Plugin Catalogue Not Loading

[PeterRob]

[*]The version of Jellyfin you are running (e.g. 10.8.10): 10.9.7

[*]Your installation method and platform (e.g. Linux Docker, Debian repository, Windows installer, etc.): Ubuntu apt repository

Ubuntu 24.04, armhf

Plugin catalogues do not load and an exception is shown in the log file.

System time is synchronised

Code:

[2024-06-25 01:29:00.967 +00:00] [ERR] An error occurred while accessing the plugin manifest: "https://repo.jellyfin.org/files/plugin-unstable/manifest.json"
System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid
  at System.Net.Security.SslStream.SendAuthResetSignal(ReadOnlySpan`1 alert, ExceptionDispatchInfo exception)
  at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)
  at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](Boolean receiveFirst, Byte[] reAuthenticationData, CancellationToken cancellationToken)
  at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)
  --- End of inner exception stack trace ---

[TheDreadPirate]

You need to remove the unstable plugins catalog.

In /etc/jellyfin/system.xml there will be a block for all the repos you have added to your install.

Code:

<PluginRepositories>
    <RepositoryInfo>
      <Name>Jellyfin Stable</Name>
      <Url>https://repo.jellyfin.org/files/plugin/manifest.json</Url>
      <Enabled>true</Enabled>
    </RepositoryInfo>
    <RepositoryInfo>
      <Name>Cloud9</Name>
      <Url>https://raw.githubusercontent.com/Cloud9Developer/Jellyfin-Newsletter-Plugin/master/manifest.json</Url>
      <Enabled>true</Enabled>
    </RepositoryInfo>
  </PluginRepositories>

Remove the entry for the unstable repo.

[PeterRob]

[*]

You need to remove the unstable plugins catalog.

In /etc/jellyfin/system.xml there will be a block for all the repos you have added to your install.

Code:

  <PluginRepositories>
    <RepositoryInfo>
      <Name>Jellyfin Stable</Name>
      <Url>https://repo.jellyfin.org/files/plugin/manifest.json</Url>
      <Enabled>true</Enabled>
    </RepositoryInfo>
    <RepositoryInfo>
      <Name>Cloud9</Name>
      <Url>https://raw.githubusercontent.com/Cloud9Developer/Jellyfin-Newsletter-Plugin/master/manifest.json</Url>
      <Enabled>true</Enabled>
    </RepositoryInfo>
  </PluginRepositories>

Remove the entry for the unstable repo.

[*]I've removed the unstable plugins repo:

[*]

Code:

<PluginRepositories>
    <RepositoryInfo> 
      <Name>Jellyfin Stable</Name>
      <Url>https://repo.jellyfin.org/files/plugin/manifest.json</Url>
      <Enabled>true</Enabled>
    </RepositoryInfo>
  </PluginRepositories>

[*]Error remains:
[*]

Code:

[2024-06-25 03:10:24.891 +00:00] [ERR] An error occurred while accessing the plugin manifest: "https://repo.jellyfin.org/files/plugin/manifest.json"
System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.
---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: NotTimeValid
  at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)
  at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](Boolean receiveFirst, Byte[] reAuthenticationData, CancellationToken cancellationToken)
  at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)
  --- End of inner exception stack trace ---

[TheDreadPirate]

What OS is your server running?

[PeterRob]

What OS is your server running?

Ubuntu 24.04, armhf

[TheDreadPirate]

Go to /etc/ssl/certs. Do you have a certificate in there for ISRG_Root_X1.pem?

[PeterRob]

Go to /etc/ssl/certs. Do you have a certificate in there for ISRG_Root_X1.pem?

Code:

root@hc2-2:/etc/ssl/certs# ls -al IS*
lrwxrwxrwx 1 root root 51 Dec 13  2017 ISRG_Root_X1.pem -> /usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt
lrwxrwxrwx 1 root root 51 Aug 15  2023 ISRG_Root_X2.pem -> /usr/share/ca-certificates/mozilla/ISRG_Root_X2.crt