# TLS 1.3 & Plexamp

**URL:** <https://forums.plex.tv/t/tls-1-3-plexamp/726913>\
**Category:** Plex Labs\
**Created:** [July 5, 2021, 7:29pm UTC](https://forums.plex.tv/t/tls-1-3-plexamp/726913 "2021-07-05T19:29:09Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![anquieta](https://avatars.discourse-cdn.com/v4/letter/a/2acd7d/32.png) [@anquieta](https://forums.plex.tv/u/anquieta)\
**Post date:** [July 5, 2021, 7:29pm UTC](https://forums.plex.tv/t/tls-1-3-plexamp/726913/1 "2021-07-05T19:29:09Z")

</div>

I have been using a reverse proxy in front of my Plex Server. I had set it up to only work over TLS 1.3. This worked for my use case, given the clients I had been using. It appears that among all the Plex apps and third-party apps in the ecosystem, only Plexamp lacks support for TLS 1.3 though. I recall reading earlier this year that there’s an update coming to the network stack for Plexamp. Is that / TLS 1.3 support coming? I’ve been enjoying Plexamp, and I’d like to standardize my personal setup on TLS 1.3. Thanks.

---

<div class="post-metadata">

**Author:** ![elan](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/elan/32/5_2.png) [@elan](https://forums.plex.tv/u/elan)\
**Post date:** [July 5, 2021, 7:42pm UTC](https://forums.plex.tv/t/tls-1-3-plexamp/726913/2 "2021-07-05T19:42:10Z")

</div>

I don’t know why Plexamp wouldn’t support TLS, it’s more likely that it doesn’t like the reverse proxy. If you post the debug logs, there’s probably more clues in there.

---

<div class="post-metadata">

**Author:** ![anquieta](https://avatars.discourse-cdn.com/v4/letter/a/2acd7d/32.png) [@anquieta](https://forums.plex.tv/u/anquieta)\
**Post date:** [July 6, 2021, 12:20am UTC](https://forums.plex.tv/t/tls-1-3-plexamp/726913/3 "2021-07-06T00:20:16Z")

</div>

Thanks for the quick reply @elan.

I’m not saying the issue in my admittedly rare case is TLS broadly, but just TLS 1.3. And the issue only arises in Plexamp.

When I changed my reverse proxy settings to enable TLS 1.2 and TLS 1.3 (instead of only TLS 1.3), the issue resolved and Plexamp works just fine.

It occurred to me to try this after looking at the logs. The Plexamp logs showed this:

```auto
DEBUG - Networking: Completed request 34: (GET https://example.com:443/) with code -35 (have 0 bytes) in 142 ms.

```

I couldn’t find anything on code -35, but this looked like a dropped connection or something. The reverse proxy logs had nothing. So, that suggested something about my case was creating a situation with Plexamp couldn’t connect to the server.

With other Plex and third-party apps, there are no issues with a reverse proxy setup that only allows TLS 1.3. It’s only Plexamp that seems to max out at TLS 1.2 and doesn’t yet support TLS 1.3.

Thanks.

---

<div class="post-metadata">

**Author:** ![elan](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/elan/32/5_2.png) [@elan](https://forums.plex.tv/u/elan)\
**Post date:** [July 6, 2021, 2:18am UTC](https://forums.plex.tv/t/tls-1-3-plexamp/726913/4 "2021-07-06T02:18:11Z")

</div>

why operating system are you seeing the error on?

possibly related:

> <https://github.com/curl/curl/issues/4918>
>
> I found a related topic was closed.
> 
> \`curl -I https://example.com\`
> 
> Perhaps …duplicate of curl: (35) schannel: next InitializeSecurityContext failed: SEC\_E\_ILLEGAL\_MESSAGE (0x80090326) - This error usually occurs when a fatal SSL/TLS alert is received (e.g. handshake failed). More detail may be available in the Windows System event log.
> 
> OS: Windows 10
> 
> \`\`\`
> curl 7.55.1 (Windows) libcurl/7.55.1 WinSSL
> Release-Date: \[unreleased\]
> Protocols: dict file ftp ftps http https imap imaps pop3 pop3s smtp smtps telnet tftp
> Features: AsynchDNS IPv6 Largefile SSPI Kerberos SPNEGO NTLM SSL
> \`\`\`
> 
> \`\`\`
> curl -I --tlsv1.3 https://example.com
> curl: (35) Schannel: TLS 1.3 is not yet supported
> \`\`\`

---

<div class="post-metadata">

**Author:** ![anquieta](https://avatars.discourse-cdn.com/v4/letter/a/2acd7d/32.png) [@anquieta](https://forums.plex.tv/u/anquieta)\
**Post date:** [July 6, 2021, 4:41am UTC](https://forums.plex.tv/t/tls-1-3-plexamp/726913/5 "2021-07-06T04:41:32Z")

</div>

iOS and iPadOS 14.6. The main Plex app and other apps did not have an issue with TLS 1.3.

---

<div class="post-metadata">

**Author:** ![elan](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/elan/32/5_2.png) [@elan](https://forums.plex.tv/u/elan)\
**Post date:** [July 6, 2021, 5:02am UTC](https://forums.plex.tv/t/tls-1-3-plexamp/726913/6 "2021-07-06T05:02:55Z")

</div>

they use a totally different networking stack.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/plex/original/3X/2/a/2acb9765406f63293d357b4ec509ec39aa28f2ad.png) [@system](https://forums.plex.tv/u/system)\
**Post date:** [October 4, 2021, 5:03am UTC](https://forums.plex.tv/t/tls-1-3-plexamp/726913/7 "2021-10-04T05:03:13Z")

</div>

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.
