Letsencrypt - SSL certificate not working on my server

[dagogue671 2]

Hey guys. Need help. I renewed my SSL certificate for my server, but once I updated it, my server stops working. Now I can't reach my server outside my network.

Pretty much manually did this on my Emby server (Linux). Here is the sum up of me generating the cert and converting it to pfx file.

#certbot -certonly --standalone -d my.ddns.net

#openssl pkcs12 -export -out certificate.pfx -inkey privkey.pem -in cert.pem -certfile chain.pem -passout pass:

I normally use the guide below which works for me, but the forum is not available anymore for some reason

https://emby.media/community/index.php?/topic/42315-creating-a-letsencrypt-ssl-certificate-for-emby/\

Any help is much appreciated.

[Q-Droid 989]

Problems with your keystore are reported in the Emby server log.

 

[rbjtech 5284]

Silly question - but did you restart emby after applying the new cert ?

[dagogue671 2]

4 hours ago, rbjtech said:

Silly question - but did you restart emby after applying the new cert ?

Yeah I did. I did a service restart and even rebooted the machine.

[geranhuego 2]

9 hours ago, rbjtech said:

Silly question - but did you restart emby after applying the new cert ?

Thanks. I finally figured it out, and I didn't even think to check to logs until you mentioned it. So the issue was that Emby needs to take ownership of the pfx file. Didn't figure that out until someone said. So, the process is as follows for anyone that needs a solution:

-> Open port 80 and 443

Generate standalone certificate -> #certbot -certonly --standalone -d my.ddns.net

Create a PFX file -> #openssl pkcs12 -export -out certificate.pfx -inkey privkey.pem -in cert.pem -certfile chain.pem -passout pass:

Change file ownership to emby -> #chown -R emby:emby certificate.pfx

NOTES:

There are apparently other ways to automate the generation of certificates, I just haven't had time to explore these options

 

 

 

[Luke 42085]

Thanks for the feedback!

[geranhuego 2]

19 minutes ago, Luke said:

Thanks for the feedback!

NP. Anything to help. Emby is one of the better Media server solution IMO.