Error ERR_CERT_DATE_INVALID, client refuses to connect

[burnchar 3]

I use Let's Encrypt to secure my Emby server for remote use and Windows ACME Simple (WACS) to set up the certificate.

I was seeing ERR_CERT_DATE_INVALID errors when visiting Emby in the browser and tried restarting IIS, early certificate renewal, killing my browser processes and restarting, clearing cache, and various other troubleshooting steps.

The solution for those with a similar issue is to restart the Emby server.

This may seem self-apparent. I knew at some level that Emby serves its own content but did not understand that it is entirely divorced from IIS and the automated process that updates IIS certificates.

Is there a way to have Emby restart itself when its certificate file updates?

 

[burnchar 3]

For the purpose of web search, the Firefox error was different: SEC_ERROR_EXPIRED_CERTIFICATE

Quote

 

Warning: Potential Security Risk Ahead

Firefox detected an issue and did not continue to some.server.org. The website is either misconfigured or your computer clock is set to the wrong time.

 

 

[Luke 42083]

Quote

Is there a way to have Emby restart itself when its certificate file updates?

Hi, no, not currently. But it is possible for the future. We'd have to start monitoring the file for changes.

[rbjtech 5284]

You can run a post renewal script to restart emby - you'll probably need to link it into the scheduler so it happens out of hours.    If you use emby as a service, then you should be able to just restart it if Direct Playing.

https://www.win-acme.com/reference/plugins/installation/script

Edited March 20, 2022 by rbjtech