I just restarted my server and my client. Same issue.
Your server certificate is fine.
Nov 26, 2021 22:02:49.197 [0x76438c20] DEBUG - Opening 2 database sessions to library (com.plexapp.plugins.library.blobs), SQLite 3.35.5, threadsafe=1
Nov 26, 2021 22:02:49.212 [0x76438c20] DEBUG - Running migrations. (EPG 0)
Nov 26, 2021 22:02:49.390 [0x76438c20] DEBUG - [CERT] Subject name is /CN=*.7a61c49fd0e445839ad62fd41aa77ed4.plex.direct
Nov 26, 2021 22:02:49.390 [0x76438c20] DEBUG - [CERT] Installed certificate with fingerprint 8c:c1:1f:45:c2:e7:5a:06:c6:99:f5:97:88:a7:3f:cf:24:46:6d:0f.
Nov 26, 2021 22:02:49.390 [0x76438c20] DEBUG - [CERT/OCSP] Stapling requests will be made to 'http://r3.o.lencr.org/'.
Nov 26, 2021 22:02:49.391 [0x76438c20] INFO - [CERT/OCSP] Successfully retrieved response from cache.
Nov 26, 2021 22:02:49.391 [0x76438c20] DEBUG - HttpServer: Listening on IPv6 as well as IPv4.
Restart these devices (They don’t have today’s new certificate)
Nov 26, 2021 22:04:10.878 [0x71b03d48] DEBUG - Request: [192.168.0.7:47724 (Subnet)] GET / (5 live) Signed-in (range: bytes=0-)
Nov 26, 2021 22:04:10.879 [0x71b03d48] DEBUG - Completed: [192.168.0.7:47724] 401 GET / (5 live) 0ms 371 bytes (range: bytes=0-)
Nov 26, 2021 22:04:11.690 [0x71b26d48] DEBUG - CERT: incomplete TLS handshake from [::ffff:192.168.0.7]:47726: sslv3 alert certificate expired
Nov 26, 2021 22:04:11.721 [0x71b26d48] DEBUG - CERT: incomplete TLS handshake from [::ffff:85.201.75.14]:53362: sslv3 alert certificate expired
Nov 26, 2021 22:04:12.365 [0x71b26d48] DEBUG - CERT: incomplete TLS handshake from [::ffff:192.168.0.7]:47732: sslv3 alert certificate expired
Nov 26, 2021 22:04:12.443 [0x71b26d48] DEBUG - CERT: incomplete TLS handshake from [::ffff:85.201.75.14]:53368: sslv3 alert certificate expired
Nov 26, 2021 22:04:12.526 [0x714ccd48] DEBUG - NetworkServiceBrowser: PLAYER arrived: 192.168.0.7
Nov 26, 2021 22:04:13.438 [0x71b26d48] DEBUG - CERT: incomplete TLS handshake from [::ffff:192.168.0.7]:47738: sslv3 alert certificate expired
Nov 26, 2021 22:04:13.447 [0x71b26d48] DEBUG - CERT: incomplete TLS handshake from [::ffff:85.201.75.14]:53376: sslv3 alert certificate expired
Nov 26, 2021 22:04:13.486 [0x71b26d48] DEBUG - CERT: incomplete TLS handshake from [::ffff:192.168.0.7]:47740: sslv3 alert certificate expired
Nov 26, 2021 22:04:19.103 [0x71b26d48] DEBUG - CERT: incomplete TLS handshake from [::ffff:192.168.0.7]:47748: sslv3 alert certificate expired
Nov 26, 2021 22:04:19.147 [0x71b26d48] DEBUG - CERT: incomplete TLS handshake from [::ffff:85.201.75.14]:53384: sslv3 alert certificate expired
Nov 26, 2021 22:04:19.860 [0x71b26d48] DEBUG - CERT: incomplete TLS handshake from [::ffff:192.168.0.7]:47752: sslv3 alert certificate expired
Nov 26, 2021 22:04:19.875 [0x71b26d48] DEBUG - CERT: incomplete TLS handshake from [::ffff:85.201.75.14]:53388: sslv3 alert certificate expired
Nov 26, 2021 22:04:21.534 [0x71b26d48] DEBUG - Completed: [192.168.0.9:59740] 200 GET /player/proxy/poll?deviceClass=pc&protocolVersion=3&protocolCapabilities=timeline%2Cplayback%2Cnavigation%2Cmirror%2Cplayqueues&timeout=1 (15 live) TLS GZIP 20001ms 5 bytes (pipelined: 7)
Each time I restard my Rasplex (192.168.0.7), I get the same issue.
Do I have to do something else than restart my raspberry to get the new certificate?
Did you update it. Its certificate expired September 30, 2021.
There is a software update on Github which gives it a new certificate
Are those other IPs possibly part of this ?
My server is up-to-date (running on a Synology D218J, version 1.24.5.5173-7000)
And my Rasplex seems to be up-to-date (I checked in the Settings and the version is 1.8.0.148-573b6d73, the last available on rasplex website)
“Last available” meaning “After Sept 30, 2021” ???
As a test.
-
Settings - Server - Network - Show advanced
-
In the field where you set IP addressed to allow without auth, add the rasplex IP address (be extremely careful not to have leading or trailing spaces)
-
SAVE it
-
Now try it
@ChuckPa Looks like I may be having the same issue. Let me know if you would like me to PM you unedited logs. Excerpts with external IP data removed below.
I can connect using an unsecure connection via Plex for Windows on my local machine, but app.plex.tv won’t connect on my local machine. On external networks, I can go directly to the service via [IP address:port], but the server shows as unavailable. And on my server, Remote Access will “connect”, then disconnect a few seconds later.
Nov 26, 2021 11:20:50.206 [9936] WARN - [CERT] TLS connection from [::ffff:192.168.10.8]:51139 came in with unrecognized plex.direct SNI name '***************.plex.direct'; using installed plex.direct cert
Nov 26, 2021 11:20:50.213 [9932] DEBUG - CERT: incomplete TLS handshake from [::ffff:192.168.10.8]:51139: sslv3 alert bad certificate
Nov 26, 2021 11:20:50.217 [9936] WARN - [CERT] TLS connection from [::ffff:***.***.***.***]:51141 came in with unrecognized plex.direct SNI name '**************.plex.direct'; using installed plex.direct cert
Nov 26, 2021 11:20:50.225 [9932] DEBUG - CERT: incomplete TLS handshake from [::ffff:***.***.***.***]:51141: sslv3 alert bad certificate
Nov 26, 2021 11:20:50.249 [9936] WARN - [CERT] TLS connection from 127.0.0.1:55525 came in with unrecognized plex.direct SNI name '***************.plex.direct'; using installed plex.direct cert
Nov 26, 2021 11:20:50.281 [9932] DEBUG - CERT: incomplete TLS handshake from 127.0.0.1:55525: sslv3 alert bad certificate
Nov 26, 2021 11:20:57.487 [9936] WARN - [CERT] TLS connection from [::ffff:192.168.10.20]:63034 came in with unrecognized plex.direct SNI name '***************.plex.direct'; using installed plex.direct cert
Nov 26, 2021 11:20:57.492 [9936] WARN - [CERT] TLS connection from [::ffff:***.***.***.***]:63035 came in with unrecognized plex.direct SNI name '***************.plex.direct'; using installed plex.direct cert
Nov 26, 2021 11:20:57.496 [9932] DEBUG - CERT: incomplete TLS handshake from [::ffff:192.168.10.20]:63034: sslv3 alert certificate unknown
Nov 26, 2021 11:20:57.500 [9932] DEBUG - CERT: incomplete TLS handshake from [::ffff:***.***.***.***]:63035: sslv3 alert certificate unknown
Nov 26, 2021 11:21:20.214 [9932] DEBUG - CERT: incomplete TLS handshake from [::ffff:192.168.10.8]:51144: sslv3 alert bad certificate
Nov 26, 2021 11:21:20.219 [9932] DEBUG - CERT: incomplete TLS handshake from [::ffff:***.***.***.***]:51145: sslv3 alert bad certificate
Nov 26, 2021 11:21:20.287 [9932] DEBUG - CERT: incomplete TLS handshake from 127.0.0.1:55531: sslv3 alert bad certificate
Nov 26, 2021 11:21:27.508 [9936] DEBUG - CERT: incomplete TLS handshake from [::ffff:192.168.10.20]:63045: sslv3 alert certificate unknown
Nov 26, 2021 11:21:27.513 [9936] DEBUG - CERT: incomplete TLS handshake from [::ffff:***.***.***.***]:63046: sslv3 alert certificate unknown
Nov 26, 2021 11:21:27.581 [9932] DEBUG - CERT: incomplete TLS handshake from 127.0.0.1:55533: sslv3 alert certificate unknown
-
I cleaned out all the dead servers
-
I’ve reset your certificate
-
Restart the server
@ChuckPa Haha, thank you!! That looks like it fixed it. Much appreciated!
I think I’m having the same proboem. I can’t make a remote connection work.
I’ve restarted my server several times, and reconfigured remote access, and I all I get is this:
Here are my logs…
Plex Media Server Logs_2021-11-26_16-19-19.zip (1.3 MB)
thanks.
David
Ok, I just uninstalled and then installed the fixed version 1.8.0b (found here: Release 1.8.0-b · RasPlex/RasPlex · GitHub) and now it’s working again.
Thank you for your kind support!
that would be it LOL
You got the updated certificate (which resides in the app)
I am having the same issue. Unable to access the app through https://app.plex.tv/desktop/#!/. I can access plex through http://$local_ip:32400/web/index.html#!/. Using most recent version, uninstalled and reinstalled to no avail. Could it be my certificate?
I saw two certificates on your account; one expired and one current
I reset both
Please restart the server
Did not seem to work. Same issue. Please find the logs attached. (edited to remove attachment)
stop Plex
in the Plex “Caches” directory, remove the cert-v2.p12
Now start plex and let it get a new one.
What’s happening to you is it’s pulling from Cache without going to get a new one.
Nov 26, 2021 21:25:38.748 [10836] DEBUG - [CERT] HTTP requesting PUT https://plex.tv/devices/fd4bd971ed92557c06bdaad0bdd3512d70d59ba4?Connection[][uri]=http://192.168.2.175:32400&httpsEnabled=1&httpsRequired=0&dnsRebindingProtection=0&natLoopbackSupported=1&X-Plex-Token=xxxxxxxxxxxxxxxxxxxx
Nov 26, 2021 21:25:38.901 [10836] DEBUG - [CERT] HTTP/1.1 (0.2s) 400 response from PUT https://plex.tv/devices/fd4bd971ed92557c06bdaad0bdd3512d70d59ba4?Connection[][uri]=http://192.168.2.175:32400&httpsEnabled=1&httpsRequired=0&dnsRebindingProtection=0&natLoopbackSupported=1&X-Plex-Token=xxxxxxxxxxxxxxxxxxxx (reused)
Nov 26, 2021 21:25:38.901 [10836] WARN - [CERT] MyPlex: Updating device connections failed, retrying in 10 seconds.
That fixed it, thank you!
Will this technique work if I’m using the docker container?
I can’t shell into the container unless its running.
Right now, I have disabled secure connections…
Thanks for the help.
If you remove the local certificate, with Plex stopped, it will download fresh.
If the player’s certificate is expired then nothing can fix that.
