yacloud/acme.sh
1
0
Fork 0
mirror of https://github.com/acmesh-official/acme.sh.git synced 2025-05-05 15:34:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update generation of PKCS12 cert to use modern encryption so that Plex doesn't barf. See also: https://forums.plex.tv/t/ssl-became-broken-after-latest-pms-update/837416/10

Browse Source
This commit is contained in:
Andrew Ferguson 2023-04-16 12:24:36 -07:00
parent 718774a948
commit 660d8bc4ac
1 changed files with 16 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
deploy/plex.sh
View File

@ -37,6 +37,21 @@ plex_deploy() {
#_DEPLOY_PLEX_WIKI="https://github.com/acmesh-official/acme.sh/wiki/deploy-to-plex"
_plex_to_pkcs() {
# The existing _toPkcs command doesn't have an option to specify cipher, so copied here
# to force using a modern cipher, as required by PMS:
# https://forums.plex.tv/t/ssl-became-broken-after-latest-pms-update/837416/4
_cpfx="$1"
_ckey="$2"
_ccert="$3"
_cca="$4"
pfxPassword="$5"
${ACME_OPENSSL_BIN:-openssl} pkcs12 -export -out "$_cpfx" -certpbe AES-256-CBC -keypbe AES-256-CBC -macalg SHA256 -inkey "$_ckey" -in "$_ccert" -certfile "$_cca" -password "pass:$pfxPassword"
}
if [ -z "$PLEX_PKCS12_password" ]; then
_err "The PLEX_PKCS12_password variable is not defined. Plex requires a password for the certificate."
#_err "See: $_DEPLOY_PLEX_WIKI"
@ -61,7 +76,7 @@ plex_deploy() {
_debug "Generate import pkcs12"
if ! _toPkcs "$PLEX_PKCS12_file" "$_ckey" "$_ccert" "$_cca" "$PLEX_PKCS12_password"; then
if ! _plex_to_pkcs "$PLEX_PKCS12_file" "$_ckey" "$_ccert" "$_cca" "$PLEX_PKCS12_password"; then
_err "Error generating pkcs12. Please re-run with --debug and report a bug."
return 1
fi