SSL error

[Dragonslee 0]

Hopefully someone can help me out here. I am looking thru the Emby logs and notice this error occurring often  "A call to SSPI failed, see inner exception." Anyone know what that means? I am trying to troubleshoot why I am not able to connect to my home server from an external location. All ports are open and the connection is setup via Emby Connect. 

 

Relevant section from the log:

 

2016-11-09 07:44:27.2913 Error HttpServer: Error in ProcessAccept
    *** Error Report ***
    Version: 3.0.8500.0
    Command line: C:\Users\Jason\AppData\Roaming\Emby-Server\System\MediaBrowser.ServerApplication.exe
    Operating system: Microsoft Windows NT 6.2.9200.0
    Processor count: 8
    64-Bit OS: True
    64-Bit Process: True
    Program data path: C:\Users\Jason\AppData\Roaming\Emby-Server
    Application Path: C:\Users\Jason\AppData\Roaming\Emby-Server\System\MediaBrowser.ServerApplication.exe
    A call to SSPI failed, see inner exception.
    System.Security.Authentication.AuthenticationException
     at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)
     at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
     at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
     at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
     at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
     at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
     at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
     at System.Net.Security.SslStream.AuthenticateAsServer(X509Certificate serverCertificate)
     at SocketHttpListener.Net.HttpConnection..ctor(ILogger logger, Socket sock, EndPointListener epl, Boolean secure, X509Certificate cert, String connectionId)
     at SocketHttpListener.Net.EndPointListener.ProcessAccept(Socket accepted)
    InnerException: System.ComponentModel.Win32Exception
    An unknown error occurred while processing the certificate

[mastrmind11 722]

Hopefully someone can help me out here. I am looking thru the Emby logs and notice this error occurring often  "A call to SSPI failed, see inner exception." Anyone know what that means? I am trying to troubleshoot why I am not able to connect to my home server from an external location. All ports are open and the connection is setup via Emby Connect. 

 

Relevant section from the log:

 

2016-11-09 07:44:27.2913 Error HttpServer: Error in ProcessAccept

    *** Error Report ***

    Version: 3.0.8500.0

    Command line: C:\Users\Jason\AppData\Roaming\Emby-Server\System\MediaBrowser.ServerApplication.exe

    Operating system: Microsoft Windows NT 6.2.9200.0

    Processor count: 8

    64-Bit OS: True

    64-Bit Process: True

    Program data path: C:\Users\Jason\AppData\Roaming\Emby-Server

    Application Path: C:\Users\Jason\AppData\Roaming\Emby-Server\System\MediaBrowser.ServerApplication.exe

    A call to SSPI failed, see inner exception.

    System.Security.Authentication.AuthenticationException

     at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)

     at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)

     at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)

     at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)

     at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)

     at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)

     at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)

     at System.Net.Security.SslStream.AuthenticateAsServer(X509Certificate serverCertificate)

     at SocketHttpListener.Net.HttpConnection..ctor(ILogger logger, Socket sock, EndPointListener epl, Boolean secure, X509Certificate cert, String connectionId)

     at SocketHttpListener.Net.EndPointListener.ProcessAccept(Socket accepted)

    InnerException: System.ComponentModel.Win32Exception

    An unknown error occurred while processing the certificate

I assume you're using HTTPS on purpose, in which case make sure your certificate is trusted.  Otherwise just use HTTP.

[Dragonslee 0]

I assume you're using HTTPS on purpose, in which case make sure your certificate is trusted.  Otherwise just use HTTP.

 

I am using HTTPS as I assumed its a more secure way to connect to my server from an external IP. As far as the certificate I never generated my own. According to the SSL settings Emby will create its own or is this something different?

 

 

Supply your own ssl certificate .pfx file. If omitted, the server will create a self-signed certificate.

Edited November 9, 2016 by Dragonslee

[Luke 42083]

What app are you connecting from when this happens? Does this happen with all Emby apps or just one?

[Dragonslee 0]

What app are you connecting from when this happens? Does this happen with all Emby apps or just one?

 

I am seeing this repeatedly so I can't be sure which one 

 

What app are you connecting from when this happens? Does this happen with all Emby apps or just one?

 

The log info above that error is showing my HTC phone so I will have to guess that it is the Emby app for Android.

[Luke 42083]

Can you please supply a log from the Android app? Instructions on how to do that can be found here:

 

https://emby.media/community/index.php?/topic/15638-how-to-report-an-android-problem/

 

Thanks !

[ToddSexington 1]

I'm having something similar to this (sorry for the cross post?)

 

Worked fine til I upgraded to windows 10. Now the WAN address is showing as http. 

 

I've worked on it for an hour plus, reissued the certificate, still nothing. 

 

Halp?

[Luke 42083]

Hi there @@ToddSexington, we'd like to help you resolve this. in order for us to best help you, please attach the information requested in how to report a problem. thanks !

[ToddSexington 1]

I've attached the server log. 

[Luke 42083]

@@ToddSexington Where is the log attached?

[ToddSexington 1]

Let's try this again. 

server-63634291199.txt

server-63634294214.txt

server-63634324236.txt

[Luke 42083]

Yea it's failing to load your cert, so either the pfx wasn't created properly or maybe it has a password?

2017-06-29 00:50:18.3329 Error App: Error loading cert from C:\Certificate\W10\EmbyW10.pfx
	*** Error Report ***
	Version: 3.2.20.0
	Command line: C:\Users\JJ\AppData\Roaming\Emby-Server\System\MediaBrowser.ServerApplication.exe
	Operating system: Microsoft Windows NT 6.2.9200.0
	64-Bit OS: True
	64-Bit Process: True
	Processor count: 4
	Program data path: C:\Users\JJ\AppData\Roaming\Emby-Server
	Application directory: C:\Users\JJ\AppData\Roaming\Emby-Server\System
	System.Security.Cryptography.CryptographicException: Access denied.
	
	   at System.Security.Cryptography.CryptographicException.ThrowCryptographicException(Int32 hr)
	   at System.Security.Cryptography.X509Certificates.X509Utils._LoadCertFromFile(String fileName, IntPtr password, UInt32 dwFlags, Boolean persistKeySet, SafeCertContextHandle& pCertCtx)
	   at System.Security.Cryptography.X509Certificates.X509Certificate.LoadCertificateFromFile(String fileName, Object password, X509KeyStorageFlags keyStorageFlags)
	   at System.Security.Cryptography.X509Certificates.X509Certificate2..ctor(String fileName, String password)
	   at Emby.Server.Core.ApplicationHost.GetCertificate(CertificateInfo info)
	System.Security.Cryptography.CryptographicException
	   at System.Security.Cryptography.CryptographicException.ThrowCryptographicException(Int32 hr)
	   at System.Security.Cryptography.X509Certificates.X509Utils._LoadCertFromFile(String fileName, IntPtr password, UInt32 dwFlags, Boolean persistKeySet, SafeCertContextHandle& pCertCtx)
	   at System.Security.Cryptography.X509Certificates.X509Certificate.LoadCertificateFromFile(String fileName, Object password, X509KeyStorageFlags keyStorageFlags)
	   at System.Security.Cryptography.X509Certificates.X509Certificate2..ctor(String fileName, String password)
	   at Emby.Server.Core.ApplicationHost.GetCertificate(CertificateInfo info)

[ToddSexington 1]

I did the conversion in MMC tge same way I did in Win 7. Should I attempt it in IIS?

[Swynol 375]

you can try this convert - https://www.sslshopper.com/ssl-converter.html

 

it doesnt 'upload' your key it keeps it in your browser session. Emby now works with a pfx password so you can also set a password on the pfx cert.

[ToddSexington 1]

No luck with either method. If Emby would accept the .cer or .p7b version, it would be a piece of cake (relatively speaking; this process is insanely complex)