Jump to content

Questions about SSL Setup


Recommended Posts

Angelblue05
Posted

I can connect just fine with https//app.emby.media to my https server.

 

Have you tried recreating the emby connect link to your server?

mattykellyuk
Posted

Sorry what do you mean by 'recreating the emby connect link to your server?'

Angelblue05
Posted

Essentially, on your server > users > select your emby user > edit > remove the emby connect username/email > save. And then readding the information. You'll get a new email to confirm the process.

 

See if that helps any with trying to connect to your server with connect.

mattykellyuk
Posted

Essentially, on your server > users > select your emby user > edit > remove the emby connect username/email > save. And then readding the information. You'll get a new email to confirm the process.

 

See if that helps any with trying to connect to your server with connect.

 

Just done this, restarted the server and app.emby,media isn't workings at all now. Only domain:port in chrome, but my android phone app is working. I am so confused

Angelblue05
Posted (edited)

Can you please expand upon https//app.emby.media not working? At what point are you getting stuck? Is the server listed, etc?

 

Im going to catch some z. I hope you'll find the solution. The good news is your domain is up and running [emoji4]I'm sure someone will be able to help you out.

Edited by Angelblue05
mattykellyuk
Posted

Can you please expand upon https//app.emby.media not working? At what point are you getting stuck? Is the server listed, etc?

Im going to catch some z. I hope you'll find the solution. The good news is your domain is up and running [emoji4]I'm sure someone will be able to help you out.

Ok thanks for your help. I can see the server as an option but fails to connect

mattykellyuk
Posted (edited)

So still having problems with this. Seems temperamental. Emby connect now works on chrome for both http (even though emby setting is require ssl connection and that port isn't forwarded on my router, but canyouseeme.org says its open?) and https (I didn't change any settings). My phone (android) works fine on WAN but I cant seem to log in on emby for android tv or fire sticks.

 

I'm out of ideas, any help would be great.

Edited by mattykellyuk
Angelblue05
Posted

If it says it's open, it's because it is. Check your router settings. It would really help to confirm the address emby connect is using. Then you'd know what to fix. In chrome, you could inspect the page while connecting. That should show you the address it's using to connect to your server.

mattykellyuk
Posted (edited)

So I have turned off uPNP on the router and blocked http in the router firewall. Now I can't connect through emby connect anymore but my domain:port works. Still nothing for emby for android tv.

 

Canyouseeme.org still says 8096 is still open

Edited by mattykellyuk
Angelblue05
Posted

Are you able to inspect the page while on emby connect in chrome? Then try to connect and check the address it's using.

mattykellyuk
Posted

Are you able to inspect the page while on emby connect in chrome? Then try to connect and check the address it's using.

Dunno know much about inspecting but found it and under sources it does say emby.mydomain:port. But as I say it gives an error saying 'we're unable to connect..'

 

If I manually go to emby.mydomain:port is works fine

  • Like 1
Angelblue05
Posted

It's correctly prefixed with https? Everything looks correct but refuses the connection? Hmm...

mattykellyuk
Posted

It's correctly prefixed with https? Everything looks correct but refuses the connection? Hmm...

No not prefixed with the https but on the dashboard it is. 

 

On a side note I was able to log into the android app by manually entering mydomain and the port. But when I try on 'emby for android tv' it fails. Does 'emby for android tv' not support ssl?

mattykellyuk
Posted

I've given up. Might try this or something else again at some point

Posted

Emby for Android TV does support ssl but you'll need to use a certificate that Android trusts.

mattykellyuk
Posted

Emby for Android TV does support ssl but you'll need to use a certificate that Android trusts.

But it worked with android app on my phone?

Posted

Because we've added a feature to force it in the mobile app, but really that was a mistake and you are advised to use a cert that your devices will trust.

mattykellyuk
Posted

Because we've added a feature to force it in the mobile app, but really that was a mistake and you are advised to use a cert that your devices will trust.

Ok so android won't accept the free SSL certificate I got?

Angelblue05
Posted (edited)

The cert should be trusted. He's using Lets encrypt cert...

Edited by Angelblue05
Posted

It may not be on all android devices. You should check on that for yours. Thanks.

Angelblue05
Posted

Ah... I do not have an android device to test. So I can't confirm. Still doesn't explain why chrome fails to connect. It should work in chrome.

Posted (edited)

From reading the thread again, I do not believe you have a valid Cert for your domain.    From lets encrypt via ssl4free wildcard certs are not issued as standard, only DV (domain validated) certs.  ie emby.yourdomain.com is a sub domain of yourdomain.com and thus needs it's OWN certificate (valid for that domain only) UNLESS you have a wildcard certificate - which will then cover all the subdomains too.

 

In a browser - connect to your SSL emby site - 'https:\\emby.yourdomain.com:8920' - ensure you get the padlock symbol on the URL address and inspect it in detail.

 

It will tell you the Common Name (CN) - this is the only DNS name the certificate is valid for.  If it's 'emby.mydomain.com' then that's what you need to put in your emby server.  If it's only 'mydomain.com' then likewise - but that is what you will then need to connect to via your browser/emby apps.  

 

I used SSL4FREE recently and it did NOT issue a wildcard cert, just a normal one.  So make sure you enter emby.mydomain.com if you want to use an emby subdomain of mydomain.com

Edited by rbjtech
mattykellyuk
Posted

I have just had another go at this and I've lost interest. Well not interest I really want to be secure outside of LAN but this is above me. I am normally pretty good with IT, have little training about normally can get stuff done, especially with a guide but this just is over my head. Is there any plans to idiot proof this and make it more simple?

 

Thanks

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...