SSL Certificate Errors

davidfr · October 28, 2021, 1:53pm

Hello - Please can i also get my cert reset, been having this issue for awhile…
thought it was plex, rebuilt the box but still have they same errors in the logs

Please let me know if you need anything else…

Oct 28, 2021 15:39:41.686 [0x1461ec558b38] Warning — [CERT] TLS connection from [::ffff:10.0.1.44]:52702 came in with unrecognized plex.direct SNI name ‘10-0-1-10.e954fdc773194ddbb710a3c67b7f5bc3.plex.direct’; using installed plex.direct cert
Oct 28, 2021 15:39:41.688 [0x1461ec57bb38] Debug — CERT: incomplete TLS handshake from [::ffff:10.0.1.44]:52702: sslv3 alert certificate unknown

Plex Media Server Logs_2021-10-28_15-47-23.zip (5.0 MB)

ChuckPa · October 28, 2021, 3:44pm

@mattrbradley

I have reset your certificate. There was a hung certificate in there from September.

Please restart your server.

@davidfr

your certificate is new. This is also the 2nd instance of a SNI problem.

I have reached out to our operations folks to assist

ChuckPa · October 28, 2021, 4:17pm

@davidfr

Restart the server. It now has a new certificate. (I have an idea what’s happening)

davidfr · October 28, 2021, 4:47pm

Thanks Chuck,

but i seem to still have the same issue… Also no external access is currently working only local.

[CERT] TLS connection from 10.0.1.44:49948 came in with unrecognized plex.direct SNI name ‘10-0-1-10.e954fdc773194ddbb710a3c67b7f5bc3.plex.direct’; using installed plex.direct cert

CERT: incomplete TLS handshake from 10.0.1.44:49948: sslv3 alert certificate unknown
Plex Media Server Logs_2021-10-28_18-41-29.zip (1.9 MB)

ChuckPa · October 28, 2021, 4:51pm

@davidfr

what’s happening with the network adapter config?

It’s flapping like a fish out of water…

Overactive DHCP server ?

Oct 28, 2021 18:35:18.351 [0x14e53d234b38] WARN - [CERT] TLS connection from 10.0.1.10:54538 came in with unrecognized plex.direct SNI name '172-19-0-1.e954fdc773194ddbb710a3c67b7f5bc3.plex.direct'; using installed plex.direct cert
Oct 28, 2021 18:35:18.353 [0x14e53d211b38] WARN - [CERT] TLS connection from 10.0.1.10:46856 came in with unrecognized plex.direct SNI name '10-0-1-10.e954fdc773194ddbb710a3c67b7f5bc3.plex.direct'; using installed plex.direct cert
Oct 28, 2021 18:35:18.399 [0x14e53c4fcb38] ERROR - Error issuing curl_easy_perform(handle): 60
Oct 28, 2021 18:35:18.399 [0x14e53c4fcb38] WARN - HTTP error requesting GET https://172-19-0-1.e954fdc773194ddbb710a3c67b7f5bc3.plex.direct:32400 (60, SSL peer certificate or SSH remote key was not OK) (SSL: no alternative certificate subject name matches target host name '172-19-0-1.e954fdc773194ddbb710a3c67b7f5bc3.plex.direct')
Oct 28, 2021 18:35:18.400 [0x14e53c8d3b38] ERROR - Error issuing curl_easy_perform(handle): 60
Oct 28, 2021 18:35:18.400 [0x14e53c8d3b38] WARN - HTTP error requesting GET https://10-0-1-10.e954fdc773194ddbb710a3c67b7f5bc3.plex.direct:32400 (60, SSL peer certificate or SSH remote key was not OK) (SSL: no alternative certificate subject name matches target host name '10-0-1-10.e954fdc773194ddbb710a3c67b7f5bc3.plex.direct')
Oct 28, 2021 18:35:18.688 [0x14e53cb31b38] DEBUG - NetworkInterface: received Netlink message len=384, type=RTM_NEWLINK, flags=0x0
Oct 28, 2021 18:35:18.688 [0x14e53cb31b38] DEBUG - NetworkInterface: Netlink information message family=7, type=1, index=18, flags=0x11043, change=0x0
Oct 28, 2021 18:35:18.688 [0x14e53cb31b38] DEBUG - Network change.
Oct 28, 2021 18:35:18.688 [0x14e53cb31b38] DEBUG - NetworkInterface: Notified of network changed (force=0)
Oct 28, 2021 18:35:18.689 [0x14e53cb31b38] DEBUG - Network change notification but nothing changed.
Oct 28, 2021 18:35:19.422 [0x14e53cb31b38] DEBUG - NetworkInterface: received Netlink message len=608, type=RTM_DELLINK, flags=0x0
Oct 28, 2021 18:35:19.422 [0x14e53cb31b38] DEBUG - NetworkInterface: Netlink information message family=0, type=1, index=35, flags=0x1002, change=0xffffffff
Oct 28, 2021 18:35:19.435 [0x14e53cb31b38] DEBUG - NetworkInterface: received Netlink message len=384, type=RTM_NEWLINK, flags=0x0
Oct 28, 2021 18:35:19.435 [0x14e53cb31b38] DEBUG - NetworkInterface: Netlink information message family=7, type=1, index=36, flags=0x11043, change=0x0
Oct 28, 2021 18:35:19.435 [0x14e53cb31b38] DEBUG - Network change.
Oct 28, 2021 18:35:19.435 [0x14e53cb31b38] DEBUG - NetworkInterface: Notified of network changed (force=0)
Oct 28, 2021 18:35:19.436 [0x14e53cb31b38] DEBUG - Network change notification but nothing changed.
Oct 28, 2021 18:35:19.436 [0x14e53cb31b38] DEBUG - NetworkInterface: received Netlink message len=384, type=RTM_NEWLINK, flags=0x0
Oct 28, 2021 18:35:19.436 [0x14e53cb31b38] DEBUG - NetworkInterface: Netlink information message family=7, type=1, index=36, flags=0x11043, change=0x0
Oct 28, 2021 18:35:19.436 [0x14e53cb31b38] DEBUG - Network change.
Oct 28, 2021 18:35:19.436 [0x14e53cb31b38] DEBUG - NetworkInterface: Notified of network changed (force=0)
Oct 28, 2021 18:35:19.437 [0x14e53cb31b38] DEBUG - Network change notification but nothing changed.
Oct 28, 2021 18:35:19.437 [0x14e53cb31b38] DEBUG - NetworkInterface: received Netlink message len=1660, type=RTM_NEWLINK, flags=0x0
Oct 28, 2021 18:35:19.437 [0x14e53cb31b38] DEBUG - NetworkInterface: Netlink information message family=0, type=1, index=36, flags=0x11043, change=0x0
Oct 28, 2021 18:35:19.437 [0x14e53cb31b38] DEBUG - Network change.
Oct 28, 2021 18:35:19.437 [0x14e53cb31b38] DEBUG - NetworkInterface: Notified of network changed (force=0)
Oct 28, 2021 18:35:19.437 [0x14e53cb31b38] DEBUG - Network change notification but nothing changed.
Oct 28, 2021 18:35:19.711 [0x14e53cb31b38] DEBUG - NetworkInterface: received Netlink message len=384, type=RTM_NEWLINK, flags=0x0
Oct 28, 2021 18:35:19.711 [0x14e53cb31b38] DEBUG - NetworkInterface: Netlink information message family=7, type=1, index=22, flags=0x11043, change=0x0
Oct 28, 2021 18:35:19.711 [0x14e53cb31b38] DEBUG - Network change.
Oct 28, 2021 18:35:19.711 [0x14e53cb31b38] DEBUG - NetworkInterface: Notified of network changed (force=0)
Oct 28, 2021 18:35:19.712 [0x14e53cb31b38] DEBUG - Network change notification but nothing changed.
Oct 28, 2021 18:35:19.712 [0x14e53cb31b38] DEBUG - NetworkInterface: received Netlink message len=384, type=RTM_NEWLINK, flags=0x0
Oct 28, 2021 18:35:19.712 [0x14e53cb31b38] DEBUG - NetworkInterface: Netlink information message family=7, type=1, index=20, flags=0x11043, change=0x0
Oct 28, 2021 18:35:19.712 [0x14e53cb31b38] DEBUG - Network change.
Oct 28, 2021 18:35:19.712 [0x14e53cb31b38] DEBUG - NetworkInterface: Notified of network changed (force=0)
Oct 28, 2021 18:35:19.712 [0x14e53cb31b38] DEBUG - Network change notification but nothing changed.
Oct 28, 2021 18:35:20.038 [0x14e53cb31b38] DEBUG - NetworkInterface: received Netlink message len=1352, type=RTM_NEWLINK, flags=0x0
Oct 28, 2021 18:35:20.038 [0x14e53cb31b38] DEBUG - NetworkInterface: Netlink information message family=0, type=1, index=37, flags=0x1002, change=0xffffffff
Oct 28, 2021 18:35:20.038 [0x14e53cb31b38] DEBUG - Network change.
Oct 28, 2021 18:35:20.038 [0x14e53cb31b38] DEBUG - NetworkInterface: Notified of network changed (force=0)
Oct 28, 2021 18:35:20.039 [0x14e53cb31b38] DEBUG - Network change notification but nothing changed.
Oct 28, 2021 18:35:20.039 [0x14e53cb31b38] DEBUG - NetworkInterface: received Netlink message len=1352, type=RTM_NEWLINK, flags=0x0
Oct 28, 2021 18:35:20.039 [0x14e53cb31b38] DEBUG - NetworkInterface: Netlink information message family=0, type=1, index=38, flags=0x1002, change=0xffffffff
Oct 28, 2021 18:35:20.039 [0x14e53cb31b38] DEBUG - Network change.
Oct 28, 2021 18:35:20.039 [0x14e53cb31b38] DEBUG - NetworkInterface: Notified of network changed (force=0)
Oct 28, 2021 18:35:20.039 [0x14e53cb31b38] DEBUG - Network change notification but nothing changed.
Oct 28, 2021 18:35:20.039 [0x14e53cb31b38] DEBUG - NetworkInterface: received Netlink message len=1652, type=RTM_NEWLINK, flags=0x0
Oct 28, 2021 18:35:20.039 [0x14e53cb31b38] DEBUG - NetworkInterface: Netlink information message family=0, type=1, index=38, flags=0x1002, change=0x0
Oct 28, 2021 18:35:20.039 [0x14e53cb31b38] DEBUG - Network change.
Oct 28, 2021 18:35:20.039 [0x14e53cb31b38] DEBUG - NetworkInterface: Notified of network changed (force=0)
Oct 28, 2021 18:35:20.040 [0x14e53cb31b38] DEBUG - Network change notification but nothing changed.
Oct 28, 2021 18:35:20.040 [0x14e53cb31b38] DEBUG - NetworkInterface: received Netlink message len=1652, type=RTM_NEWLINK, flags=0x0
Oct 28, 2021 18:35:20.040 [0x14e53cb31b38] DEBUG - NetworkInterface: Netlink information message family=0, type=1, index=38, flags=0x1002, change=0x100
Oct 28, 2021 18:35:20.040 [0x14e53cb31b38] DEBUG - Network change.
Oct 28, 2021 18:35:20.040 [0x14e53cb31b38] DEBUG - NetworkInterface: Notified of network changed (force=0)
Oct 28, 2021 18:35:20.040 [0x14e53cb31b38] DEBUG - Network change notification but nothing changed.
Oct 28, 2021 18:35:20.040 [0x14e53cb31b38] DEBUG - NetworkInterface: received Netlink message len=384, type=RTM_NEWLINK, flags=0x0
Oct 28, 2021 18:35:20.040 [0x14e53cb31b38] DEBUG - NetworkInterface: Netlink information message family=7, type=1, index=38, flags=0x1002, change=0x0
Oct 28, 2021 18:35:20.040 [0x14e53cb31b38] DEBUG - Network change.
Oct 28, 2021 18:35:20.040 [0x14e53cb31b38] DEBUG - NetworkInterface: Notified of network changed (force=0)
Oct 28, 2021 18:35:20.041 [0x14e53cb31b38] DEBUG - Network change notification but nothing changed.
Oct 28, 2021 18:35:20.041 [0x14e53cb31b38] DEBUG - NetworkInterface: received Netlink message len=1652, type=RTM_NEWLINK, flags=0x0
Oct 28, 2021 18:35:20.041 [0x14e53cb31b38] DEBUG - NetworkInterface: Netlink information message family=0, type=1, index=38, flags=0x1043, change=0x1
Oct 28, 2021 18:35:20.041 [0x14e53cb31b38] DEBUG - Network change.
Oct 28, 2021 18:35:20.041 [0x14e53cb31b38] DEBUG - NetworkInterface: Notified of network changed (force=0)
Oct 28, 2021 18:35:20.041 [0x14e53cb31b38] DEBUG - Network change notification but nothing changed.
Oct 28, 2021 18:35:20.041 [0x14e53cb31b38] DEBUG - NetworkInterface: received Netlink message len=384, type=RTM_NEWLINK, flags=0x0
Oct 28, 2021 18:35:20.041 [0x14e53cb31b38] DEBUG - NetworkInterface: Netlink information message family=7, type=1, index=38, flags=0x1043, change=0x0
Oct 28, 2021 18:35:20.041 [0x14e53cb31b38] DEBUG - Network change.
Oct 28, 2021 18:35:20.041 [0x14e53cb31b38] DEBUG - NetworkInterface: Notified of network changed (force=0)
Oct 28, 2021 18:35:20.041 [0x14e53cb31b38] DEBUG - Network change notification but nothing changed.
Oct 28, 2021 18:35:20.041 [0x14e53cb31b38] DEBUG - NetworkInterface: received Netlink message len=384, type=RTM_NEWLINK, flags=0x0
Oct 28, 2021 18:35:20.041 [0x14e53cb31b38] DEBUG - NetworkInterface: Netlink information message family=7, type=1, index=38, flags=0x1043, change=0x0
Oct 28, 2021 18:35:20.041 [0x14e53cb31b38] DEBUG - Network change.
Oct 28, 2021 18:35:20.041 [0x14e53cb31b38] DEBUG - NetworkInterface: Notified of network changed (force=0)
Oct 28, 2021 18:35:20.042 [0x14e53cb31b38] DEBUG - Network change notification but nothing changed.
Oct 28, 2021 18:35:20.240 [0x14e53c757b38] DEBUG - Request: [127.0.0.1:51048 (Loopback)] GET /identity (2 live) Signed-in
Oct 28, 2021 18:35:20.240 [0x14e53d211b38] DEBUG - Completed: [127.0.0.1:51048] 200 GET /identity (2 live) 0ms 398 bytes (pipelined: 1)
Oct 28, 2021 18:35:20.310 [0x14e53cb31b38] DEBUG - NetworkInterface: received Netlink message len=608, type=RTM_DELLINK, flags=0x0
Oct 28, 2021 18:35:20.310 [0x14e53cb31b38] DEBUG - NetworkInterface: Netlink information message family=0, type=1, index=37, flags=0x1002, change=0xffffffff
Oct 28, 2021 18:35:20.325 [0x14e53cb31b38] DEBUG - NetworkInterface: received Netlink message len=384, type=RTM_NEWLINK, flags=0x0

The link is going up and down so much PMS can’t get started right.

ALSO, Do you have your own certificate in use?
This is indicative of one. (Curl error 60)

Oct 28, 2021 18:35:18.399 [0x14e53c4fcb38] ERROR - Error issuing curl_easy_perform(handle): 60
Oct 28, 2021 18:35:18.399 [0x14e53c4fcb38] WARN - HTTP error requesting GET https://172-19-0-1.e954fdc773194ddbb710a3c67b7f5bc3.plex.direct:32400 (60, SSL peer certificate or SSH remote key was not OK) (SSL: no alternative certificate subject name matches target host name '172-19-0-1.e954fdc773194ddbb710a3c67b7f5bc3.plex.direct')
Oct 28, 2021 18:35:18.400 [0x14e53c8d3b38] ERROR - Error issuing curl_easy_perform(handle): 60
Oct 28, 2021 18:35:18.400 [0x14e53c8d3b38] WARN - HTTP error requesting GET https://10-0-1-10.e954fdc773194ddbb710a3c67b7f5bc3.plex.direct:32400 (60, SSL peer certificate or SSH remote key was not OK) (SSL: no alternative certificate subject name matches target host name '10-0-1-10.e954fdc773194ddbb710a3c67b7f5bc3.plex.direct')

davidfr · October 28, 2021, 5:09pm

@ChuckPa

Ok so i have now set it to one network, this is running on unraid in a docker so assuming it could see all attached networks.

I have only been using self assign certs, i have not created any of my own…

Bit of an explanation, this morning i work up to a completed dead PMS i tried everything i knew to get it working which did not work :), so I pull down a fresh container and setup plex again.

once it was setup i copied over the plex DBs to the new server so all watch movies etc would go back to how it was…

after this no one external has been able to connect even though plex stats that eternal access is open…
Before this though i was having issue’s where i had to change users apps to connect insecurely or it would not pick up my server. assuming this is were the cert plays the part here ?

At the moment everything locally is working with no issues…

The only time i have every seen that other cert is in overseerr, which i have now stopped to see of that helps…
Plex Media Server Logs_2021-10-28_19-01-24.zip (514.9 KB)

thobre · October 28, 2021, 8:03pm

Hi @ChuckPa ,

Would it be possible to reset the certificate of my server please?

Thanks a lot

ChuckPa · October 28, 2021, 8:32pm

@thobre

May I see the DEBUG logs ZIP file which you download about 2 minutes after Plex restarts?

The logs you see in the Alerts don’t tell enough information.

PS: Your certificate is new & valid. Has the server been restarted since 08h GMT?

	Valid	Thu, 28 Oct 2021 08:34:09 +0000	Thu, 28 Oct 2021 08:34:43 +0000

thobre · October 28, 2021, 9:31pm

@ChuckPa
Plex Media Server Logs_2021-10-28_14-27-28.zip (2.0 MB)
Thank you for your feedback.

Yes the server has been restarted.
Here is the log file.

ChuckPa · October 28, 2021, 10:28pm

@thobre

Thank you!

Your certificate is now OK

Oct 28, 2021 12:31:33.081 [0x154823c94100] DEBUG - Running migrations. (EPG 0)
Oct 28, 2021 12:31:33.435 [0x154823c94100] DEBUG - [CERT] Installed certificate with fingerprint 5d:1f:b4:9d:c8:7a:95:cb:d3:f3:e4:20:ab:bd:57:62:ba:09:65:1f.
Oct 28, 2021 12:31:33.435 [0x154823c94100] DEBUG - [CERT] Installed new private key.
Oct 28, 2021 12:31:33.435 [0x154823c94100] DEBUG - [CERT] Subject name is /CN=*.020ec608ac2c431a963bf28f9d42b26a.plex.direct
Oct 28, 2021 12:31:33.437 [0x154823c94100] DEBUG - [CERT/OCSP] Stapling requests will be made to 'http://r3.o.lencr.org/'.
Oct 28, 2021 12:31:33.473 [0x154823c94100] INFO - [CERT/OCSP] No relevant response in cache.
Oct 28, 2021 12:31:33.473 [0x154823c94100] INFO - [CERT/OCSP] Couldn't install the cached response; fetching from network.
Oct 28, 2021 12:31:33.473 [0x154823c94100] DEBUG - [CERT] Installed intermediate certificate.
Oct 28, 2021 12:31:33.473 [0x154823c94100] DEBUG - HttpServer: Listening on IPv6 as well as IPv4.

HOWEVER — it then comes back with:

28, 2021 12:31:48.355 [0x1548209c2700] DEBUG - Subscription: There are 0 active grabs at the end.
Oct 28, 2021 12:31:48.355 [0x1548209c2700] DEBUG - Activity: Ended activity 74e1ee6c-b965-457b-9505-f5766dc3b704.
Oct 28, 2021 12:31:48.355 [0x1548209c2700] DEBUG - Subscription: Refreshed all content in 1 ms.
Oct 28, 2021 12:31:48.674 [0x154813fff700] DEBUG - HTTP requesting GET https://plex.tv/api/resources.xml?includeHttps=1&includeRelay=1&auth_token=xxxxxxxxxxxxxxxxxxxx
Oct 28, 2021 12:31:48.864 [0x154813fff700] DEBUG - HTTP 200 response from GET https://plex.tv/api/resources.xml?includeHttps=1&includeRelay=1&auth_token=xxxxxxxxxxxxxxxxxxxx
Oct 28, 2021 12:31:48.865 [0x1548135fa700] DEBUG - Connection Tester: Testing the server TX200 with 0 URLs.
Oct 28, 2021 12:31:49.038 [0x154820e45700] DEBUG - CERT: incomplete TLS handshake: stream truncated
Oct 28, 2021 12:31:49.070 [0x154820c44700] DEBUG - CERT: incomplete TLS handshake: stream truncated
Oct 28, 2021 12:31:49.098 [0x154820e45700] WARN - [CERT] TLS connection came in with unrecognized plex.direct SNI name '86-212-27-26.020ec608ac2c431a963bf28f9d42b26a.plex.direct'; using installed plex.direct cert
Oct 28, 2021 12:31:49.102 [0x154820c44700] WARN - [CERT] TLS connection came in with unrecognized plex.direct SNI name '192-168-70-10.020ec608ac2c431a963bf28f9d42b26a.plex.direct'; using installed plex.direct cert
Oct 28, 2021 12:31:49.102 [0x154820e45700] WARN - [CERT] TLS connection came in with unrecognized plex.direct SNI name '192-168-70-10.020ec608ac2c431a963bf28f9d42b26a.plex.direct'; using installed plex.direct cert
Oct 28, 2021 12:31:49.108 [0x154820e45700] DEBUG - CERT: incomplete TLS handshake: stream truncated
Oct 28, 2021 12:31:49.116 [0x154820e45700] DEBUG - CERT: incomplete TLS handshake: stream truncated
Oct 28, 2021 12:31:49.121 [0x154820e45700] DEBUG - CERT: incomplete TLS handshake: stream truncated
Oct 28, 2021 12:31:49.123 [0x154820e45700] DEBUG - CERT: incomplete TLS handshake: stream truncated
Oct 28, 2021 12:31:49.126 [0x154820e45700] DEBUG - CERT: incomplete TLS handshake: stream truncated
Oct 28, 2021 12:31:49.137 [0x154820c44700] DEBUG - CERT: incomplete TLS handshake: stream truncated
Oct 28, 2021 12:31:50.075 [0x154812df6700] DEBUG - NetworkServiceBrowser: Parsing SSDP schema for http://192.168.70.107:49152/description.xml
Oct 28, 2021 12:31:50.076 [0x154812df6700] DEBUG - HTTP requesting GET http://192.168.70.107:49152/description.xml

The certificate is getting lost / not written to disk.

I don’t know where your /config is being stored but the container’s UID/GID does not have permission / cannot lock the files.

Is the container storage on the host or over the LAN on a network connection?

Network storage cannot be used for PMS internal storage because none of the file sharing protocols enforce file locking to the level needed by PMS.

davidfr · October 29, 2021, 6:09am

@ChuckPa, thank you for you help so far…

i have found the issue why people cannot connect externally and that has been fixed but im still getting the cert issues in the logs…

[CERT] TLS connection from 10.0.1.44:55830 came in with unrecognized plex.direct SNI name ‘10-0-1-10.e954fdc773194ddbb710a3c67b7f5bc3.plex.direct’; using installed plex.direct cert

CERT: incomplete TLS handshake from 10.0.1.44:55844: sslv3 alert certificate unknownPlex Media Server Logs_2021-10-29_08-03-21.zip (1.2 MB)

Thanks

ChuckPa · October 29, 2021, 6:43am

I have a theory…

We know your certificate is valid.

Oct 28, 2021 19:00:55.539 [0x14a759c8d6e8] DEBUG - Opening 2 database sessions to library (com.plexapp.plugins.library.blobs), SQLite 3.35.5, threadsafe=1
Oct 28, 2021 19:00:55.546 [0x14a759c8d6e8] DEBUG - Running migrations. (EPG 0)
Oct 28, 2021 19:00:55.557 [0x14a759c8d6e8] DEBUG - [CERT] Subject name is /CN=*.f1d792dfbd5c4505bebd5967a37d6c22.plex.direct
Oct 28, 2021 19:00:55.557 [0x14a759c8d6e8] DEBUG - [CERT] Installed certificate with fingerprint d7:77:b3:f8:36:1c:ab:88:83:66:3e:e4:a1:bc:eb:ee:a4:8d:47:8b.
Oct 28, 2021 19:00:55.557 [0x14a759c8d6e8] DEBUG - [CERT/OCSP] Stapling requests will be made to 'http://r3.o.lencr.org/'.
Oct 28, 2021 19:00:55.558 [0x14a759c8d6e8] INFO - [CERT/OCSP] Successfully retrieved response from cache.
Oct 28, 2021 19:00:55.558 [0x14a759c8d6e8] DEBUG - HttpServer: Listening on port 32400.
Oct 28, 2021 19:00:55.558 [0x14a759c8d6e8] DEBUG - HttpServer: Listening on port 32401.

We know your server is at IP address 10.0.1.10

Oct 28, 2021 19:00:56.693 [0x14a759c8d6e8] DEBUG - Detected primary interface: 10.0.1.10
Oct 28, 2021 19:00:56.693 [0x14a759c8d6e8] DEBUG - Network interfaces:
Oct 28, 2021 19:00:56.693 [0x14a759c8d6e8] DEBUG -  * 1 lo (127.0.0.1) (loopback: 1)
Oct 28, 2021 19:00:56.693 [0x14a759c8d6e8] DEBUG -  * 9 br0 (10.0.1.10) (loopback: 0)
Oct 28, 2021 19:00:56.693 [0x14a759c8d6e8] DEBUG -  * 10 br-54927e62ee55 (172.19.0.1) (loopback: 0)
Oct 28, 2021 19:00:56.693 [0x14a759c8d6e8] DEBUG -  * 11 docker0 (172.17.0.1) (loopback: 0)
Oct 28, 2021 19:00:56.693 [0x14a759c8d6e8] DEBUG -  * 13 virbr0 (192.168.122.1) (loopback: 0)
Oct 28, 2021 19:00:56.693 [0x14a759c8d6e8] DEBUG - Creating NetworkServices singleton.

The device at 10.0.1.44 comes in, validates correctly as you.

Oct 28, 2021 19:00:56.695 [0x14a754cb1b38] DEBUG - Request: [10.0.1.44:50387 (Allowed Network (Subnet))] GET /media/providers (7 live) GZIP Signed-in Token (davidfr)
Oct 28, 2021 19:00:56.700 [0x14a754bf5b38] DEBUG - Request: [127.0.0.1:34510 (Loopback)] GET /servers (7 live) GZIP Signed-in Token (davidfr)
Oct 28, 2021 19:00:56.701 [0x14a754bb0b38] DEBUG - Request: [10.0.1.44:50388 (Allowed Network (Subnet))] GET /media/providers (7 live) TLS GZIP Signed-in Token (davidfr)
Oct 28, 2021 19:00:56.703 [0x14a754b46b38] DEBUG - Request: [172.17.0.3:40644 (WAN)] GET /:/websockets/notifications (7 live) TLS Signed-in Token (davidfr)
Oct 28, 2021 19:00:56.717 [0x14a754d1eb38] DEBUG - [com.plexapp.system] Sending command over HTTP (GET): /:/plugins/com.plexapp.system/messaging/function/X0J1bmRsZVNlcnZpY2U6QWxsU2VydmljZXM_/Y2VyZWFsMQoxCmxpc3QKMApyMAo_/Y2VyZWFsMQoxCmRpY3QKMApyMAo_

Less than 2 seconds later it comes in but is using an invalid certificate / attempting to access directly via the plex.direct URL – which is not allowed.

Oct 28, 2021 19:00:58.335 [0x14a7556c6b38] DEBUG - [Notify] Now watching "/Media/Series/The Walking Dead"
Oct 28, 2021 19:00:58.335 [0x14a755675b38] WARN - [CERT] TLS connection from 10.0.1.44:50399 came in with unrecognized plex.direct SNI name '10-0-1-10.e954fdc773194ddbb710a3c67b7f5bc3.plex.direct'; using installed plex.direct cert
Oct 28, 2021 19:00:58.335 [0x14a7556c6b38] DEBUG - [Notify] Now watching "/Media/Series/The Walking Dead/Season 1"

What is accessing Plex through the plex.direct URL which isn’t a plex client ?

What is this?

This access should not be used unless it’s an official Plex client. You only want the normal LAN IP

Even if it did work, it will change every time your certificate changes because the UUID code UUID.plex.direct changes.

xzoursx · October 29, 2021, 7:31am

Hello,

Again another error :

Could you fix it please ?

davidfr · October 29, 2021, 7:33am

Thanks @ChuckPa

10.0.1.44 is my VM that that i use at home… Could this be the chrome browser maybe flush cookies etc… ? let me try that…

I’m not sure how that other plex.drecit got setup as it asks for an IP address which right now wont accept it… that application is called overseerr (https://overseerr.dev/) if that error in plex is coming from this and is not from a plex issue, im sure i can sort it out or reinstall the application…

thanks

davidfr · October 29, 2021, 9:16am

@ChuckPa,

looks like all is sorted now, the only thing i have left in my logs is

[CERT] TLS connection from 10.0.1.44:51320 came in with unrecognized plex.direct SNI name ‘10-0-1-10.e954fdc773194ddbb710a3c67b7f5bc3.plex.direct’; using installed plex.direct cert

not sure what to do with this…

but thank you very much for you help all the best…

ChuckPa · October 29, 2021, 12:50pm

@davidfr

There is something with that other app.

If evertyhing is working, except for that log entry?? I’d ignore it.

xzoursx · October 29, 2021, 3:29pm

Hello,

Again a problem,
Could you fix it please ?

ChuckPa · October 29, 2021, 3:44pm

@xzoursx

Your certificate is fine.

Valid	Wed, 13 Oct 2021 12:55:54 +0000	Wed, 13 Oct 2021 12:56:22 +0000

I need logfiles which capture this to diagnose further.

octplane · October 30, 2021, 10:38am

Hello @ChuckPa , you seem to be the local deity here

I’m trying to fix Plex access for my NAS server that is no longer working from some clients (Fire TV, iOS browsers), but still works elsewhere (Plex iOS app, macOS Browsers). I see these logs on my server when I refresh Safari on my phone:

Oct 30, 2021 12:34:30.379 [0x7f2af5e7c700] DEBUG - CERT: incomplete TLS handshake: short read
Oct 30, 2021 12:34:30.413 [0x7f2af5b8e700] DEBUG - CERT: incomplete TLS handshake: short read
Oct 30, 2021 12:34:43.810 [0x7f2af5b8e700] DEBUG - CERT: incomplete TLS handshake: short read
Oct 30, 2021 12:34:43.836 [0x7f2af5b8e700] DEBUG - CERT: incomplete TLS handshake: short read
Oct 30, 2021 12:34:45.973 [0x7f2af5e7c700] DEBUG - CERT: incomplete TLS handshake: short read
Oct 30, 2021 12:34:46.020 [0x7f2af5b8e700] DEBUG - CERT: incomplete TLS handshake: short read
Oct 30, 2021 12:34:55.189 [0x7f2af5e7c700] DEBUG - CERT: incomplete TLS handshake: short read

So I think this might be related to this certificate thread…

Thanks for your time!

D-Robert · October 30, 2021, 3:07pm

Hello @ChuckPa,

I also have an issue with the certificate issue, from my Rasbplex client, how can I resolve the issue?

Oct 30, 2021 16:31:18.779 [0x7f1e3d57db38] DEBUG - CERT: incomplete TLS handshake from [::ffff:192.168.1.101]:45290: sslv3 alert certificate expired
Oct 30, 2021 16:31:18.783 [0x7f1e3d5a0b38] DEBUG - CERT: incomplete TLS handshake from [::ffff:192.168.1.101]:45292: sslv3 alert certificate expired
Oct 30, 2021 16:31:19.175 [0x7f1e3d57db38] DEBUG - CERT: incomplete TLS handshake from [::ffff:192.168.1.101]:45298: sslv3 alert certificate expired
Oct 30, 2021 16:31:19.337 [0x7f1e3d5a0b38] DEBUG - CERT: incomplete TLS handshake from [::ffff:192.168.1.101]:45300: sslv3 alert certificate expired
Oct 30, 2021 16:31:24.060 [0x7f1e3d5a0b38] DEBUG - CERT: incomplete TLS handshake from [::ffff:192.168.1.101]:45318: sslv3 alert certificate expired
Oct 30, 2021 16:31:24.259 [0x7f1e3d57db38] DEBUG - CERT: incomplete TLS handshake from [::ffff:192.168.1.101]:45320: sslv3 alert certificate expired

Thank you,
Robert

Topic		Replies	Views
Plex Employee to Reset Server Certificate? "API rate limit exceeded" error Desktops & Laptops server-windows	521	8443	November 1, 2023
Plex Certificate "404" -- Unable to obtain Certificate from cloud Plex Media Server	485	2261	April 22, 2021
Plex remote access issues - cannot connect securely Remote Access server-unraid	335	2262	December 20, 2025
Secure connection not working after last update Remote Access server-linux	149	3644	June 7, 2021
I cannot access my server with a browser but i can with the Plex app Remote Access server-mac , plex-web	278	8256	May 31, 2022

SSL Certificate Errors

Related topics