HTTPS not working on TS-251+

[sstt671 1]

Hello,

 

I am not able to setup SSL on my emby server hosted on QNAP TS-251+. 

 

Server details:

QNAP TS-251+ 

Firmware  v4.3.3

Emby v3.2.14

Qmono v4.6.2.7 (64bit)

 

When I supply my own ssl cert with .pfx, I can connect via http but not https. Port forwarding is done correctly. 

Also, if I do not supply my own cert then connect via https works fine with warning.

 

Here is the log snippet:

2017-05-08 14:46:32.9377 Error App: Error loading cert from /*****/SSLcertificate.pfx
	*** Error Report ***
	Version: 3.2.14.0
	Command line: /*****/.qpkg/Emby/Emby/MediaBrowser.Server.Mono.exe
	Operating system: Unix 4.2.8.0
	64-Bit OS: True
	64-Bit Process: True
	Mono: 4.6.2 (Stable 4.6.2.7/08fd525 mercredi 23 novembre 2016, 17:45:54 (UTC+0100))
	Processor count: 4
	Program data path: /*****/.qpkg/Emby/Emby/ProgramData-Server
	Application directory: /*****/.qpkg/Emby/Emby
	System.Security.Cryptography.CryptographicException: Unable to decode certificate. ---> System.Security.Cryptography.CryptographicException: Input data cannot be coded as a valid certificate. ---> System.Security.Cryptography.CryptographicException: Input data cannot be coded as a valid certificate.
	  at Mono.Security.X509.X509Certificate.Parse (System.Byte[] data) [0x00041] in <1d0bb82c94e7435eb09324cf5ef20e36>:0 
	   --- End of inner exception stack trace ---

Any suggestions?

 

 

Thanks,

 

 

[Luke 38839]

Interesting. We have advised going forward that mono 4.8.1 is now the recommended version. In mono 4.8 they overhauled the TLS stack so I think that may affect this. I will have to discuss the rollout of mono 4.8 with our QNAP contact. Thanks.

[sstt671 1]

I am on QMono v 4.6.2.7, do you recommend that I upgrade to v4.8 ? 

[Luke 38839]

If it is available then yes.

[sstt671 1]

It is available: https://forum.qnap.com/viewtopic.php?f=214&t=109446

 

I will update the system and report back later. Thanks !

[sstt671 1]

I tired 4.8.0 and 4.8.1 both versions and got same error.

[sstt671 1]

Update: I figured out the problem(?), my original .pfx file had password. I created new one without password and now I can connect to my emby server with https.

I am on Emby v3.2.15 and QMono v4.8.1.

[sstt671 1]

Thank you Luke and Emby Team !

[Luke 38839]

Thanks for the feedback ! In a future update we will allow you to specify a password for the pfx.

[Swynol 375]

Thanks for the feedback ! In a future update we will allow you to specify a password for the pfx.

 

that's good new Luke. will the option be available for Windows Servers aswell?

[Luke 38839]

Yes.