Jump to content

FreeNAS plugin


Luke

Recommended Posts

Baenwort
3 hours ago, alucryd said:

@Baenwort Thanks! Meanwhile, I pushed a new branch to our unofficial plugin, tested on a TrueNAS VM, this will have to do while the official plugin is updated: https://github.com/MediaBrowser/iocage-amd64/tree/truenas12

Thanks @alucrydyou can tell I'm not the best one for this as I'm not seeing (based upon my understanding of TrueNAS plugin system) how your artefact.git can function without a rc.d equivalent to: https://github.com/freenas/iocage-plugin-emby/tree/master/overlay/usr/local/etc/rc.d 

My understanding is that is needed to configure the jail properly.

Link to comment
Share on other sites

alucryd

@Baenwort Their script is an overlay meant to replace our own service. We just use ours, it's included in our tarball that's downloaded in the post_install.sh script.

Link to comment
Share on other sites

  • 1 month later...
On 6/4/2021 at 3:35 AM, Vidman said:

Any time frame for any of the emby plugins to be updated to 4.6?

Everything should be at this point.

Link to comment
Share on other sites

  • 5 months later...
leithouse

I've got a fresh emby install via Emby Server plugin on a new TrueNas (TrueNAS-12.0-U6.1) install and it seems like the server isn't sourcing CA data from /etc/ssl/cert.pem.

 

Attempting to fetch the list of available plugins results in the following error:

2021-11-14 19:56:14.467 Info HttpClient: HttpClientManager GET: https://www.mb3admin.com/admin/service/EmbyPackages.json
2021-11-14 19:56:14.786 Error HttpClient: Error TrustFailure getting response from 
	*** Error Report ***
	Version: 4.6.4.0
	Command line: /usr/local/lib/emby-server/system/EmbyServer.exe -os freebsd -ffmpeg /usr/local/bin/ffmpeg -ffprobe /usr/local/bin/ffprobe -programdata /var/db/emby-server -updatepackage emby-server-freebsd_{version}_amd64.txz
	Operating system: Unix 12.2.10.0 
	Framework: Mono: 6.8.0.123 (tarball Thu Nov 11 21:32:34 UTC 2021)
	OS/Process: X64/X64
	Runtime: usr/local/lib/mono/4.5/mscorlib.dll
	Processor count: 4
	Data path: /var/db/emby-server
	Application path: /usr/local/lib/emby-server/system
	System.Net.WebException: System.Net.WebException: Error: TrustFailure (Authentication failed, see inner exception.) ---> System.Security.Authentication.AuthenticationException: Authentication failed, see inner exception. ---> Mono.Btls.MonoBtlsException: Ssl error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
	  at /wrkdirs/usr/ports/lang/mono6.8/work/mono-6.8.0.123/external/boringssl/ssl/handshake_client.c:1132
	  at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00048] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status, System.Boolean renegotiate) [0x000da] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus,bool)
	  at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.AsyncProtocolRequest.ProcessOperation (System.Threading.CancellationToken cancellationToken) [0x000fc] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	   --- End of inner exception stack trace ---
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessAuthentication (System.Boolean runSynchronously, Mono.Net.Security.MonoSslAuthenticationOptions options, System.Threading.CancellationToken cancellationToken) [0x00262] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Net.WebConnectionTunnel tunnel, System.Threading.CancellationToken cancellationToken) [0x0016a] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x001ba] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	   --- End of inner exception stack trace ---
	  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x0021a] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebConnection.InitConnection (System.Net.WebOperation operation, System.Threading.CancellationToken cancellationToken) [0x00141] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebOperation.Run () [0x0009a] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebCompletionSource`1[T].WaitForCompletion () [0x00094] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.HttpWebRequest.RunWithTimeoutWorker[T] (System.Threading.Tasks.Task`1[TResult] workerTask, System.Int32 timeout, System.Action abort, System.Func`1[TResult] aborted, System.Threading.CancellationTokenSource cts) [0x000f8] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.HttpWebRequest.EndGetResponse (System.IAsyncResult asyncResult) [0x00020] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Threading.Tasks.TaskFactory`1[TResult].FromAsyncCoreLogic (System.IAsyncResult iar, System.Func`2[T,TResult] endFunction, System.Action`1[T] endAction, System.Threading.Tasks.Task`1[TResult] promise, System.Boolean requiresSynchronization) [0x0000f] in <0e6cb1433c7b46f598f86593dd03f528>:0 
	Source: System
	TargetSite: System.Net.WebResponse EndGetResponse(System.IAsyncResult)
	InnerException: System.Security.Authentication.AuthenticationException: Authentication failed, see inner exception.
	Source: mscorlib
	TargetSite: Void Throw()
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessAuthentication (System.Boolean runSynchronously, Mono.Net.Security.MonoSslAuthenticationOptions options, System.Threading.CancellationToken cancellationToken) [0x00262] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Net.WebConnectionTunnel tunnel, System.Threading.CancellationToken cancellationToken) [0x0016a] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x001ba] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	InnerException: Mono.Btls.MonoBtlsException: Ssl error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
	  at /wrkdirs/usr/ports/lang/mono6.8/work/mono-6.8.0.123/external/boringssl/ssl/handshake_client.c:1132
	Source: System
	TargetSite: Boolean ProcessHandshake()
	  at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00048] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status, System.Boolean renegotiate) [0x000da] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus,bool)
	  at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.AsyncProtocolRequest.ProcessOperation (System.Threading.CancellationToken cancellationToken) [0x000fc] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	
2021-11-14 19:56:14.791 Error Server: Error processing request
	*** Error Report ***
	Version: 4.6.4.0
	Command line: /usr/local/lib/emby-server/system/EmbyServer.exe -os freebsd -ffmpeg /usr/local/bin/ffmpeg -ffprobe /usr/local/bin/ffprobe -programdata /var/db/emby-server -updatepackage emby-server-freebsd_{version}_amd64.txz
	Operating system: Unix 12.2.10.0 
	Framework: Mono: 6.8.0.123 (tarball Thu Nov 11 21:32:34 UTC 2021)
	OS/Process: X64/X64
	Runtime: usr/local/lib/mono/4.5/mscorlib.dll
	Processor count: 4
	Data path: /var/db/emby-server
	Application path: /usr/local/lib/emby-server/system
	MediaBrowser.Model.Net.HttpException: MediaBrowser.Model.Net.HttpException: Error: TrustFailure (Authentication failed, see inner exception.) ---> System.Net.WebException: Error: TrustFailure (Authentication failed, see inner exception.) ---> System.Security.Authentication.AuthenticationException: Authentication failed, see inner exception. ---> Mono.Btls.MonoBtlsException: Ssl error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
	  at /wrkdirs/usr/ports/lang/mono6.8/work/mono-6.8.0.123/external/boringssl/ssl/handshake_client.c:1132
	  at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00048] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status, System.Boolean renegotiate) [0x000da] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus,bool)
	  at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.AsyncProtocolRequest.ProcessOperation (System.Threading.CancellationToken cancellationToken) [0x000fc] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	   --- End of inner exception stack trace ---
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessAuthentication (System.Boolean runSynchronously, Mono.Net.Security.MonoSslAuthenticationOptions options, System.Threading.CancellationToken cancellationToken) [0x00262] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Net.WebConnectionTunnel tunnel, System.Threading.CancellationToken cancellationToken) [0x0016a] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x001ba] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	   --- End of inner exception stack trace ---
	  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x0021a] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebConnection.InitConnection (System.Net.WebOperation operation, System.Threading.CancellationToken cancellationToken) [0x00141] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebOperation.Run () [0x0009a] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebCompletionSource`1[T].WaitForCompletion () [0x00094] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.HttpWebRequest.RunWithTimeoutWorker[T] (System.Threading.Tasks.Task`1[TResult] workerTask, System.Int32 timeout, System.Action abort, System.Func`1[TResult] aborted, System.Threading.CancellationTokenSource cts) [0x000f8] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.HttpWebRequest.EndGetResponse (System.IAsyncResult asyncResult) [0x00020] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Threading.Tasks.TaskFactory`1[TResult].FromAsyncCoreLogic (System.IAsyncResult iar, System.Func`2[T,TResult] endFunction, System.Action`1[T] endAction, System.Threading.Tasks.Task`1[TResult] promise, System.Boolean requiresSynchronization) [0x0000f] in <0e6cb1433c7b46f598f86593dd03f528>:0 
	   --- End of inner exception stack trace ---
	  at Emby.Server.Implementations.HttpClientManager.HttpClientManager.SendAsyncInternal (MediaBrowser.Common.Net.HttpRequestOptions options, System.String httpMethod) [0x00858] in <05979d9270ab4dafac52ba5587e41c17>:0 
	  at Emby.Server.Implementations.HttpClientManager.HttpClientManager.SendAsync (MediaBrowser.Common.Net.HttpRequestOptions options, System.String httpMethod) [0x001f4] in <05979d9270ab4dafac52ba5587e41c17>:0 
	  at Emby.Server.Implementations.Updates.InstallationManager.GetAvailablePackagesWithoutRegistrationInfo (System.Boolean enableCache, System.Threading.CancellationToken cancellationToken) [0x000da] in <05979d9270ab4dafac52ba5587e41c17>:0 
	  at Emby.Server.Implementations.Updates.InstallationManager.GetAvailablePackages (System.Threading.CancellationToken cancellationToken, System.Boolean withRegistration, System.String packageType, System.Version applicationVersion) [0x00261] in <05979d9270ab4dafac52ba5587e41c17>:0 
	  at MediaBrowser.Api.PackageService.Get (MediaBrowser.Api.GetPackages request) [0x000bd] in <59ac92013247492db051b0d14392866c>:0 
	  at Emby.Server.Implementations.Services.ServiceController.GetTaskResult (System.Threading.Tasks.Task task) [0x00081] in <05979d9270ab4dafac52ba5587e41c17>:0 
	  at Emby.Server.Implementations.Services.ServiceHandler.ProcessRequestAsync (Emby.Server.Implementations.HttpServer.HttpListenerHost appHost, MediaBrowser.Model.Services.IRequest httpReq, MediaBrowser.Model.Services.IResponse httpRes, Emby.Server.Implementations.Services.RestPath restPath, System.String responseContentType, System.Threading.CancellationToken cancellationToken) [0x001da] in <05979d9270ab4dafac52ba5587e41c17>:0 
	  at Emby.Server.Implementations.HttpServer.HttpListenerHost.RequestHandler (MediaBrowser.Model.Services.IRequest httpReq, System.ReadOnlyMemory`1[T] urlString, System.ReadOnlyMemory`1[T] localPath, System.Threading.CancellationToken cancellationToken) [0x00bcc] in <05979d9270ab4dafac52ba5587e41c17>:0 
	Source: mscorlib
	TargetSite: Void Throw()
	InnerException: System.Net.WebException: Error: TrustFailure (Authentication failed, see inner exception.)
	Source: System
	TargetSite: System.Net.WebResponse EndGetResponse(System.IAsyncResult)
	  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x0021a] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebConnection.InitConnection (System.Net.WebOperation operation, System.Threading.CancellationToken cancellationToken) [0x00141] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebOperation.Run () [0x0009a] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebCompletionSource`1[T].WaitForCompletion () [0x00094] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.HttpWebRequest.RunWithTimeoutWorker[T] (System.Threading.Tasks.Task`1[TResult] workerTask, System.Int32 timeout, System.Action abort, System.Func`1[TResult] aborted, System.Threading.CancellationTokenSource cts) [0x000f8] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.HttpWebRequest.EndGetResponse (System.IAsyncResult asyncResult) [0x00020] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Threading.Tasks.TaskFactory`1[TResult].FromAsyncCoreLogic (System.IAsyncResult iar, System.Func`2[T,TResult] endFunction, System.Action`1[T] endAction, System.Threading.Tasks.Task`1[TResult] promise, System.Boolean requiresSynchronization) [0x0000f] in <0e6cb1433c7b46f598f86593dd03f528>:0 
	InnerException: System.Security.Authentication.AuthenticationException: Authentication failed, see inner exception.
	Source: mscorlib
	TargetSite: Void Throw()
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessAuthentication (System.Boolean runSynchronously, Mono.Net.Security.MonoSslAuthenticationOptions options, System.Threading.CancellationToken cancellationToken) [0x00262] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Net.WebConnectionTunnel tunnel, System.Threading.CancellationToken cancellationToken) [0x0016a] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x001ba] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	InnerException: Mono.Btls.MonoBtlsException: Ssl error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
	  at /wrkdirs/usr/ports/lang/mono6.8/work/mono-6.8.0.123/external/boringssl/ssl/handshake_client.c:1132
	Source: System
	TargetSite: Boolean ProcessHandshake()
	  at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00048] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status, System.Boolean renegotiate) [0x000da] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus,bool)
	  at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.AsyncProtocolRequest.ProcessOperation (System.Threading.CancellationToken cancellationToken) [0x000fc] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	
2021-11-14 19:56:14.794 Info Server: http/1.1 Response 500 to X.X.X.X. Time: 332ms. http://emby.xxxx.net:8096/Packages?TargetSystems=Server&IsAdult=false&PackageType=UserInstalled&X-Emby-Client=Emby Web&X-Emby-Device-Name=Firefox&X-Emby-Device-Id=x-x-xx&X-Emby-Client-Version=4.6.4.0

 

Meanwhile, opening a shell in the jail and checking whether I have the proper CA certs installed is fine

root@emby:~ # openssl s_client -connect www.mb3admin.com:443 -CAfile /etc/ssl/cert.pem
CONNECTED(00000003)
depth=1 C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN =Sectigo RSA Domain Validation Secure Server CA
verify return:1
depth=0 CN = www.mb3admin.com
verify return:1
---
Certificate chain
 0 s:CN = www.mb3admin.com
   i:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
 1 s:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
   i:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=CN = www.mb3admin.com

issuer=C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 3711 bytes and written 413 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: FD835D4B37605817E5F56C1669FE9E6E68071DD027701133B215338EC5DBAA4E
    Session-ID-ctx:
    Master-Key: 4F3EB0D9FC0BBC1A3921A8FD9A6C579566E819861134B7E3A0C9ABC103D40D8A72E79A88318F5FB48C38DB4B5D263EE4
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - a1 49 a8 98 b0 83 18 53-63 c2 46 f9 00 59 7b 5c   .I.....Sc.F..Y{\
    0010 - bf 5d 61 77 61 26 17 c7-68 10 b8 d7 ee f2 a3 c3   .]awa&..h.......
    0020 - 3f 48 ce 2e ab af c7 1d-9f 22 29 e9 94 01 e9 70   ?H.......")....p
    0030 - 6f 4c 31 a4 f3 30 67 4a-be 0b d0 84 a2 33 16 b8   oL1..0gJ.....3..
    0040 - d8 4f e5 68 47 24 5f 68-b4 9b f3 27 a0 57 da b3   .O.hG$_h...'.W..
    0050 - bf c9 e1 86 54 95 99 b4-68 41 4e c4 17 a4 a7 de   ....T...hAN.....
    0060 - c9 18 7e d7 78 9a cf 1c-63 74 63 22 08 56 07 87   ..~.x...ctc".V..
    0070 - 91 af 2d 0f a3 bc e4 b8-7d 24 1e e0 af cf db 21   ..-.....}$.....!
    0080 - cd 42 1e d2 9d cd 6b 93-d1 38 cf ea c9 b1 28 36   .B....k..8....(6
    0090 - 68 ef 51 5f f8 83 5b 41-a3 94 c5 81 e5 4d b5 bd   h.Q_..[A.....M..
    00a0 - b8 4d 0e 72 80 40 30 95-14 ef 99 44 4a af 5b 00   .M.r.@0....DJ.[.
    00b0 - dd 2b 66 b6 1b 44 65 5f-c5 14 d9 45 c1 ca 7a ce   .+f..De_...E..z.
    00c0 - 21 11 00 86 7a 67 57 c0-39 5f be 97 4a 15 61 49   !...zgW.9_..J.aI

    Start Time: 1636920291
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: yes
---

 

Any advice would be appreciated, I'm new to FreeBSD but I'm a long time emby user, premier subscriber and proponent.

Link to comment
Share on other sites

Happy2Play
4 minutes ago, leithouse said:

I've got a fresh emby install via Emby Server plugin on a new TrueNas (TrueNAS-12.0-U6.1) install and it seems like the server isn't sourcing CA data from /etc/ssl/cert.pem.

 

Attempting to fetch the list of available plugins results in the following error:

2021-11-14 19:56:14.467 Info HttpClient: HttpClientManager GET: https://www.mb3admin.com/admin/service/EmbyPackages.json
2021-11-14 19:56:14.786 Error HttpClient: Error TrustFailure getting response from 
	*** Error Report ***
	Version: 4.6.4.0
	Command line: /usr/local/lib/emby-server/system/EmbyServer.exe -os freebsd -ffmpeg /usr/local/bin/ffmpeg -ffprobe /usr/local/bin/ffprobe -programdata /var/db/emby-server -updatepackage emby-server-freebsd_{version}_amd64.txz
	Operating system: Unix 12.2.10.0 
	Framework: Mono: 6.8.0.123 (tarball Thu Nov 11 21:32:34 UTC 2021)
	OS/Process: X64/X64
	Runtime: usr/local/lib/mono/4.5/mscorlib.dll
	Processor count: 4
	Data path: /var/db/emby-server
	Application path: /usr/local/lib/emby-server/system
	System.Net.WebException: System.Net.WebException: Error: TrustFailure (Authentication failed, see inner exception.) ---> System.Security.Authentication.AuthenticationException: Authentication failed, see inner exception. ---> Mono.Btls.MonoBtlsException: Ssl error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
	  at /wrkdirs/usr/ports/lang/mono6.8/work/mono-6.8.0.123/external/boringssl/ssl/handshake_client.c:1132
	  at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00048] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status, System.Boolean renegotiate) [0x000da] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus,bool)
	  at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.AsyncProtocolRequest.ProcessOperation (System.Threading.CancellationToken cancellationToken) [0x000fc] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	   --- End of inner exception stack trace ---
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessAuthentication (System.Boolean runSynchronously, Mono.Net.Security.MonoSslAuthenticationOptions options, System.Threading.CancellationToken cancellationToken) [0x00262] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Net.WebConnectionTunnel tunnel, System.Threading.CancellationToken cancellationToken) [0x0016a] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x001ba] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	   --- End of inner exception stack trace ---
	  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x0021a] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebConnection.InitConnection (System.Net.WebOperation operation, System.Threading.CancellationToken cancellationToken) [0x00141] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebOperation.Run () [0x0009a] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebCompletionSource`1[T].WaitForCompletion () [0x00094] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.HttpWebRequest.RunWithTimeoutWorker[T] (System.Threading.Tasks.Task`1[TResult] workerTask, System.Int32 timeout, System.Action abort, System.Func`1[TResult] aborted, System.Threading.CancellationTokenSource cts) [0x000f8] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.HttpWebRequest.EndGetResponse (System.IAsyncResult asyncResult) [0x00020] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Threading.Tasks.TaskFactory`1[TResult].FromAsyncCoreLogic (System.IAsyncResult iar, System.Func`2[T,TResult] endFunction, System.Action`1[T] endAction, System.Threading.Tasks.Task`1[TResult] promise, System.Boolean requiresSynchronization) [0x0000f] in <0e6cb1433c7b46f598f86593dd03f528>:0 
	Source: System
	TargetSite: System.Net.WebResponse EndGetResponse(System.IAsyncResult)
	InnerException: System.Security.Authentication.AuthenticationException: Authentication failed, see inner exception.
	Source: mscorlib
	TargetSite: Void Throw()
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessAuthentication (System.Boolean runSynchronously, Mono.Net.Security.MonoSslAuthenticationOptions options, System.Threading.CancellationToken cancellationToken) [0x00262] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Net.WebConnectionTunnel tunnel, System.Threading.CancellationToken cancellationToken) [0x0016a] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x001ba] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	InnerException: Mono.Btls.MonoBtlsException: Ssl error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
	  at /wrkdirs/usr/ports/lang/mono6.8/work/mono-6.8.0.123/external/boringssl/ssl/handshake_client.c:1132
	Source: System
	TargetSite: Boolean ProcessHandshake()
	  at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00048] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status, System.Boolean renegotiate) [0x000da] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus,bool)
	  at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.AsyncProtocolRequest.ProcessOperation (System.Threading.CancellationToken cancellationToken) [0x000fc] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	
2021-11-14 19:56:14.791 Error Server: Error processing request
	*** Error Report ***
	Version: 4.6.4.0
	Command line: /usr/local/lib/emby-server/system/EmbyServer.exe -os freebsd -ffmpeg /usr/local/bin/ffmpeg -ffprobe /usr/local/bin/ffprobe -programdata /var/db/emby-server -updatepackage emby-server-freebsd_{version}_amd64.txz
	Operating system: Unix 12.2.10.0 
	Framework: Mono: 6.8.0.123 (tarball Thu Nov 11 21:32:34 UTC 2021)
	OS/Process: X64/X64
	Runtime: usr/local/lib/mono/4.5/mscorlib.dll
	Processor count: 4
	Data path: /var/db/emby-server
	Application path: /usr/local/lib/emby-server/system
	MediaBrowser.Model.Net.HttpException: MediaBrowser.Model.Net.HttpException: Error: TrustFailure (Authentication failed, see inner exception.) ---> System.Net.WebException: Error: TrustFailure (Authentication failed, see inner exception.) ---> System.Security.Authentication.AuthenticationException: Authentication failed, see inner exception. ---> Mono.Btls.MonoBtlsException: Ssl error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
	  at /wrkdirs/usr/ports/lang/mono6.8/work/mono-6.8.0.123/external/boringssl/ssl/handshake_client.c:1132
	  at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00048] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status, System.Boolean renegotiate) [0x000da] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus,bool)
	  at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.AsyncProtocolRequest.ProcessOperation (System.Threading.CancellationToken cancellationToken) [0x000fc] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	   --- End of inner exception stack trace ---
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessAuthentication (System.Boolean runSynchronously, Mono.Net.Security.MonoSslAuthenticationOptions options, System.Threading.CancellationToken cancellationToken) [0x00262] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Net.WebConnectionTunnel tunnel, System.Threading.CancellationToken cancellationToken) [0x0016a] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x001ba] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	   --- End of inner exception stack trace ---
	  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x0021a] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebConnection.InitConnection (System.Net.WebOperation operation, System.Threading.CancellationToken cancellationToken) [0x00141] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebOperation.Run () [0x0009a] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebCompletionSource`1[T].WaitForCompletion () [0x00094] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.HttpWebRequest.RunWithTimeoutWorker[T] (System.Threading.Tasks.Task`1[TResult] workerTask, System.Int32 timeout, System.Action abort, System.Func`1[TResult] aborted, System.Threading.CancellationTokenSource cts) [0x000f8] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.HttpWebRequest.EndGetResponse (System.IAsyncResult asyncResult) [0x00020] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Threading.Tasks.TaskFactory`1[TResult].FromAsyncCoreLogic (System.IAsyncResult iar, System.Func`2[T,TResult] endFunction, System.Action`1[T] endAction, System.Threading.Tasks.Task`1[TResult] promise, System.Boolean requiresSynchronization) [0x0000f] in <0e6cb1433c7b46f598f86593dd03f528>:0 
	   --- End of inner exception stack trace ---
	  at Emby.Server.Implementations.HttpClientManager.HttpClientManager.SendAsyncInternal (MediaBrowser.Common.Net.HttpRequestOptions options, System.String httpMethod) [0x00858] in <05979d9270ab4dafac52ba5587e41c17>:0 
	  at Emby.Server.Implementations.HttpClientManager.HttpClientManager.SendAsync (MediaBrowser.Common.Net.HttpRequestOptions options, System.String httpMethod) [0x001f4] in <05979d9270ab4dafac52ba5587e41c17>:0 
	  at Emby.Server.Implementations.Updates.InstallationManager.GetAvailablePackagesWithoutRegistrationInfo (System.Boolean enableCache, System.Threading.CancellationToken cancellationToken) [0x000da] in <05979d9270ab4dafac52ba5587e41c17>:0 
	  at Emby.Server.Implementations.Updates.InstallationManager.GetAvailablePackages (System.Threading.CancellationToken cancellationToken, System.Boolean withRegistration, System.String packageType, System.Version applicationVersion) [0x00261] in <05979d9270ab4dafac52ba5587e41c17>:0 
	  at MediaBrowser.Api.PackageService.Get (MediaBrowser.Api.GetPackages request) [0x000bd] in <59ac92013247492db051b0d14392866c>:0 
	  at Emby.Server.Implementations.Services.ServiceController.GetTaskResult (System.Threading.Tasks.Task task) [0x00081] in <05979d9270ab4dafac52ba5587e41c17>:0 
	  at Emby.Server.Implementations.Services.ServiceHandler.ProcessRequestAsync (Emby.Server.Implementations.HttpServer.HttpListenerHost appHost, MediaBrowser.Model.Services.IRequest httpReq, MediaBrowser.Model.Services.IResponse httpRes, Emby.Server.Implementations.Services.RestPath restPath, System.String responseContentType, System.Threading.CancellationToken cancellationToken) [0x001da] in <05979d9270ab4dafac52ba5587e41c17>:0 
	  at Emby.Server.Implementations.HttpServer.HttpListenerHost.RequestHandler (MediaBrowser.Model.Services.IRequest httpReq, System.ReadOnlyMemory`1[T] urlString, System.ReadOnlyMemory`1[T] localPath, System.Threading.CancellationToken cancellationToken) [0x00bcc] in <05979d9270ab4dafac52ba5587e41c17>:0 
	Source: mscorlib
	TargetSite: Void Throw()
	InnerException: System.Net.WebException: Error: TrustFailure (Authentication failed, see inner exception.)
	Source: System
	TargetSite: System.Net.WebResponse EndGetResponse(System.IAsyncResult)
	  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x0021a] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebConnection.InitConnection (System.Net.WebOperation operation, System.Threading.CancellationToken cancellationToken) [0x00141] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebOperation.Run () [0x0009a] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebCompletionSource`1[T].WaitForCompletion () [0x00094] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.HttpWebRequest.RunWithTimeoutWorker[T] (System.Threading.Tasks.Task`1[TResult] workerTask, System.Int32 timeout, System.Action abort, System.Func`1[TResult] aborted, System.Threading.CancellationTokenSource cts) [0x000f8] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.HttpWebRequest.EndGetResponse (System.IAsyncResult asyncResult) [0x00020] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Threading.Tasks.TaskFactory`1[TResult].FromAsyncCoreLogic (System.IAsyncResult iar, System.Func`2[T,TResult] endFunction, System.Action`1[T] endAction, System.Threading.Tasks.Task`1[TResult] promise, System.Boolean requiresSynchronization) [0x0000f] in <0e6cb1433c7b46f598f86593dd03f528>:0 
	InnerException: System.Security.Authentication.AuthenticationException: Authentication failed, see inner exception.
	Source: mscorlib
	TargetSite: Void Throw()
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessAuthentication (System.Boolean runSynchronously, Mono.Net.Security.MonoSslAuthenticationOptions options, System.Threading.CancellationToken cancellationToken) [0x00262] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.MonoTlsStream.CreateStream (System.Net.WebConnectionTunnel tunnel, System.Threading.CancellationToken cancellationToken) [0x0016a] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at System.Net.WebConnection.CreateStream (System.Net.WebOperation operation, System.Boolean reused, System.Threading.CancellationToken cancellationToken) [0x001ba] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	InnerException: Mono.Btls.MonoBtlsException: Ssl error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
	  at /wrkdirs/usr/ports/lang/mono6.8/work/mono-6.8.0.123/external/boringssl/ssl/handshake_client.c:1132
	Source: System
	TargetSite: Boolean ProcessHandshake()
	  at Mono.Btls.MonoBtlsContext.ProcessHandshake () [0x00048] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake (Mono.Net.Security.AsyncOperationStatus status, System.Boolean renegotiate) [0x000da] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at (wrapper remoting-invoke-with-check) Mono.Net.Security.MobileAuthenticatedStream.ProcessHandshake(Mono.Net.Security.AsyncOperationStatus,bool)
	  at Mono.Net.Security.AsyncHandshakeRequest.Run (Mono.Net.Security.AsyncOperationStatus status) [0x00006] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	  at Mono.Net.Security.AsyncProtocolRequest.ProcessOperation (System.Threading.CancellationToken cancellationToken) [0x000fc] in <2deb8ccd8f0546038e28d46e7bcc1998>:0 
	
2021-11-14 19:56:14.794 Info Server: http/1.1 Response 500 to X.X.X.X. Time: 332ms. http://emby.xxxx.net:8096/Packages?TargetSystems=Server&IsAdult=false&PackageType=UserInstalled&X-Emby-Client=Emby Web&X-Emby-Device-Name=Firefox&X-Emby-Device-Id=x-x-xx&X-Emby-Client-Version=4.6.4.0

 

Meanwhile, opening a shell in the jail and checking whether I have the proper CA certs installed is fine

root@emby:~ # openssl s_client -connect www.mb3admin.com:443 -CAfile /etc/ssl/cert.pem
CONNECTED(00000003)
depth=1 C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN =Sectigo RSA Domain Validation Secure Server CA
verify return:1
depth=0 CN = www.mb3admin.com
verify return:1
---
Certificate chain
 0 s:CN = www.mb3admin.com
   i:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
 1 s:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA
   i:C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=CN = www.mb3admin.com

issuer=C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 3711 bytes and written 413 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: FD835D4B37605817E5F56C1669FE9E6E68071DD027701133B215338EC5DBAA4E
    Session-ID-ctx:
    Master-Key: 4F3EB0D9FC0BBC1A3921A8FD9A6C579566E819861134B7E3A0C9ABC103D40D8A72E79A88318F5FB48C38DB4B5D263EE4
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - a1 49 a8 98 b0 83 18 53-63 c2 46 f9 00 59 7b 5c   .I.....Sc.F..Y{\
    0010 - bf 5d 61 77 61 26 17 c7-68 10 b8 d7 ee f2 a3 c3   .]awa&..h.......
    0020 - 3f 48 ce 2e ab af c7 1d-9f 22 29 e9 94 01 e9 70   ?H.......")....p
    0030 - 6f 4c 31 a4 f3 30 67 4a-be 0b d0 84 a2 33 16 b8   oL1..0gJ.....3..
    0040 - d8 4f e5 68 47 24 5f 68-b4 9b f3 27 a0 57 da b3   .O.hG$_h...'.W..
    0050 - bf c9 e1 86 54 95 99 b4-68 41 4e c4 17 a4 a7 de   ....T...hAN.....
    0060 - c9 18 7e d7 78 9a cf 1c-63 74 63 22 08 56 07 87   ..~.x...ctc".V..
    0070 - 91 af 2d 0f a3 bc e4 b8-7d 24 1e e0 af cf db 21   ..-.....}$.....!
    0080 - cd 42 1e d2 9d cd 6b 93-d1 38 cf ea c9 b1 28 36   .B....k..8....(6
    0090 - 68 ef 51 5f f8 83 5b 41-a3 94 c5 81 e5 4d b5 bd   h.Q_..[A.....M..
    00a0 - b8 4d 0e 72 80 40 30 95-14 ef 99 44 4a af 5b 00   .M.r.@0....DJ.[.
    00b0 - dd 2b 66 b6 1b 44 65 5f-c5 14 d9 45 c1 ca 7a ce   .+f..De_...E..z.
    00c0 - 21 11 00 86 7a 67 57 c0-39 5f be 97 4a 15 61 49   !...zgW.9_..J.aI

    Start Time: 1636920291
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: yes
---

 

Any advice would be appreciated, I'm new to FreeBSD but I'm a long time emby user, premier subscriber and proponent.

There are dozens of these topics for "TrustFailure" on this specific platform.  Not positive if the fix was pushed to 4.6.4.0 but the Beta should resolve this issue as mentioned here.

https://emby.media/community/index.php?/topic/103024-emby-unable-to-get-pictures-from-fanarttv-on-ubuntu/&do=findComment&comment=1086480

 

Edited by Happy2Play
Link to comment
Share on other sites

leithouse
6 minutes ago, Happy2Play said:

There are dozens of these topics for "TrustFailure" on this specific platform.  Not positive if the fix was pushed to 4.6.4.0 but the Beta should resolve this issue as mentioned here.

https://emby.media/community/index.php?/topic/103024-emby-unable-to-get-pictures-from-fanarttv-on-ubuntu/&do=findComment&comment=1086480

 

Thanks alot, guess I was searching for the wrong terms.

Link to comment
Share on other sites

  • 3 weeks later...
On 30/11/2021 at 18:10, Luke said:

For those who would prefer to install Emby Server from the FreeNAS/TrueNAS plugin interface rather than our sideload packages, please go here and voice your feedback that they should merge these changes in:

https://github.com/freenas/iocage-plugin-emby/pull/6

Thanks.

I just gave the feedback that they should merge this PR. It may fall on deaf ears though. It appears there was a similar PR made in April that still hasn't been merged. Hopefully a PR for the Emby plugin coming from one of the Emby Dev's will have a bit more weight to it, but even then it's been sitting untouched for nearly 3 months already.

Link to comment
Share on other sites

1 minute ago, MRobi said:

I just gave the feedback that they should merge this PR. It may fall on deaf ears though. It appears there was a similar PR made in April that still hasn't been merged. Hopefully a PR for the Emby plugin coming from one of the Emby Dev's will have a bit more weight to it, but even then it's been sitting untouched for nearly 3 months already.

Thanks !

Link to comment
Share on other sites

  • 2 months later...
Baenwort

I see that Luke's fix for the ffmpeg location was merged in!

However, the rc.d from that fix is missing ffdetect addition that @Duffyx called out in his post: 

I've left my pull request up in the hopes that it will get integrated as I have the ffdetect included. 

https://github.com/freenas/iocage-plugin-emby/pull/5/commits/df10a1217dfa71b9122681d0b95d2692e97095bb 

The other option, since Luke and MRobi seem to get responses is to adopt Duffyx's suggestion that we remove the custom rc.d from the plug-in.

Link to comment
Share on other sites

  • 6 months later...
Baenwort

So what does everyone think to converting the two Emby plug-ins into one stable and one beta plug-in? It seems duplicitous to have two plug ins whose only difference is that one uses VNET and gets its own IP and the other uses NAT and just uses a few ports on the same IP as the FreeNAS server?

I've got a modification of the NAT plug-in that would switch it to use the emby-server-devel package that tracks the beta versions. It works fine when I have it setup with VNET but I've run into a bug that I'm still trying to work through with the TrueNAS folks with the NAT plug in.

I personally like the VNET and I think having two VNET plug ins, one tracking stable and one tracking beta, that are clearly renamed in the plug in store would be more useful. 

What does everyone else think?

  • Like 1
  • Thanks 1
Link to comment
Share on other sites

  • 2 weeks later...
Baenwort

So with a lack of input except for the like and the heart I've submitted a PR on github to get the plug ins changed to a Emby Stable and a Emby Beta plug-ins with both using VNET and getting their own IPs. (as this is how I run my server and will be easier to troubleshoot)

Given the lag time on getting PRs accepted by the TrueNAS repo you all still have days or even weeks to weigh in on the change!

  • Like 1
  • Thanks 1
Link to comment
Share on other sites

adrianwi

I think this makes perfect sense, although I still wouldn't recommend anyone using TrueNAS run the plugins, especially for emby which is so easy to setup manually.

  • Like 1
Link to comment
Share on other sites

  • 5 weeks later...
Baenwort
On 8/27/2022 at 6:56 AM, adrianwi said:

I think this makes perfect sense, although I still wouldn't recommend anyone using TrueNAS run the plugins, especially for emby which is so easy to setup manually.

So the pull request got merged in.

 

https://github.com/ix-plugin-hub/iocage-plugin-index/pull/327

 

If someone has issues please poke me so I can try and help. Once again, I do wish to state that anyone here can help maintain these and I'd be super happy if anyone else would look at this code as I am not a professional coder by any stretch of the imagination. 

  • Like 1
  • Thanks 1
Link to comment
Share on other sites

  • 10 months later...
Jeffy0Boy

 

I'm installing emby following https://emby.media/truenas-server.html but i get this

root@truenas[~]# cd iocage-amd64
root@truenas[~/iocage-amd64]# iocage fetch -P emby-server.json dhcp="on" ip6="inherit" allow_mlock="on" --branch master
Plugin: emby-server
  Official Plugin: False
  Using RELEASE: 13.1-RELEASE
  Using Branch: master
  Post-install Artifact: https://github.com/MediaBrowser/iocage-amd64.git
  These pkgs will be installed:
    - audio/libogg
    - audio/libvorbis
    - audio/opus
    - converters/fribidi
    - databases/sqlite3
    - devel/icu
    - devel/libinotify
    - devel/libunwind
    - converters/libiconv
    - devel/libzvbi
    - devel/ocl-icd
    - graphics/jpeg-turbo
    - graphics/libdrm
    - graphics/png
    - graphics/tesseract
    - graphics/webp
    - multimedia/intel-media-sdk
    - multimedia/libass
    - multimedia/libtheora
    - multimedia/libva
    - print/freetype2
    - security/gnutls
    - security/krb5
    - security/openssl
    - textproc/expat2
    - x11-fonts/fontconfig

Testing Host DNS response to pkg.freebsd.org
Testing emby-server's SRV response to pkg.freebsd.org
Testing emby-server's DNSSEC response to pkg.freebsd.org

Installing plugin packages:
  - audio/libogg...
  - audio/libvorbis...
  - audio/opus...
  - converters/fribidi...
  - databases/sqlite3...
  - devel/icu...
  - devel/libinotify...
  - devel/libunwind...
  - converters/libiconv...
  - devel/libzvbi...
  - devel/ocl-icd...
  - graphics/jpeg-turbo...
  - graphics/libdrm...
  - graphics/png...
  - graphics/tesseract...
  - graphics/webp...
  - multimedia/intel-media-sdk...
  - multimedia/libass...
  - multimedia/libtheora...
  - multimedia/libva...
  - print/freetype2...
  - security/gnutls...
  - security/krb5...
  - security/openssl...
  - textproc/expat2...
  - x11-fonts/fontconfig...

Fetching artifact...
Cloning git repository

Running post_install.sh
[emby-server] Fetching emby-server-freebsd13_4.7.13.0_amd64.pkg: .......... done
[emby-server] Installing emby-server-4.7.13.0_1...
[emby-server] Installing emby-server-4.7.13.0_1...
pkg: Missing dependency 'libexif'

Failed to install the following 1 package(s): https://github.com/MediaBrowser/Emby.Releases/releases/download/4.7.13.0/emby-server-freebsd13_4.7.13.0_amd64.pkg
pkg: Missing dependency 'libexif'
emby_server_enable:  -> YES
pkg: Missing dependency 'libexif'
emby-server does not exist in /etc/rc.d or the local startup
directories (/usr/local/etc/rc.d), 

If I use the "FreeNAS plugin" installs fine.

But I get lagging and unstable perfomance.

"truenas kernel: pid 14326 (EmbyServer), jid 10, uid 989: exited on signal 11" keeps showing.

emby-server-stable

IPv4 Address:

192.168.1.9

IPv6 Address:

N/A

Version:

4.7.13.0

Plugin:

emby-server-stable

Release:

13.1-RELEASE-p9

What can i do to fix this?

___________________________________________________________________________________________

OS Version:

TrueNAS-13.0-U5.3

CPU:

Intel(R) Xeon(R) CPU E5-2620 v2 @ 2.10GHz

Model:

X9SRE/X9SRE-3F/X9SRi/X9SRi-3F

Memory:

128 GiB

Disk:

(8x8TB HDD RAIDZ2 and 2x8TB Mirror,  2x512GB SSD Mirror)

Link to comment
Share on other sites

On 8/19/2023 at 5:00 AM, Jeffy0Boy said:

 

I'm installing emby following https://emby.media/truenas-server.html but i get this

root@truenas[~]# cd iocage-amd64
root@truenas[~/iocage-amd64]# iocage fetch -P emby-server.json dhcp="on" ip6="inherit" allow_mlock="on" --branch master
Plugin: emby-server
  Official Plugin: False
  Using RELEASE: 13.1-RELEASE
  Using Branch: master
  Post-install Artifact: https://github.com/MediaBrowser/iocage-amd64.git
  These pkgs will be installed:
    - audio/libogg
    - audio/libvorbis
    - audio/opus
    - converters/fribidi
    - databases/sqlite3
    - devel/icu
    - devel/libinotify
    - devel/libunwind
    - converters/libiconv
    - devel/libzvbi
    - devel/ocl-icd
    - graphics/jpeg-turbo
    - graphics/libdrm
    - graphics/png
    - graphics/tesseract
    - graphics/webp
    - multimedia/intel-media-sdk
    - multimedia/libass
    - multimedia/libtheora
    - multimedia/libva
    - print/freetype2
    - security/gnutls
    - security/krb5
    - security/openssl
    - textproc/expat2
    - x11-fonts/fontconfig

Testing Host DNS response to pkg.freebsd.org
Testing emby-server's SRV response to pkg.freebsd.org
Testing emby-server's DNSSEC response to pkg.freebsd.org

Installing plugin packages:
  - audio/libogg...
  - audio/libvorbis...
  - audio/opus...
  - converters/fribidi...
  - databases/sqlite3...
  - devel/icu...
  - devel/libinotify...
  - devel/libunwind...
  - converters/libiconv...
  - devel/libzvbi...
  - devel/ocl-icd...
  - graphics/jpeg-turbo...
  - graphics/libdrm...
  - graphics/png...
  - graphics/tesseract...
  - graphics/webp...
  - multimedia/intel-media-sdk...
  - multimedia/libass...
  - multimedia/libtheora...
  - multimedia/libva...
  - print/freetype2...
  - security/gnutls...
  - security/krb5...
  - security/openssl...
  - textproc/expat2...
  - x11-fonts/fontconfig...

Fetching artifact...
Cloning git repository

Running post_install.sh
[emby-server] Fetching emby-server-freebsd13_4.7.13.0_amd64.pkg: .......... done
[emby-server] Installing emby-server-4.7.13.0_1...
[emby-server] Installing emby-server-4.7.13.0_1...
pkg: Missing dependency 'libexif'

Failed to install the following 1 package(s): https://github.com/MediaBrowser/Emby.Releases/releases/download/4.7.13.0/emby-server-freebsd13_4.7.13.0_amd64.pkg
pkg: Missing dependency 'libexif'
emby_server_enable:  -> YES
pkg: Missing dependency 'libexif'
emby-server does not exist in /etc/rc.d or the local startup
directories (/usr/local/etc/rc.d), 

If I use the "FreeNAS plugin" installs fine.

But I get lagging and unstable perfomance.

"truenas kernel: pid 14326 (EmbyServer), jid 10, uid 989: exited on signal 11" keeps showing.

emby-server-stable

IPv4 Address:

192.168.1.9

IPv6 Address:

N/A

Version:

4.7.13.0

Plugin:

emby-server-stable

Release:

13.1-RELEASE-p9

What can i do to fix this?

___________________________________________________________________________________________

OS Version:

TrueNAS-13.0-U5.3

CPU:

Intel(R) Xeon(R) CPU E5-2620 v2 @ 2.10GHz

Model:

X9SRE/X9SRE-3F/X9SRi/X9SRi-3F

Memory:

128 GiB

Disk:

(8x8TB HDD RAIDZ2 and 2x8TB Mirror,  2x512GB SSD Mirror)

Can you try it again?

Link to comment
Share on other sites

nstephenh

Hello, I have the truenas plugin that's been working for quite a while. I upgraded the jail and plugin yesterday and now I can't seem to access the port. The freebsd pkg command to install emby in the jail also appears to fail: 
 

pkg: An error occured while fetching package
pkg: Impossible to get the value from Last-Modified HTTP header

 

Edited by nstephenh
Link to comment
Share on other sites

nstephenh

I gave up, and instead I installed a new jail : https://emby.media/truenas-server.html
then went into there and changed the group ID of emby to be the group that has permission to access my storage using some of these steps: 


Then restoring from a backup. It's re-imported the users and is failing to scan the library, though it's downgraded versions from the beta release to the stable and that appears to be causing the issue from the logs.
Is there a way to run the beta version?

 

Link to comment
Share on other sites

nstephenh

Updated by installing the pkg in the container. Part of my issue was also that I had changed the mount point so I needed to update the path.

 It doesn't look like the backup + the changing file paths restored my watch history though. It could be because the user I ran the restore from was the user I wanted the watch history for. Any suggestions?

Link to comment
Share on other sites

1 hour ago, nstephenh said:

Updated by installing the pkg in the container. Part of my issue was also that I had changed the mount point so I needed to update the path.

 It doesn't look like the backup + the changing file paths restored my watch history though. It could be because the user I ran the restore from was the user I wanted the watch history for. Any suggestions?

Hi, please open a new topic explaining your issue and everything that you did. Thanks.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...