Transparent proxy with SSL/TLS decryption

[esackbauer]

Server Version#: 1.25.4.5468
Player Version#: 4.69.1

I am using a transparent proxy that opens encrypted traffic.
This works because it uses a root certificate that needs to be imported into the local computer account or browser.
However the Plex Media Server seems to ignore that certificate.
This results that no metadata can be downloaded.

Does PMS bring its own set of root certificate? How can I add my firewall root certificate?

[Volts]

If this is possible, I suspect you want to format it appropriately and append it to cacert.pem.

But I’ve never tried. Middleboxes are inevitably a special sort of hell.

Let us know if it works!

Edit: this exact scenario worked for somebody with Plexamp. I don’t know if it works for Plex Media Server.

Please change cURL library to use OS certification storage

My company has firewall and do SSL sniffing for detect leakage of confidential information. Every PC installed custom certification on OS by windows group policy. but… Plexamp use cURL library, and use own certification by default. and plexamp connect using https always fail by certification error. I can’t use plexamp now. (probably plex for windows too…) but cURL can change certification backend, like schannel or secure transport. (use OS’s certification storage. need change build option…

[esackbauer]

Thanks, I guess it would work. However appending the certificate after each update seems cumbersome. Better solution would be to use the certificates which are already present systemwide.