Guest Arg Posted September 11, 2017 Posted September 11, 2017 Hi, When i try to connect to https://myserver:8920 I get a certificate error (with IE 11, Edge, Firefox at least and prob all the browsers) But I'm using a valid Let's Encrypt certificate.For instance, when I connect to my personal website with the same browser I can see that my certificate is recognized and valid (green lock).
Tur0k 148 Posted September 11, 2017 Posted September 11, 2017 Does the <myserver> match the domain your certificate is tied to? Sent from my iPhone using Tapatalk
Guest Arg Posted September 11, 2017 Posted September 11, 2017 In fact fact it says that there is no certificate.
Luke 42078 Posted September 11, 2017 Posted September 11, 2017 Have you supplied a certificate under Emby Server Advanced settings?
Solution Tur0k 148 Posted September 11, 2017 Solution Posted September 11, 2017 Have you added the certificate and password to the "custom certificate path" and "custom certificate password" fields in: Server dashboard - advanced. Sent from my iPhone using Tapatalk 1
Guest Arg Posted September 12, 2017 Posted September 12, 2017 OK, Letsencrypt doesn't give any .pfx so I had to generate it : su rootcd /etc/letsencrypt/live/myserveropenssl pkcs12 -export -out "certificate.pfx" -inkey "privkey.pem" -in "cert.pem" -certfile chain.pemcp certificate.pfx /home/embychown emby:emby Then I added /home/emby/certificate.pfx to "custom certificate path" and the .pfx password to "custom certificate password" It forced me to set an external domain ? What for ? I juste wrote myserver.net Then I restarted the server and logged in but I still get an unencrypted connection...
Guest Arg Posted September 12, 2017 Posted September 12, 2017 Ok now it works. It was prob the browser cache or something.
Tur0k 148 Posted September 14, 2017 Posted September 14, 2017 Ok now it works. It was prob the browser cache or something. glad it is working.
Guest Arg Posted September 18, 2017 Posted September 18, 2017 But I guess I will have to do this manually every two months, every time my certificate gets renewed ... Not very practical I can't really script it because it asks for a password to encrypt the .pfx
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now