SSL Certificate Errors

Plex Media Server
,
1356

It looks like the .11 is giving you issues.

I have reset the certificate.

Please restart the server
Wait one minute for it to install the new certificate then restart all clients.

1357

Hey Chuck

Thanks for helping out. I think it is something related to the .10 server. I attempted to migrate .11 mac to .10 docker a year ago unsuccessfully. To test, I have shut down the docker container however still see the messages. I don’t really use the .10 server it just there as a backup.

1358

Your .10 castle has a certificate from today.
I reset it again anyway

If you still have issue, consider

  1. Stop PMS (inside the container with the container running)
  2. Remove the cert-v2.p12 from the Cache directory
  3. Restart so it downloads fresh
1359

Hi Chuck,
I am pretty sure I have similar problem. My https://plex.tv shows I am getting SSL for domain *.tdscloud.ie instead of plex.tv.
Can you refresh the SSL cert. please? Thank You

1360

@tomeo

Your current cert was updated: Tue, 22 Nov 2022 16:20:43 +0000

Are you adding a certificate in your ‘Custom Access URL’ and did you add a certificate to Plex for tdscloud.ie ?

I can send you what Plex.tv sees (in PM) if you wish.

1361

yes please, I have no idea what happend, but Chromecast cant see the server out of nothing. Certificate did not help. I tried to upgrade, downgrade, nothing works, Plex.tv is no accessible.

1362

@tomeo

Check your PM from me (Upper right corner)

1363

I’ve recentlty moved my server from 1 location to another, and I believe in the process I rate limited myself for creating a certificate.
I can access the content using local web app and my external ip, but cannot from plex.tv. I have 1 server.

These are the logs when trying to enable remote access:

Dec 28, 2022 22:15:44.351 [0x7fe08f599b38] WARN - [HttpClient/HCl#6c] HTTP error requesting GET https://host.certID.plex.direct:32400/identity (35, SSL connect error) (OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to host.certID.plex.direct:32400 )
Dec 28, 2022 22:16:24.914 [0x7fe08d927b38] ERROR - CERT: Error acquiring new certificate: Failed to retrieve cert from plex.tv: 429, 
Dec 28, 2022 22:16:25.179 [0x7fe08d11bb38] ERROR - CERT: Error acquiring new certificate: Failed to upload CSR: 429, <?xml version="1.0" encoding="UTF-8"?>
<errors>
  <error code="1003" message="API rate limit exceeded" status="429"/>
</errors>

Would it be possible to reset my certificate or reset the rate limit lockout for my account? If not, what is the timespan for when the limit will be lifted automatically?

Thanks for the help!

1364

@Daaniea

Yes, you had rate limited yourself.

I have reset your certificate

Restart PMS

After PMS has restarted then restart apps

1 Like
1365

@ChuckPa

Thank you for your help! It is working again now. :+1:

1 Like
1366

Hi There! after moving my setup from base install to docker I think I got the same issue. Please reset my SNI too! Thanks in advance.

error : [CERT] TLS connection from x.x.x.x:25592 came in with unrecognized plex.direct SNI name ‘-redacted-.7d834aec7ad448d3872b2edf74b57185.plex.direct’; using installed plex.direct cert

1367

@fatihER

I have reset the certificate

Restart the server
Then restart the clients so they also get the new certificate

1368

Hey there,

I did a reinstall of my server and now I am receiving
CERT: incomplete TLS handshake from [::ffff:114.142.223.123]:50300: sslv3 alert certificate unknown

1369

@brandon_tr

Looking at your Plex.tv account.

  1. One of the local addresses you entered is “HTTPS”. That’s not correct. You have a typo in there somewhere

  2. Given the FQDN for a local address – not correct.

Think you want all that on the Custom Access URL box.

Also make sure you’ve added your cert to PMS (must include CA, CERT, and KEY in P12)

1370

Thanks for the fast response but the issue is still happening, the certificate was working fine originally before I reinstalled the whole Operating System.

I believe I had fixed the issues that you outlined but the issue is still happening

1371

I will need your DEBUG (not VERBOSE) server logs ZIP file.

Specifically, I’ll need them from restart → 4 minutes (enough time to ensure PMS is settled) and having attempted to access it once (recreate the error).

This way I can see that PMS ingests your cert for the FQDN ok and then what happens after that.

It might be a client issue (Client needs to restart and update its cached copy of your PMS cert. (Plex.tv - PMS certificate will change when PMS is reinstalled)

1372

Here are the logs
Plex Media Server Logs_2023-01-17_06-39-10.zip (37.2 KB)

1373

Thanks. saw it immediately (top of “Plex Media Server.log”)

Jan 17, 2023 06:34:24.804 [0x7fb4ea7240d0] DEBUG - [CERT/OCSP] Stapling requests will be made to 'http://r3.o.lencr.org/'.
Jan 17, 2023 06:34:24.804 [0x7fb4ea7240d0] INFO - [CERT/OCSP] Successfully retrieved response from cache.
Jan 17, 2023 06:34:24.804 [0x7fb4ea7240d0] ERROR - [CERT] Found a user-provided certificate, but couldn't install it.
Jan 17, 2023 06:34:24.804 [0x7fb4ea7240d0] DEBUG - HttpServer: Listening on IPv6 as well as IPv4.
Jan 17, 2023 06:34:24.804 [0x7fb4ea7240d0] DEBUG - HttpServer: Listening on port 32400.

Check permissions on file for user plex:plex and contents of p12.

This will cause the other downstream errors in your logs

1 Like
1374

I feel like an idiot on the settings panel, there was a very well hidden space in the beginning. Thank you for helping me throughout this

1375

Hi would it be possible for you reset my certificate again please?