Cannot change WAN https port

[chizz44 7]

I'm trying to setup remote access on a new Emby server. I've successfully made and applied a .pfx cert, but when I specify the https port 8920 and hit "Save", the WAN port doesn't change. On the Dashboard screen, it shows my DDNS name but the port is 8096. I've had this same setup running for ages on another server, so I don't know what could be wrong. This is Emby 4.7.14.0 running on Ubuntu. Everything works fine internally.

[Luke 37194]

Hi, just adding this by itself doesn't change your wan port. Did you set your secure connection mode?

[chizz44 7]

Yes, it's set to "Required for all remote connections"

[Luke 37194]

OK then perhaps the server had trouble loading your certificate. Please restart the server and then attach the emby server log:

How to Report a Problem

Thanks.

[chizz44 7]

embyserver.txt

Here's my attached log, maybe I messed something up when making the cert? It passes tests on the server from the command line.

 

[Luke 37194]

2023-11-27 17:38:44.104 Error App: Error loading cert from /usr/local/etc/letsencrypt/live/embymd44.ddns.net/embymd44.pfx
	*** Error Report ***
	Version: 4.7.14.0
	Command line: /opt/emby-server/system/EmbyServer.dll -programdata /var/lib/emby -ffdetect /opt/emby-server/bin/ffdetect -ffmpeg /opt/emby-server/bin/ffmpeg -ffprobe /opt/emby-server/bin/ffprobe -restartexitcode 3 -updatepackage emby-server-deb_{version}_amd64.deb
	Operating system: Linux version 6.5.11-4-pve (fgruenbichler@yuna) (gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40) #1 SMP PREEMPT_DYNAMIC PMX 6.5.
	Framework: .NET 6.0.20
	OS/Process: x64/x64
	Runtime: opt/emby-server/system/System.Private.CoreLib.dll
	Processor count: 2
	Data path: /var/lib/emby
	Application path: /opt/emby-server/system
	Interop+Crypto+OpenSslCryptographicException: Interop+Crypto+OpenSslCryptographicException: error:2006D002:BIO routines:BIO_new_file:system lib

Maybe the server just doesn't have access to the file.

[chizz44 7]

This is weird.

I'm making the cert;

certbot --ngnix -d <MYDDNSNAME>

I'm making a .pfx;

openssl pkcs12 -export -in /etc/letsencrypt/live/<MYYDDNSNAME>/fullchain.pem -inkey /etc/letsencrypt/live/<MYYDDNSNAME>/privkey.pem -out <MYYDDNSNAME>_v2.pfx

I even  made a directory here,  figuring that emby had to be able to access it, nope

/var/lib/emby/cert

 

embyserver (2).txt

[Luke 37194]

Maybe try putting the pfx file somewhere under the server data folder since we already know it can access that.

[chizz44 7]

Got it! This is the relevant error;

Interop+Crypto+OpenSslCryptographicException: error:2006D002:BIO routines:BIO_new_file:system lib

The fix was to "chmod 755 <path to certificate>/<certificatename>.pfx

Once I did that and rebooted, Emby read the cert and updated the Dashboard and I can connect over https at the specified port.