Validation of Nx server certificate
Completed-
Dear Leen Paans,
I hope this message finds you well. I wanted to share some information regarding self-signed certificates that may be helpful to you.
Typically, self-signed certificates do not need to be removed unless you wish to replace them with an issued certificate. If you do decide to remove the certificate, simply restarting the mediaserver application should automatically generate a new self-signed certificate.
Please feel free to reach out if you have any further questions or concerns.
Best regards.
-
Dear Norman, thanks for your input. Problem is that with connecting to server I faced the Nx message "Cannot verify the identity of ". With "I trust this server", connection could be established. So I tried to get updated server certificate according instruction of Nx Server SSL certificate by removing of expired default.perm. However a new certificate with an updated expiration did not appear. With best regards.
-
Hello Leen Paans,
It's important to note that self-signed certificates cannot be verified for their identity, unlike issued certificates. In order to use a self-signed certificate, you will need to confirm that you trust the server by selecting "I trust this server". This is expected behavior. This process will repeat each time the certificate voids, but it's important to know that the renewal of self-signed certificates is now an automated process with Nx Witness v5.0.
While it's not necessary to delete any certificate, if you happen to delete one, a new certificate will be created once you restart the mediaserver application and connect with the client to that specific mediaserver.
Please let me know if you have any questions or concerns regarding this matter. I'm always here to help.
Best regards.
PS. You refer to instructions, can you clarify where you found these instructions, so we might be able to improve these instructions? -
Hello,
In reply to your PS, please find information as included.
Note: Re. your reply: "I trust this server". This is expected behavior. This process will repeat each time the certificate voids, but it's important to know that the renewal of self-signed certificates is now an automated process with Nx Witness v5.0.My answer: I have 5.0, but I do not see an automatic "renewal". With brgds Leen
-
Dear Leen Paans,
I've made some adjustments to your message to improve its readability, I hope that's okay with you.
Regarding your question about the automatic renewal of your certificate, there isn't a button or visual cue to show you when this occurs. Instead, the process happens automatically in the source code of the mediaserver application. Essentially, each time the application starts, it checks if your certificate is valid. If it is, then it's left alone, but if it has expired, it will be renewed. If it doesn't exist, it will be created upon a restart of the mediaserver application.
You don't need to take any action for this process to occur, except in the case where you have deleted your .pem file. In that situation, you will need to restart the mediaserver application (not just the client) to make sure the renewal process happens.
If you need to stop and start the mediaserver application, here's what you'll need to do:
For Windows:
- Open the task manager
- Select the "Services" tab
- Find the mediaserver application
- Right-click on it
- Choose "Stop"
- Wait for it to stop completely
- Right-click on it
- Choose "Start"
For Linux:
- Open the terminal (using Ctrl+Alt+T)
- Enter the following command: sudo systemctl restart networkoptix-mediaserver.service
That's all there is to it! Let me know if you have any further questions or concerns.
-
Dear Leen Paans,
Please follow these steps:
In the tab Services, locate the in the column Name: defaultMediaServer or in the column Description: Network Optix Media Server, right-click on it, and choose the option to stop/start or restart it. This should help you address the concern you're experiencing. See also the image below:If you have any further questions or need additional assistance, please don't hesitate to let me know.
-
Hi Leen Paans,
I hope this message finds you well. I wanted to inform you shouldn't get the mediaserver application on your computer. Instead, you should connect to the device where the mediaserver is currently running, and where the certificate was deleted.
To establish this connection, you can either physically access the device or use a remote connection application like TeamViewer, Anydesk, or similar software.
Please let me know if you have any further questions or concerns. I'll be happy to assist you.
-
Hello Norman,
I found the server! After restarting the server, via my home network, it was working ok. Only for one time. After reconnecting same problem with certificate appeared. So I will investigate again. Keep trying. For the moment I will finish with this issue. Thanks for your support. Brgds, Leen
-
Hi Leen Paans,
I hope this message finds you well. I am writing to kindly inquire about the status of the issue you were experiencing. Could you please provide me with an update?
If the issue has not been resolved yet, I would greatly appreciate it if you could share a screenshot of the notification you received. This will help me better understand the problem and work towards finding a solution as quickly as possible.
Thank you for your time and attention to this matter. I look forward to hearing back from you soon.
Best regards.
-
Dear Leen Paans,
I hope this message finds you well. Before proceeding with the purchase of a private SSL certificate, I kindly request that you share the requested screenshot with us. By doing so, we can probably can avoid any unnecessary expenses. Thank you for your cooperation.
If you like, we also can transfer this topic, into a support ticket and login remotely through TeamViewer.
Best regards,
Post is closed for comments.
Comments
15 comments