2021 22:31:30.911 [5528] Débogage — Completed: [192.168.1.63:57962] 200 GET /player/proxy/poll?deviceClass=pc&protocolVersion=3&protocolCapabilities=timeline%2Cplayback%2Cnavigation%2Cmirror%2Cplayqueues&timeout=1 (22 live) TLS GZIP 20007ms 5 bytes (pipelined: 8)
Oct 24, 2021 22:31:30.920 [4012] Débogage — Request: [192.168.1.63:57962 (Subnet)] GET /player/proxy/poll?deviceClass=pc&protocolVersion=3&protocolCapabilities=timeline%2Cplayback%2Cnavigation%2Cmirror%2Cplayqueues&timeout=1 (18 live) TLS GZIP Signed-in Token (Olivier94)
Oct 24, 2021 22:31:30.920 [4012] Débogage — Content-Length is -1 (of total: -1).
Oct 24, 2021 22:31:31.602 [5528] Débogage — CERT: incomplete TLS handshake from 127.0.0.1:51057: stream truncated
Oct 24, 2021 22:31:32.330 [5528] Débogage — CERT: incomplete TLS handshake from 192.168.1.92:63073: stream truncated
Oct 24, 2021 22:31:32.372 [5528] Débogage — CERT: incomplete TLS handshake from 192.168.1.1:63077: stream truncated
Oct 24, 2021 22:31:32.429 [5528] Débogage — CERT: incomplete TLS handshake from 192.168.1.92:63076: stream truncated
Oct 24, 2021 22:31:32.474 [5528] Débogage — CERT: incomplete TLS handshake from 192.168.1.1:63074: stream truncated
Oct 24, 2021 22:31:32.494 [5528] Débogage — CERT: incomplete TLS handshake from 192.168.1.92:63078: stream truncated
Oct 24, 2021 22:31:32.567 [5528] Débogage — CERT: incomplete TLS handshake from 192.168.1.92:63075: stream truncated
Oct 24, 2021 22:31:50.935 [5528] Débogage — Completed: [192.168.1.63:57962] 200 GET /player/proxy/poll?deviceClass=pc&protocolVersion=3&protocolCapabilities=timeline%2Cplayback%2Cnavigation%2Cmirror%2Cplayqueues&timeout=1 (13 live) TLS GZIP 20015ms 5 bytes (pipelined: 9)
Oct 24, 2021 22:31:50.948 [4012] Débogage — Request: [192.168.1.63:57962 (Subnet)] GET /player/proxy/poll?deviceClass=pc&protocolVersion=3&protocolCapabilities=timeline%2Cplayback%2Cnavigation%2Cmirror%2Cplayqueues&timeout=1 (13 live) TLS GZIP Signed-in Token (Olivier94)
Oct 24, 2021 22:31:50.948 [4012] Débogage — Content-Length is -1 (of total: -1)