app Android via HTTPS

[gobanow]

I tried to dig even deeper, created a leaf server certificate.

Key

Code:

openssl req -x509 -newkey rsa:4096 -keyout ./sever.pem -days 1000 -nodes -subj '/CN=jellyfin-server'

Csr

Code:

openssl req      \
  -new            \
  -key sever.pem \
  -subj "/CN=Jellyfin-server" \
  -out server.csr

Crt

Code:

openssl x509              \
  -req                    \
  -in server.csr          \
  -days 1000              \
  -CA intermediate.crt    \
  -CAkey intermediate-key.pem \
  -extfile <(echo -e "basicConstraints=CA:false\nkeyUsage=digitalSignature\nsubjectAltName=DNS:localhost") \
  -out server.crt

Сombining the server certificate and the intermediate one:

Code:

cat server.crt intermediate.crt > chain2.crt

Сreating PKCS12:

Code:

openssl pkcs12 -export -out jellyfin2.pfx -inkey privkey.pem -in cert.pem -CAfile chain2.crt -passout pass:12345678

I give you the rights:

Code:

chmod 644 jellyfin2.pfx

In Chrome, Jellyfin is launched via https, there is no android app
This certificate also does not want to be added to the "Security Certificates"
I don't understand where the error is