SSL Certificate Chain

[robsee]

It seems that even if you add the full certificate chain to the p12 file, the https server only serves out the server certificate. This breaks iOS clients if your cert chain has any intermediate certificates in it.

[crobibero]

Looks like it should be possible in dotnet 7.
dotnet/aspnetcore#21513

[flip-dots]

I am not certain but I think this is why I cannot play music served from Jellyfin on my Sonos speakers over DNLA. They require the full certificate chain to work over https.

[flip-dots]

Nevermind, it seems to be working now. Issue was when Jellyfin sent the media URL to the player it sent the IP address not the domain name, I fixed it by adding this to network.xml

<PublishedServerUriBySubnet>
<string>192.168.1.0/24=[Jellyfin domain name]:8920</string>
</PublishedServerUriBySubnet>

[sjorge]

Well, looks like i can stop messing with my p12. I was trying to figure out why i was not getting a correct chain (and thus issues on iOS)

[robsee]

Well, looks like i can step messing with my p12. I was trying to figure out why i was not gettint a correct chain (and thus issues on iOS)

I'm thinking of putting haproxy in front of mine to handle the SSL. That being said If you are using it with the Kodi addon, video playback is terrible with SSL enabled on that platform.

[bertmelis]

It's not only just playback, I also cannot connect through HTTPS with my browser because the chain of trust is broken.
Of course I can ignore the warning.

Should this be solved in the git version, as it has just been upgraded to .NET 7?

EDIT: Tried with the jellyfin:unstable docker image, still has broken certificate chain.

[sjorge]

EDIT: Tried with the jellyfin:unstable docker image, still has broken certificate chain.

Same, still broken in unstable at least.

[MarkCiliaVincenti]

This library would solve the SSL certificate chain issues you're having: https://github.com/MarkCiliaVincenti/TlsCertificateLoader

[jellyfin-bot]

This issue has gone 120 days without comment. To avoid abandoned issues, it will be closed in 21 days if there are no new comments.

If you're the original submitter of this issue, please comment confirming if this issue still affects you in the latest release or master branch, or close the issue if it has been fixed. If you're another user also affected by this bug, please comment confirming so. Either action will remove the stale label.

This bot exists to prevent issues from becoming stale and forgotten. Jellyfin is always moving forward, and bugs are often fixed as side effects of other changes. We therefore ask that bug report authors remain vigilant about their issues to ensure they are closed if fixed, or re-confirmed - perhaps with fresh logs or reproduction examples - regularly. If you have any questions you can reach us on Matrix or Social Media.

[robsee]

don't close, still broken