feat: Plex Secure Connections Self Signed Certificates

[PhasecoreX]

Please check existing knowledge before opening an issue

• I have checked the documentation
• I have searched through existing issues and discussions.

Describe the new functionality

When you set the Secure Connections option in Plex (Settings > Server > Network) to "Required", it doesn't allow any communications over http, forcing https. These certificates are Lets Encrypt certificates that Plex generates on their own. When I try to set up the Plex URL in multi-scrobbler to https://192.168.0.120:32400, it will give this error:

caused by: Error [ERR_TLS_CERT_ALTNAME_INVALID]: Hostname/IP does not match certificate's altnames: IP: 192.168.0.120 is not in the cert's list

I would like to be able to scrobble from Plex while also having the Secure Connections option set to "Required". I couldn't find any option to ignore certificate errors.

Thank you!

Configuration Example

Will you help implement it?

• I am willing to contribute code towards completing this feature
• I am willing to help test preview builds for this feature

[FoxxMD]

Thanks for the report.

Can you post the full error log? I think I can make this a config option for the plex source.

[PhasecoreX]

Sure thing:

[2025-10-18 14:19:55.119 -0400] ERROR  : [App] [Sources] [Plex - PCXPlex] Could not initialize source automatically
Error: Could not initialize source automatically
    at PromisePoolExecutor.handler (CWD/src/backend/tasks/heartbeatSources.ts:26:49)
    at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
    at async PromisePoolExecutor.waitForActiveTaskToFinish (CWD/node_modules/@supercharge/promise-pool/dist/promise-pool-executor.js:375:9)
    at async PromisePoolExecutor.waitForProcessingSlot (CWD/node_modules/@supercharge/promise-pool/dist/promise-pool-executor.js:368:13)
    at async PromisePoolExecutor.process (CWD/node_modules/@supercharge/promise-pool/dist/promise-pool-executor.js:354:13)
    at async PromisePoolExecutor.start (CWD/node_modules/@supercharge/promise-pool/dist/promise-pool-executor.js:273:16)
caused by: Error: Initialization failed
    at PlexApiSource.initialize (CWD/src/backend/common/AbstractComponent.ts:84:19)
    at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
    at async PlexApiSource.tryInitialize (CWD/src/backend/common/AbstractComponent.ts:104:20)
    at async PromisePoolExecutor.handler (CWD/src/backend/tasks/heartbeatSources.ts:24:29)
    at async PromisePoolExecutor.waitForActiveTaskToFinish (CWD/node_modules/@supercharge/promise-pool/dist/promise-pool-executor.js:375:9)
    at async PromisePoolExecutor.waitForProcessingSlot (CWD/node_modules/@supercharge/promise-pool/dist/promise-pool-executor.js:368:13)
    at async PromisePoolExecutor.process (CWD/node_modules/@supercharge/promise-pool/dist/promise-pool-executor.js:354:13)
    at async PromisePoolExecutor.start (CWD/node_modules/@supercharge/promise-pool/dist/promise-pool-executor.js:273:16)
caused by: Authentication Check: Authentication test failed!
    at PlexApiSource.testAuth (CWD/src/backend/common/AbstractComponent.ts:335:19)
    at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
    at async PlexApiSource.initialize (CWD/src/backend/common/AbstractComponent.ts:72:13)
    at async PlexApiSource.tryInitialize (CWD/src/backend/common/AbstractComponent.ts:104:20)
    at async PromisePoolExecutor.handler (CWD/src/backend/tasks/heartbeatSources.ts:24:29)
    at async PromisePoolExecutor.waitForActiveTaskToFinish (CWD/node_modules/@supercharge/promise-pool/dist/promise-pool-executor.js:375:9)
    at async PromisePoolExecutor.waitForProcessingSlot (CWD/node_modules/@supercharge/promise-pool/dist/promise-pool-executor.js:368:13)
    at async PromisePoolExecutor.process (CWD/node_modules/@supercharge/promise-pool/dist/promise-pool-executor.js:354:13)
    at async PromisePoolExecutor.start (CWD/node_modules/@supercharge/promise-pool/dist/promise-pool-executor.js:273:16)
caused by: ConnectionError: Unable to make request: TypeError: fetch failed
    at <anonymous> (CWD/node_modules/@lukehagar/plexjs/src/lib/sdks.ts:293:15)
    at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
    at async $do (CWD/node_modules/@lukehagar/plexjs/src/funcs/serverGetServerCapabilities.ts:116:20)
caused by: TypeError: fetch failed
    at node:internal/deps/undici/undici:13392:13
    at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
    at async HTTPClient.request (CWD/node_modules/@lukehagar/plexjs/src/lib/http.ts:63:19)
    at async config (CWD/node_modules/@lukehagar/plexjs/src/lib/sdks.ts:253:24)
    at async retry (CWD/node_modules/@lukehagar/plexjs/src/lib/retries.ts:89:14)
    at async $do (CWD/node_modules/@lukehagar/plexjs/src/funcs/serverGetServerCapabilities.ts:116:20)
caused by: Error [ERR_TLS_CERT_ALTNAME_INVALID]: Hostname/IP does not match certificate's altnames: IP: 192.168.0.120 is not in the cert's list: 
    at Object.checkServerIdentity (node:tls:316:12)
    at TLSSocket.onConnectSecure (node:_tls_wrap:1687:27)
    at TLSSocket.emit (node:events:518:28)
    at TLSSocket._finishInit (node:_tls_wrap:1076:8)
    at ssl.onhandshakedone (node:_tls_wrap:862:12)

[FoxxMD]

@PhasecoreX please try using docker image foxxmd/multi-scrobbler:pr-373 and modify your plex file/aio configuration to include ignoreInvalidCert in options. An example:

[
  {
    "name": "PCXPlex",
    "data": {
      "token": "yourTokenHere",
      "url": "192.168.0.120:32400"
    },
     "options": {
       "ignoreInvalidCert": true
    }
  }
]

[PhasecoreX]

This works, albeit with two modifications to your example config:

1. If you don't specify https:// you get the error caused by: SocketError: other side closed.
2. The way you coded it, it's not an option, it's part of data

So, this config worked for me:

[
  {
    "name": "PCXPlex",
    "data": {
      "token": "yourTokenHere",
      "url": "https://192.168.0.120:32400",
      "ignoreInvalidCert": true
    }
  }
]

Feel free to move it back into option though if you want. I think it makes slightly more sense to be in option since it could be a common config option across sources/clients in the future. But if not then that's fine. The required https thing I think is just Plex forcefully closing the connection if it doesn't start as TLS or something. I don't really know...

[FoxxMD]

Thanks for catching that oversight! Had a busy day yesterday and didn't pay enough attention to where I was putting the parameter.

I've updated the docker image so ignoreInvalidCert is now in options.

That and docs are updated on edge docker image/master branch, which you can also use. Otherwise, it will be included in latest after I cut the next release.

[PhasecoreX]

Looks good! Thank you for adding this functionality so quickly!

[FoxxMD]

Released in 0.10.1