SSL Certificate Errors

Plex Media Server
,
666

Your WD is fine:

Valid	Wed, 03 Nov 2021 07:07:04 +0000	Wed, 03 Nov 2021 07:07:40 +0000

Your Mac hasn’t connected in a month and had an old certificate which I reset.

Valid	Fri, 06 Aug 2021 02:28:19 +0000	Fri, 06 Aug 2021 02:28:31 +0000
667

@ChuckPa Thanks for the assistance, but I’m still having trouble connecting to my content from and AndroidTV. is there a way for me to send you my log?

668

@nguyendk

Did you read the above announcement ?

Based on what I’ve seen, I wonder if your TV falls into that category?

If so, you’ll need to configure PMS to run without authentication on your home LAN.

It’s not difficult to do.

669

okay thanks, i’ll give this a shot!

670

To do the “without Auth” for your home LAN.

  1. Settings - Server - Network - Show Advanced,

  2. In the box for “hosts allowed without authentication”

  3. IP address,IPaddress (NO SPACES else it will fail)
    -or-

  4. LAN subnet - e.g. 192.168.0.0.24 (also NO SPACES - leading or trailing)

671

From the TV app I set it to allow insecure connection (set to always). This seems to have worked! thanks!

672

Hi ChuckPa, can you also check my server. Can no longer connect from the Plex app externally.

CERT: incomplete TLS handshake from X.X.X.X:62288: sslv3 alert certificate unknown

I have a certificate from ZeroSSL on my PMS.

Thanks

673

@Keyn28

Your cert is new

Valid	Wed, 03 Nov 2021 17:28:49 +0000	Wed, 03 Nov 2021 17:28:59 +0000

That said, are the remotes with difficulties any of those listed above in the announcement ?

674

Hey mate Ive got the same issue trying to use rasplex to connect remotely.

CERT: incomplete TLS handshake from [::ffff:58.6.248.21]:51962: sslv3 alert certificate expired

I have secure connections set to preferred on the server and also allowed

List of IP addresses and networks that are allowed without auth
58.6.248.21

Is there anything else I can do to allow it to connect. Its running latest version rasplex.

675

@Jgrov2

Rasplex machines root certificate expired.

On Github, the author generated new binaries with that root certificate updated.

The solution for Rasplex players is to update the installed software

Your server has a valid certificate. Have you restarted it recently?

	Valid	Sun, 31 Oct 2021 11:27:44 +0000	Sun, 31 Oct 2021 11:27:57 +0000
676

Yes, it is 3 LG C9 with WebOS 4.9.
That’s why I set up a certificate from ZeroSSL on the PMS. On a remote I was able to fix the problem by blocking access to *.plex.direct.

677

Thanks.

That is one way to fix it ( by getting a bigger hammer! :slight_smile: Good thinking )

678

I have the cert error aswell. Followed a work around to add ips which Do Not need to authenticate since than i can See the library but cant play anything.

679

@hypePG

If you’ve resolved the issues with the certificate for those players,

but are still having playback issues in general, Please create a fresh thread , appropriately titled, and ping me .

Thanks.

680

Hi. I seem to have this problem too. Cant connect to my plex server from my Shield or my phone. CERT: incomplete TLS handshake: sslv3 alert certificate unknown
Plex console shows this message. What to do?

681

@jaba89

Your certificate is current (not pre-Sept 30 nor expired)

Valid Fri, 08 Oct 2021 21:58:03 +0000 Fri, 08 Oct 2021 21:58:38 +0000

May I see your debug logs which show the cert message?

683

@jaba89

I don’t know BSD. What I do see is that Plex is trying to download the certificate but I don’t see where it’s being acknowledged and then used.

It’s showing where it doesn’t have anything cached – which it should.

If it can’t save the certificate then that speaks to ownership / permission for the files.

Looking at the start.sh script, I can’t tell where PMS resides or which username it runs as.

Would you be able to look that up (investigate how it is on your system),
Next make certain:

  1. All your metadata directories have permission 755
  2. All your metadata files have permission 644
  3. All files are owned by the username Plex runs as.
  4. Restart Plex
684

HI Can you please reset my certificate as well, getting the following message:

CERT: incomplete TLS handshake fr om [::ffff:10.0.0.4]:62422: sslv3 alert certificate expired

685

@BenG-1989

You had an old and a new certificate attached to your server. I reset it.

Please restart the server

686

I have restarted server and still getting the same message:

DEBUG - CERT: incomplete TLS handshake from [::ffff:10.0.0.4]:33825: sslv3 alert certificate expired