PEM certificate support

[shep 3]

Bringing this here from my PM conversation with Luke. Mono is rebuilding their code base that deals with certificates, and supporting PEM certs for HTTPS was mentioned. Supporting PEM would make Letsencrypt integration seamless as it generates PEM certs natively, but requires extra trickery to generate PFX certs that Emby requires.

[godfuture 5]

Looking forward to this. For now its not really nicely integrated with letsencrypt.

[Luke 40072]

We would like to improve the LetsEncrypt integration for a future release.

[Cerothen 95]

It is pretty simple to convert crts from LetsEncrypt, I do it for me, and I have written a guide how to

 

openssl pkcs12 -export -out /obt/emby/ssl/yourdomain.pfx -inkey privkey.pem -in cert.pem -certfile chain.pem -password pass:

 

run that command in your letsencrypt live folder and you are done.

I also do this, as part of the update script if a new cert is installed it creates a passwordless pfx copies it to where emby grabs it from and restarts emby.