SSL cert with wildcard

[ryzilla 13]

Hi guys

 

has anyone else had issues with certs (being a wildcard) my old cert worked fine with xxx.xx.com and now i updated to *.xx.com and the cert wont load.

 

i can post logs but wanted to know if this works by default/ 

[Luke 42085]

We'd have to look at what the specific problem is. Thanks.

[ryzilla 13]

Thanks Luke this is the error

 

2018-09-10 11:00:21.369 Error App: Error loading cert from /var/lib/emby/wilcert.p12

        *** Error Report ***

        Version: 3.5.2.0

        Command line: /opt/emby-server/system/EmbyServer.dll -programdata /var/lib/emby -ffmpeg /opt/emby-server/bin/ffmpeg -ffprobe /opt/emby-server/bin/ffprobe -restartexitcode 3 -updatepackage e$

        Operating system: Unix 4.15.0.33

        64-Bit OS: True

        64-Bit Process: True

        User Interactive: True

        Processor count: 4

        Program data path: /var/lib/emby

        Application directory: /opt/emby-server/system

        Interop+Crypto+OpenSslCryptographicException: error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error

           at Internal.Cryptography.Pal.CertificatePal.FromBio(SafeBioHandle bio, SafePasswordHandle password)

           at Internal.Cryptography.Pal.CertificatePal.FromFile(String fileName, SafePasswordHandle password, X509KeyStorageFlags keyStorageFlags)

           at System.Security.Cryptography.X509Certificates.X509Certificate..ctor(String fileName, String password, X509KeyStorageFlags keyStorageFlags)

           at Emby.Server.Implementations.ApplicationHost.GetCertificate(CertificateInfo info)

        Interop+Crypto+OpenSslCryptographicException

           at Internal.Cryptography.Pal.CertificatePal.FromBio(SafeBioHandle bio, SafePasswordHandle password)

           at Internal.Cryptography.Pal.CertificatePal.FromFile(String fileName, SafePasswordHandle password, X509KeyStorageFlags keyStorageFlags)

           at System.Security.Cryptography.X509Certificates.X509Certificate..ctor(String fileName, String password, X509KeyStorageFlags keyStorageFlags)

           at Emby.Server.Implementations.ApplicationHost.GetCertificate(CertificateInfo info)

 

2018-09-10 11:00:21.490 Info ActivityRepository: Default journal_mode for /var/lib/emby/data/activitylog.db is wal

[ryzilla 13]

To add the cert generated using subdomain is the same process for the wildcard so there is nothing with the generation of the .p12 file in that sense, if i swap back to the sub.xx.com it works fine.

[Luke 42085]

Maybe this helps?

https://github.com/openssl/openssl/issues/6220

[ryzilla 13]

was kind on the right track i had to update OpenSSL when i was generation the certificate for the wildcard to OpenSSL 1.0.2p  14 Aug 2018 and we are all good

[Luke 42085]

Thanks for the feedback.

[ryzilla 13]

great work on the support as always mate