Can't update plugins (Server 4.8.1.0)

[Santrex 7]

Good afternoon.
Tell me I have this problem.
I upgraded to the latest version of Server for Windows and I have a problem updating current Plugins to new versions.
Error below:

 

Check for plugin updates Failed on **********

The SSL connection could not be established, see inner exception. at Emby.Server.Implementations.HttpClientManager.CoreHttpClientManager.GetTempFileResponse(HttpRequestOptions options) at Emby.Server.Implementations.HttpClientManager.CoreHttpClientManager.GetTempFile(HttpRequestOptions options) at Emby.Server.Implementations.Updates.InstallationManager.PerformPackageInstallation(IProgress`1 progress, String target, PackageVersionInfo package, CancellationToken cancellationToken) at Emby.Server.Implementations.Updates.InstallationManager.InstallPackageInternal(PackageVersionInfo package, Boolean isPlugin, IProgress`1 progress, CancellationToken cancellationToken) at Emby.Server.Implementations.Updates.InstallationManager.InstallPackage(PackageVersionInfo package, Boolean isPlugin, IProgress`1 progress, CancellationToken cancellationToken) at Emby.Server.Implementations.ScheduledTasks.PluginUpdateTask.Execute(CancellationToken cancellationToken, IProgress`1 progress) at Emby.Server.Implementations.ScheduledTasks.ScheduledTaskWorker.ExecuteInternal(TaskOptions options)

 

[Santrex 7]

UP

[Luke 42080]

Hi there, please attach the complete emby server log file. Thanks.

How to Report a Problem

 

[Santrex 7]

embyserver.txt

[Lessaj 467]

I see basically 2 errors in your log, either "UntrustedRoot" or "NotTimeValid, UntrustedRoot". The certificate being used is signed by Let's Encrypt, which should be on all systems already. I'm surprised to see NotTimeValid because these are 3 month rolling certs, it should have been renewed at the end of December. Can you try going to this URL in your browser? Have you made any modifications to the default certificate stores on your system?

2024-02-16 14:49:39.625 Error HttpClient: Error getting response from https://embydata.com/admin/service/packageFiles/LDAP.dll_1.0.43.exe
    System.Net.Http.HttpRequestException: System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
     ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid, UntrustedRoot

Certificate chain
 0 s:CN=embydata.com
   i:C=US, O=Let's Encrypt, CN=E1
   a:PKEY: id-ecPublicKey, 256 (bit); sigalg: ecdsa-with-SHA384
   v:NotBefore: Dec 28 10:08:38 2023 GMT; NotAfter: Mar 27 10:08:37 2024 GMT
 1 s:C=US, O=Let's Encrypt, CN=E1
   i:C=US, O=Internet Security Research Group, CN=ISRG Root X2
   a:PKEY: id-ecPublicKey, 384 (bit); sigalg: ecdsa-with-SHA384
   v:NotBefore: Sep  4 00:00:00 2020 GMT; NotAfter: Sep 15 16:00:00 2025 GMT
 2 s:C=US, O=Internet Security Research Group, CN=ISRG Root X2
   i:C=US, O=Internet Security Research Group, CN=ISRG Root X1
   a:PKEY: id-ecPublicKey, 384 (bit); sigalg: RSA-SHA256
   v:NotBefore: Sep  4 00:00:00 2020 GMT; NotAfter: Sep 15 16:00:00 2025 GMT
 3 s:C=US, O=Internet Security Research Group, CN=ISRG Root X1
   i:O=Digital Signature Trust Co., CN=DST Root CA X3
   a:PKEY: rsaEncryption, 4096 (bit); sigalg: RSA-SHA256
   v:NotBefore: Jan 20 19:14:03 2021 GMT; NotAfter: Sep 30 18:14:03 2024 GMT

 

[Santrex 7]

Yes, I was able to follow the links and it works as expected:
https://embydata.com/admin/service/packageFiles/LDAP.dll_1.0.43.exe

Judging by the certificate and access to the Site, there are no problems there. (this is from the machine running EMBY Server)

[Santrex 7]

System.Net.Http.HttpRequestException
Whose .NET feature is this?
Maybe I need to update it?

[Santrex 7]

By the way, can I just download and manually replace the files with new ones?
Maybe it will be faster this way...
I can say that the "Other" Addons have been successfully updated.
The problem is only 2 of them....

[Happy2Play 9782]

Odd seeing this in a Windows but there is an issue in the cert store.

Looks like that Windows build support ended Nov 2020.  But don't know the process to update them.

Is there a reason you are on a old Windows 10 build?

Edited February 19, 2024 by Happy2Play

[Luke 42080]

@Santrexare you able to update Windows?

[Santrex 7]

I have EMBY installed on Windows Server 2019 Standard.
Unfortunately, according to our policies, there are now a number of problems with the possibility of installation. I'll look this way. (perhaps if I knew which specific Component or KB needed to be installed, I would have made more progress).
But thanks anyway!

[Luke 42080]

9 minutes ago, Santrex said:

I have EMBY installed on Windows Server 2019 Standard.
Unfortunately, according to our policies, there are now a number of problems with the possibility of installation. I'll look this way. (perhaps if I knew which specific Component or KB needed to be installed, I would have made more progress).
But thanks anyway!

OK let us know how this goes. Thanks.

[Santrex 7]

I updated the Server to the latest version and it didn't help...
I don’t know where the plug is honestly....
Well, I can download it manually... This is also not such a problem. I have 50 plugins and only 2

OS Name:                   Microsoft Windows Server 2019 Standard
OS Version:                10.0.17763 N/A Build 17763

Edited February 20, 2024 by Santrex

[Happy2Play 9782]

Sorry I really wish there was a better way to interpret version number as that version points to Redstone 5 release not server versions.

Don't have server 2019 but know my server 2016 does not have these certificate issue.

Per previous topics all the errors in your log suggest expired certificates in the cert store, but only seen on Linux systems.

Edited February 20, 2024 by Happy2Play

[Santrex 7]

Yes thank you. I will update manually. And then I’ll look... maybe I’ll find something...

 

[Luke 42080]

Let us know what you find. Thanks.