Emby HTTP/HTTPS configuration issue

[freeflight29 2]

Hello, 

with this parameters below: 

 

<?xml version="1.0"?>
<ServerConfiguration xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
  <EnableDebugLevelLogging>false</EnableDebugLevelLogging>
  <EnableAutoUpdate>true</EnableAutoUpdate>
  <LogFileRetentionDays>3</LogFileRetentionDays>
  <RunAtStartup>true</RunAtStartup>
  <IsStartupWizardCompleted>true</IsStartupWizardCompleted>
  <EnableUPnP>true</EnableUPnP>
  <PublicPort>8096</PublicPort>
  <PublicHttpsPort>8920</PublicHttpsPort>
  <HttpServerPortNumber>8096</HttpServerPortNumber>
  <HttpsPortNumber>8920</HttpsPortNumber>
  <EnableHttps>true</EnableHttps>
  <CertificatePath>/volume1/home/USER/CERTNAME.pfx</CertificatePath>
  <CertificatePassword>MyPassword</CertificatePassword>
  <IsPortAuthorized>true</IsPortAuthorized>
  <AutoRunWebApp>true</AutoRunWebApp>
  <EnableRemoteAccess>true</EnableRemoteAccess>
  <LogAllQueryTimes>false</LogAllQueryTimes>
  <EnableCaseSensitiveItemIds>true</EnableCaseSensitiveItemIds>
  <PreferredMetadataLanguage>fr</PreferredMetadataLanguage>
  <MetadataCountryCode>FR</MetadataCountryCode>
  <SortRemoveWords>
    <string>the</string>
    <string>a</string>
    <string>an</string>
    <string>das</string>
    <string>der</string>
    <string>el</string>
    <string>la</string>
  </SortRemoveWords>
  <LibraryMonitorDelay>60</LibraryMonitorDelay>
  <EnableDashboardResponseCaching>true</EnableDashboardResponseCaching>
  <ImageSavingConvention>Compatible</ImageSavingConvention>
  <EnableAutomaticRestart>true</EnableAutomaticRestart>
  <CollectionOptionsMigrated>true</CollectionOptionsMigrated>
  <CollectionsMigratedToTags>true</CollectionsMigratedToTags>
  <CollectionFolderIdsMigrated>true</CollectionFolderIdsMigrated>
  <SaveMetadataHiddenMigrated>true</SaveMetadataHiddenMigrated>
  <WanDdns>DnsNameOfMyNAS</WanDdns>
  <UICulture>fr</UICulture>
  <SaveMetadataHidden>false</SaveMetadataHidden>
  <RemoteClientBitrateLimit>0</RemoteClientBitrateLimit>
  <DisplaySpecialsWithinSeasons>true</DisplaySpecialsWithinSeasons>
  <LocalNetworkSubnets />
  <LocalNetworkAddresses />
  <EnableExternalContentInSuggestions>true</EnableExternalContentInSuggestions>
  <RequireHttps>true</RequireHttps>
  <IsBehindProxy>false</IsBehindProxy>
  <RemoteIPFilter />
  <IsRemoteIPFilterBlacklist>false</IsRemoteIPFilterBlacklist>
  <ImageExtractionTimeoutMs>0</ImageExtractionTimeoutMs>
  <PathSubstitutions />
  <UninstalledPlugins />
  <CollapseVideoFolders>true</CollapseVideoFolders>
  <EnableOriginalTrackTitles>false</EnableOriginalTrackTitles>
  <VacuumDatabaseOnStartup>false</VacuumDatabaseOnStartup>
  <SimultaneousStreamLimit>0</SimultaneousStreamLimit>
  <DatabaseCacheSizeMB>96</DatabaseCacheSizeMB>
  <EnableSqLiteMmio>false</EnableSqLiteMmio>
  <NextUpUpgraded>true</NextUpUpgraded>
  <ChannelOptionsUpgraded>true</ChannelOptionsUpgraded>
  <OptimizeDbOnShutdown>false</OptimizeDbOnShutdown>
  <DatabaseAnalysisLimit>400</DatabaseAnalysisLimit>
</ServerConfiguration>

how can i have this on the dashboard ? what i have miss ? Https not working.

"Version 4.6.4.0

Le serveur Emby est à jour

En cours d'exécution sur le port http 8096.

Accès local (LAN) : http://LocalIPOfTheNAS:8096

Accès à distance (WAN) : http://DnsNameOfMyNAS:8096"

 

 

 

[Luke 36992]

Hi, please attach the emby server log. thanks.

[freeflight29 2]

hello luke,

logs as request.

thx 

embyserver.txt

[Happy2Play 8224]

Don't know the error but it is certificate related.

2021-08-01 03:25:20.503 Error App: Error loading cert from /volume1/home/Admin_LBO/embyMO.pfx
	*** Error Report ***
	Version: 4.6.4.0
	Command line: /volume1/.@plugins/AppCentral/emby-server/system/EmbyServer.dll -programdata /home/emby -ffdetect /usr/local/AppCentral/emby-server/bin/ffdetect -ffmpeg /usr/local/AppCentral/emby-server/bin/ffmpeg -ffprobe /usr/local/AppCentral/emby-server/bin/ffprobe -updatepackage emby-server-asustor_{version}_x86-64.apk
	Operating system: Linux version 5.4.x (root@sw1-server) (gcc version 7.4.0 (crosstool-NG 1.24.0)) #1 SMP Sun Jul 4 20:42:42 CST 2021
	Framework: .NET Core 3.1.13
	OS/Process: x64/x64
	Runtime: volume1/.@plugins/AppCentral/emby-server/system/System.Private.CoreLib.dll
	Processor count: 2
	Data path: /home/emby
	Application path: /volume1/.@plugins/AppCentral/emby-server/system
	Interop+Crypto+OpenSslCryptographicException: Interop+Crypto+OpenSslCryptographicException: error:2006D002:BIO routines:BIO_new_file:system lib
	   at Interop.Crypto.CheckValidOpenSslHandle(SafeHandle handle)
	   at Internal.Cryptography.Pal.OpenSslX509CertificateReader.FromFile(String fileName, SafePasswordHandle password, X509KeyStorageFlags keyStorageFlags)
	   at System.Security.Cryptography.X509Certificates.X509Certificate..ctor(String fileName, String password, X509KeyStorageFlags keyStorageFlags)
	   at System.Security.Cryptography.X509Certificates.X509Certificate2..ctor(String fileName, String password)
	   at Emby.Server.Implementations.ApplicationHost.GetCertificate(CertificateInfo info)
	Source: System.Security.Cryptography.X509Certificates
	TargetSite: Void CheckValidOpenSslHandle(System.Runtime.InteropServices.SafeHandle)

 

[Luke 36992]

HI, make sure the pfx certificate has 777 execute permissions. Please let us know if this helps. Thanks.

[freeflight29 2]

On 8/2/2021 at 5:25 AM, Luke said:

HI, make sure the pfx certificate has 777 execute permissions. Please let us know if this helps. Thanks.

hello luke, i still have the issue, with permissions 777 execute.

regards

embyserver.txt

[Luke 36992]

1 hour ago, freeflight29 said:

hello luke, i still have the issue, with permissions 777 execute.

regards

embyserver.txt 70.18 kB · 0 downloads

Please attach the log file from right after starting up the server. thanks.

[freeflight29 2]

hello luke, 

when i restarted the emby server i saw an error about the certificate in the log.

"error:23076071:PKCS12 routines:PKCS12_parse:mac verify failure"

i decided to regenerate the certificate, i use ssh and the root account, and i restart the server. Now everything is good.

I thinkmy mistake was, i was using an another account that is member of "administrator group" , but i think there is a problem with the rights of this account to correctly generate the certificate, even if the account is member of "administrator group"

Regards

[Luke 36992]

Thanks for the feedback.