Synology DSM 6.2 SSL certificate with own domain name

Plex Media Server NAS & Devices
1

Server Version#: DSM 6.2
Player Version#: 1.26.2.5797
Dear all,

I was using my own domain name for the Plex SSL certificate based upon the synology SSL certificate.
For this, I exported the Synology SSL certificate and adjusted it with openssl.
Afterwards I uploaded it in the Plex folder on my Synology NAS and filled in the location and credentials in the Plex settings.
Finally I rebooted PMS.
This always worked without any issue untill today.
Now the SSL certificate is no longer recognised by Plex.
I am no longer able to login using my own domain name and if I use the IP address it gives an “invalid certificate” error.

Could someone please assist me in creating a valid SSL certificate for Plex using my own domain name?

Many thanks.

Kind regards,

Robin

2

Can you share details?

Is it a Let’s Encrypt certificate ? Did it expire ?

3

It is a let’s encrypt certificate that is automatically renewed with my Synology NAS.
Unfortunately, we had a power outage which caused all IP addresses to change.
When I assigned the new IP address I have renewed the let’s encrypt certificate, but now I always get the notification that the certificate is not valid.
I only get this error message when I log in into Plex using the IP address.
Loging in using the domain name is no longer possible.

4

It seems like Plex does not recognize the new SSL certificate. I have created a new one today (12 June) but Plex states that the SSL certificate has been created 3 June.

5

@R.D.B

In the P12, you must have the CA included with the Cert and Key.

Here is how I do it (which runs monthly by crontab)

openssl pkcs12 -export -out my.domain.p12 -inkey my.domain-production.key -in my.domain-production.crt -certfile "Acmecert_+O=Let's+Encrypt,+CN=R3,+C=US.crt"
6

Dear ChuckPa,

Many thanks for the feedback.
However, it is not completely clear to me.
Where do you run that command?
On the NAS or somewhere else?
Where can I find the production key?

My domain name is robin-de-becker.be
Is this command correct and where do I run it in?
openssl pkcs12 -export -out robin-de-becker.be.p12 -inkey robin-de-becker.be-production.key -in robin-de-becker.be-production.crt -certfile “Acmecert_+O=Let’s+Encrypt,+CN=R3,+C=US.crt”

Many thanks for the support.

Kind regards,

Robin

7

You run this on the computer where you’re creating the certificate.

Synology doesn’t allow you to export their certificate and key for use elsewhere.

You must have your cert and key with the cert’s CA from the the issuing agent (e.g. Let’s Encrypt)

You then run this command to create the P12.

Synology will allow you to import (add) this P12 to your Syno just as PMS will let you add this P12 file

9

Thanks for the support.
I had to have a deeper look at how I could actually solve this issue and now I got a new certificate running on my Plex.

10

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.