HTTPS not working after cert renewal

[kodiak437 5]

Hello,

I just recently updated by cert (as i do every year) but for some reason i cant get Emby to startup with https.  The cert is working on my proxy also so dont think its an issue with the file. I have some resources that bypass the proxy external so need the https for that.  I have recreated the cert about 5 times now but still see errors in the logs each time.  Created .pfx with and without password different names and anything else i can think of but it wont start.  

Thanks in advance for your help..

 

This is the error its throwing:

2022-02-11 19:24:10.335 Error App: Error loading cert from /mnt/200TB/emby/server/certs/NewCert/wonk4.pfx
    *** Error Report ***
    Version: 4.6.7.0
    Command line: /opt/emby-server/system/EmbyServer.dll -programdata /var/lib/emby -ffdetect /opt/emby-server/bin/ffdetect -ffmpeg /opt/emby-server/bin/ffmpeg -ffprobe /opt/emby-server/bin/ffprobe -restartexitcode 3 -updatepackage emby-server-deb_{version}_amd64.deb
    Operating system: Linux version 4.19.0-8-amd64 (debian-kernel@lists.debian.org) (gcc version 8.3.0 (Debian 8.3.0-6)) #1 SMP Debian 4.19.98-1 (2020-01-26)
    Framework: .NET Core 3.1.21
    OS/Process: x64/x64
    Runtime: opt/emby-server/system/System.Private.CoreLib.dll
    Processor count: 32
    Data path: /var/lib/emby
    Application path: /opt/emby-server/system
    Interop+Crypto+OpenSslCryptographicException: Interop+Crypto+OpenSslCryptographicException: error:2006D002:BIO routines:BIO_new_file:system lib
       at Interop.Crypto.CheckValidOpenSslHandle(SafeHandle handle)
       at Internal.Cryptography.Pal.OpenSslX509CertificateReader.FromFile(String fileName, SafePasswordHandle password, X509KeyStorageFlags keyStorageFlags)
       at System.Security.Cryptography.X509Certificates.X509Certificate..ctor(String fileName, String password, X509KeyStorageFlags keyStorageFlags)
       at System.Security.Cryptography.X509Certificates.X509Certificate2..ctor(String fileName, String password)
       at Emby.Server.Implementations.ApplicationHost.GetCertificate(CertificateInfo info)
    Source: System.Security.Cryptography.X509Certificates
    TargetSite: Void CheckValidOpenSslHandle(System.Runtime.InteropServices.SafeHandle)

[Q-Droid 989]

Check the ownership/permissions of the .pfx file and make sure emby can read it.

[kodiak437 5]

Thanks Q-Droid,  i didn't check that and yes that's what it was.. I was pulling the certs from my proxy and forgot to change.   Duhh.. 

Appreciate the help!