Jump to content

Emby HTTP/HTTPS configuration issue


freeflight29
 Share

Recommended Posts

freeflight29

Hello, 

with this parameters below: 

 

<?xml version="1.0"?>
<ServerConfiguration xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
  <EnableDebugLevelLogging>false</EnableDebugLevelLogging>
  <EnableAutoUpdate>true</EnableAutoUpdate>
  <LogFileRetentionDays>3</LogFileRetentionDays>
  <RunAtStartup>true</RunAtStartup>
  <IsStartupWizardCompleted>true</IsStartupWizardCompleted>
  <EnableUPnP>true</EnableUPnP>
  <PublicPort>8096</PublicPort>
  <PublicHttpsPort>8920</PublicHttpsPort>
  <HttpServerPortNumber>8096</HttpServerPortNumber>
  <HttpsPortNumber>8920</HttpsPortNumber>
  <EnableHttps>true</EnableHttps>
  <CertificatePath>/volume1/home/USER/CERTNAME.pfx</CertificatePath>
  <CertificatePassword>MyPassword</CertificatePassword>
  <IsPortAuthorized>true</IsPortAuthorized>
  <AutoRunWebApp>true</AutoRunWebApp>
  <EnableRemoteAccess>true</EnableRemoteAccess>
  <LogAllQueryTimes>false</LogAllQueryTimes>
  <EnableCaseSensitiveItemIds>true</EnableCaseSensitiveItemIds>
  <PreferredMetadataLanguage>fr</PreferredMetadataLanguage>
  <MetadataCountryCode>FR</MetadataCountryCode>
  <SortRemoveWords>
    <string>the</string>
    <string>a</string>
    <string>an</string>
    <string>das</string>
    <string>der</string>
    <string>el</string>
    <string>la</string>
  </SortRemoveWords>
  <LibraryMonitorDelay>60</LibraryMonitorDelay>
  <EnableDashboardResponseCaching>true</EnableDashboardResponseCaching>
  <ImageSavingConvention>Compatible</ImageSavingConvention>
  <EnableAutomaticRestart>true</EnableAutomaticRestart>
  <CollectionOptionsMigrated>true</CollectionOptionsMigrated>
  <CollectionsMigratedToTags>true</CollectionsMigratedToTags>
  <CollectionFolderIdsMigrated>true</CollectionFolderIdsMigrated>
  <SaveMetadataHiddenMigrated>true</SaveMetadataHiddenMigrated>
  <WanDdns>DnsNameOfMyNAS</WanDdns>
  <UICulture>fr</UICulture>
  <SaveMetadataHidden>false</SaveMetadataHidden>
  <RemoteClientBitrateLimit>0</RemoteClientBitrateLimit>
  <DisplaySpecialsWithinSeasons>true</DisplaySpecialsWithinSeasons>
  <LocalNetworkSubnets />
  <LocalNetworkAddresses />
  <EnableExternalContentInSuggestions>true</EnableExternalContentInSuggestions>
  <RequireHttps>true</RequireHttps>
  <IsBehindProxy>false</IsBehindProxy>
  <RemoteIPFilter />
  <IsRemoteIPFilterBlacklist>false</IsRemoteIPFilterBlacklist>
  <ImageExtractionTimeoutMs>0</ImageExtractionTimeoutMs>
  <PathSubstitutions />
  <UninstalledPlugins />
  <CollapseVideoFolders>true</CollapseVideoFolders>
  <EnableOriginalTrackTitles>false</EnableOriginalTrackTitles>
  <VacuumDatabaseOnStartup>false</VacuumDatabaseOnStartup>
  <SimultaneousStreamLimit>0</SimultaneousStreamLimit>
  <DatabaseCacheSizeMB>96</DatabaseCacheSizeMB>
  <EnableSqLiteMmio>false</EnableSqLiteMmio>
  <NextUpUpgraded>true</NextUpUpgraded>
  <ChannelOptionsUpgraded>true</ChannelOptionsUpgraded>
  <OptimizeDbOnShutdown>false</OptimizeDbOnShutdown>
  <DatabaseAnalysisLimit>400</DatabaseAnalysisLimit>
</ServerConfiguration>

how can i have this on the dashboard ? what i have miss ? Https not working.

1178953165_embydashboard.png.42dc5de02a796db4d5e4372349ee0afd.png

"Version 4.6.4.0

Le serveur Emby est à jour

En cours d'exécution sur le port http 8096.

Accès local (LAN) : http://LocalIPOfTheNAS:8096

Accès à distance (WAN) : http://DnsNameOfMyNAS:8096"

 

 

 

Link to comment
Share on other sites

Hi, please attach the emby server log. thanks.

Link to comment
Share on other sites

Happy2Play

Don't know the error but it is certificate related.

2021-08-01 03:25:20.503 Error App: Error loading cert from /volume1/home/Admin_LBO/embyMO.pfx
	*** Error Report ***
	Version: 4.6.4.0
	Command line: /volume1/.@plugins/AppCentral/emby-server/system/EmbyServer.dll -programdata /home/emby -ffdetect /usr/local/AppCentral/emby-server/bin/ffdetect -ffmpeg /usr/local/AppCentral/emby-server/bin/ffmpeg -ffprobe /usr/local/AppCentral/emby-server/bin/ffprobe -updatepackage emby-server-asustor_{version}_x86-64.apk
	Operating system: Linux version 5.4.x (root@sw1-server) (gcc version 7.4.0 (crosstool-NG 1.24.0)) #1 SMP Sun Jul 4 20:42:42 CST 2021
	Framework: .NET Core 3.1.13
	OS/Process: x64/x64
	Runtime: volume1/.@plugins/AppCentral/emby-server/system/System.Private.CoreLib.dll
	Processor count: 2
	Data path: /home/emby
	Application path: /volume1/.@plugins/AppCentral/emby-server/system
	Interop+Crypto+OpenSslCryptographicException: Interop+Crypto+OpenSslCryptographicException: error:2006D002:BIO routines:BIO_new_file:system lib
	   at Interop.Crypto.CheckValidOpenSslHandle(SafeHandle handle)
	   at Internal.Cryptography.Pal.OpenSslX509CertificateReader.FromFile(String fileName, SafePasswordHandle password, X509KeyStorageFlags keyStorageFlags)
	   at System.Security.Cryptography.X509Certificates.X509Certificate..ctor(String fileName, String password, X509KeyStorageFlags keyStorageFlags)
	   at System.Security.Cryptography.X509Certificates.X509Certificate2..ctor(String fileName, String password)
	   at Emby.Server.Implementations.ApplicationHost.GetCertificate(CertificateInfo info)
	Source: System.Security.Cryptography.X509Certificates
	TargetSite: Void CheckValidOpenSslHandle(System.Runtime.InteropServices.SafeHandle)

 

Link to comment
Share on other sites

HI, make sure the pfx certificate has 777 execute permissions. Please let us know if this helps. Thanks.

Link to comment
Share on other sites

freeflight29
On 8/2/2021 at 5:25 AM, Luke said:

HI, make sure the pfx certificate has 777 execute permissions. Please let us know if this helps. Thanks.

hello luke, i still have the issue, with permissions 777 execute.

regards

embyserver.txt

Link to comment
Share on other sites

freeflight29

hello luke, 

when i restarted the emby server i saw an error about the certificate in the log.

"error:23076071:PKCS12 routines:PKCS12_parse:mac verify failure"

i decided to regenerate the certificate, i use ssh and the root account, and i restart the server. Now everything is good.

I thinkmy mistake was, i was using an another account that is member of "administrator group" , but i think there is a problem with the rights of this account to correctly generate the certificate, even if the account is member of "administrator group"

Regards

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

×
×
  • Create New...