HTTPS internal is not working

[Qhris 0]

Hello,

 

i have just set up a new emby server and changed the ports for HTTP and HTTPS.

HTTP is working, but HTTPS not. Something is listening on the HTTPS port, but my browser is reporting "The secure connection has failed"

 

Do I need to do something to use the self signed certificate from emby server?

 

Best Regards,

Chris

[Luke 42085]

What operating system?

[Qhris 0]

Windows Server 2016

[Happy2Play 9783]

And are you using default port in Emby?

[Qhris 0]

I have tried it with default port 8920, but I want to use another port 3xxxx. However, both is not working.

No Firewall problem or something like that, because it is not working locally on the server, too.

 

Port check with Telnet is working and netstat is also reporting a service listening on that port.

[Happy2Play 9783]

And what client are you trying with?

[Qhris 0]

For now i have tested Firefox, Chrome and Edge. Finally I want to use it with FireTV.

[Happy2Play 9783]

The only two things that would prevent local https would be your firewall or https certificate that I am aware of.

[Qhris 0]

There is for sure no firewall issue, because telnet is able to connect to that port.

It seem to me, that the implementation of the self signed certificate is not that good?

 

It do not really have the need for a own certificate, but I would rather use HTTPS than HTTP...

[Luke 42085]

There is for sure no firewall issue, because telnet is able to connect to that port.

It seem to me, that the implementation of the self signed certificate is not that good?

 

It do not really have the need for a own certificate, but I would rather use HTTPS than HTTP...

 

You can't use the Fire TV app with a self signed cert because the device will reject the cert. For the best possible experience with SSL consider a trusted certificate such as LetsEncrypt.

[Luke 42085]

Please let us know if this helps. Thanks !

[Qhris 0]

Not really.

 

I really do not want my own certificate. This just follow in real costs and more effort.

And additionally it reduce my own privacy/security since I need to register a domain.

[Luke 42085]

Ok, unfortunately it is not possible to force all devices to accept self-signed certs, so that is why we are not putting much effort into them anymore.