Error-60 SSL certificate problem

[computerprep 148]

Same symptoms as this... https://emby.media/community/index.php?/topic/58139-error-60-ssl-certificate/

 

Except what's weird is that it's only affecting one of my external users. Inside LAN, no problem connecting directly to IP with no SSL. Externally, I have other users who are connecting with no problem on various devices.

 

One particular Roku on app version 3.0.111 gets this error message. I just renewed my certificate before this problem arose. Certificate is loaded into my reverse proxy instead of Emby, which has always worked great in the past.

[Luke 42089]

Hi there, can you please attach the emby server log? thanks.

[computerprep 148]

Server log didn't show any denied access attempts, so further research showed my certificate was generated improperly. Re-generated and all is well.

 

For anyone else finding this in the future, if your SSL is handled by a separate reverse proxy, you can (generally) skip the pfx creation for Emby. At least for me, I allow non-SSL connection internal to LAN, and require SSL over WAN. And my reverse proxy also handles an https re-write.

 

The only time someone would get a security error with this setup is if they try to connect to the LAN IP address with https and the corresponding port. But even if you load the certificate into Emby, you'll still get the security error because the certificate will be domain based, and the LAN IP is bypassing that domain name.

Edited November 29, 2018 by computerprep

[Luke 42089]

Thanks for the feedback !