mirror of
https://github.com/Lidarr/Lidarr.git
synced 2026-03-03 00:26:58 -05:00
Socksv5 and Connection to Plex Media Server not working unless Certificate Validation is disabled #4186
Labels
No labels
Area: API
Area: Database
Area: Db-migration
Area: Download Clients
Area: Extras
Area: Import Lists
Area: Indexer
Area: Metadata API
Area: Notifications
Area: Organizer
Area: Parser
Area: Scanning
Area: Tooling
Area: UI
Area: Unit Tests
Area: Update API
On Hold: MetadataAPI Blocking
Priority: High
Priority: Low
Priority: Medium
Status: Accepted
Status: Cannot Reproduce
Status: Confirmed
Status: Don't Merge
Status: Help Wanted
Status: In Progress
Status: Info Needed
Status: Investigating
Status: Logs Needed
Status: Maybe One Day
Status: Needs Triage
Status: On Hold
Status: Ready for Review
Status: Unlikely
Status: Waiting for OP
Status: Won't Fix
Type: Bug
Type: Documentation
Type: Duplicate
Type: Enhancement
Type: Enhancement
Type: External Bug
Type: Feature Request
Type: Regression
Type: Support
Type: Support.
conflict
conflict
no-conflict
not-pulled
radarr-pull
readarr-pull
sonarr upstream
sonarr-pull
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/Lidarr-Lidarr#4186
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Rycochet on GitHub (Aug 2, 2025).
Is there an existing issue for this?
Current Behavior
When using a socksv5 Proxy, and trying to add a connection to Plex Media Server (custom hostname and ssl port) it will fail to Test, disabling the proxy works properly, disabling Certificate Validation works properly.
The certificate is provided via Cloudflare, and works correctly in both Sonarr and Radarr with identical settings.
Note that https://github.com/Lidarr/Lidarr/issues/2520 is a pull from Sonarr in 2021, but may be related if something upstream has been updated.
Expected Behavior
It should connect identically when both the Proxy and Certificate Validation is enabled as when either (or both) are not.
Steps To Reproduce
Non-trivial setup, although I feel this is a symptom of a single error somewhere.
Docker compose, traefik for routing, Cloudflared for all incoming connections (even to plex itself) so all certificates are valid at all levels.
The compose setup is available here if needed.
Using
plex.example.com:443for the Plex address, and serjs/go-socks5-proxy as a socksv5 proxy (this is tested while allowing lidarr to make direct external connections, normally it isn't permitted in my server).Environment
What branch are you running?
Master
Trace Logs?
Browser network error:
Tracelog:
Trace Logs have been provided as applicable. Reports may be closed if the required logs are not provided.
trace- that are relevant and show this issue.@bakerboy448 commented on GitHub (Aug 2, 2025):
PlexProxy logic between Sonarr and Lidarr is the same. So most likely this issue would lie around the proxy logic.
openssl s_client -showcerts -connect <url>:443from