[[6.10-RC2] servername_unraid_bundle.pem gets overwritten by self signed SSL-certificate]

On 11/13/2021 at 5:11 PM, ljm42 said:

That looks like the output from an intermediary cert rather than the server's cert. What files did the company give you when you bought the cert, and how did you combine them to create Unraid-Server_unraid_bundle.pem ?

 

All working fine now, seems like wrongly formmated pem.

Thx for the help!

[[6.10-RC2] servername_unraid_bundle.pem gets overwritten by self signed SSL-certificate]

17 hours ago, ljm42 said:

The certificate is not being overwritten, but it is not in the correct format for the system to be able to parse the url.

 

Run this command on the problematic Unraid-Server_unraid_bundle.pem certificate:

  /usr/bin/openssl x509 -noout -subject -nameopt multiline -in /boot/config/ssl/certs/Unraid-Server_unraid_bundle.pem

 

And compare that to the output of a cert with the expected data:

/usr/bin/openssl x509 -noout -subject -nameopt multiline -in /boot/config/ssl/certs/certificate_bundle.pem
subject=
    commonName                = hash.unraid.net

 

The url shown on the "commonName" line has to exactly match [servername].[localTLD] (or be hash.unraid.net)

 

If run the command I get:

 

root@Unraid-Server:~# /usr/bin/openssl x509 -noout -subject -nameopt multiline -in /boot/config/ssl/certs/Unraid-Server_unraid_bundle.pem
subject=
    countryName               = GB
    stateOrProvinceName       = Greater Manchester
    localityName              = Salford
    organizationName          = Sectigo Limited
    commonName                = Sectigo RSA Domain Validation Secure Server CA
root@Unraid-Server:~#

 

What could be wrong?

It's a Wildcard cert that I use for Nginx my UDM Pro, Pihole's, all working fine.

[[6.10-RC2] servername_unraid_bundle.pem gets overwritten by self signed SSL-certificate]

16 hours ago, ljm42 said:

Probably would have been best to continue in the existing bug report, but I'll go ahead and close that one.

 

You need make sure the servername + LocalTLD matches the subject line of your certificate.

 

Please see the instructions here:

  https://wiki.unraid.net/Manual/Security#Securing_webGui_connections_.28SSL.29

Start with the introductory information, then scroll down to the "Custom certificate" section.

 

If you still have issues please upload your diagnostics.

 

Hi,

 

It's still gets overwritten by the self-signed certificate.

In attachment my diagnostics.

unraid-server-diagnostics-20211112-0956.zip

[[6.10.0 RC1] Rocket Lake S iGPU - Hardware Encoding/Decoding]

On 8/26/2021 at 1:47 PM, Ruato said:

Anyone tried this with Emby?

 

 

Hi,

 

Yes, I tested Jellyfin & Emby stable/beta docker containers and iGPU working perfect with my 11700 (including HDR tonemapping) who was still not fixed in Plex.

 

I used Plex for many years but I will switch now deciding between the free Jellyfin or Emby.

[[6.10.0 RC1] Rocket Lake S iGPU - Hardware Encoding/Decoding]

Hi,

 

Just installed Jellyfin and I must confirm no problems at all with my 11700 with IGPU on Unraid.

Also clean interface and free... maybe worth swithing

[[6.10.0 RC1] Rocket Lake S iGPU - Hardware Encoding/Decoding]

Hi,

 

Also have an Intel 11700 and no hardware acceleration on Plex...

Hope this get fixed soon... or maybe try Jellyfin

[Unraid OS version 6.10.0-rc1 available]

What's the advantage of using ipvlan over macvlan?

[[6.10-RC1] servername_unraid_bundle.pem gets overwritten by self signed SSL-certificate]

Changed Status to Open

Changed Priority to Urgent