Jellyfin does not work on Android via HTTPS

Hi
I use OMV 7.0.5-1 (Sandworm)

If this topic is not for the OMV form - sorry)

I don't use a proxy.

Jellyfin installed in Docker compose
Where did I make a mistake?

Through the browser - it works.

Through the Android mobile app Jellyfin - no.

Using the instructions for jellyfin, I'm trying to launch it via https.

Created a self-signed certificate in PKCS 12 format (I use the whole chain - root key, root certificate, intermediate certificate) in the *.pfx file

openssl pkcs12 -export -out jellyfin.pfx -inkey privkey.pem -in cert.pem -CAfile chain.crt -passout pass:12345678

where:

privkey.pem - is the private key of the certificate,

cert.pem - is a certificate in text format (PEM),

jellyfin.pfx - is the name of the resulting file,

chain.crt - is the root and intermediate certificates combined in one file: Root, First intermediate certificate, Second intermediate certificate.

chain.crt creating:

cat cert.pem intermediate.crt > chain.crt

privkey.pem and cert.pem creating:

openssl req -x509 -newkey rsa:4096 -keyout ./privkey.pem -out cert.pem -days 1000 -nodes -subj '/CN=jellyfin.lan'

intermediate.crt creating:

openssl req             \
  -new                  \
  -key intermediate.key \
  -subj "/CN=TEST Intermediate CA/C=EU/O=TEST Ltd" \
  -out intermediate.csr

openssl x509           \
  -req                 \
  -in intermediate.csr \
  -days 1000           \
  -CA cert.pem         \
  -CAkey privkey.pem   \
  -extfile <(echo -e "basicConstraints=CA:true\nkeyUsage=keyCertSign") \
  -out intermediate.crt

Through the browser - it works.

Through the Android mobile app Jellyfin - no.

writes "it is impossible to access the server".

neither via IP-address, nor via hostname.

Almost like the instructions turned out) it's a pity that it's not working yet

Where did I make a mistake?

Thanks

Quote from chente

From what I understand, the Jellyfin application for Android works basically the same as a web browser.

So it should work the same way. Have you tried simply connecting to the server with ip:8096 and entering username and password without doing anything else?

Yes, it connects via port 8096, but this http(

Does not connect via port 8920, via https

in the Chrome browser, both on PC and on mobile, everything connects well over https via port 8920

I have been studying this for more than one day, according to the instructions on the Jellyfin website - it connects through the browser, It doesn't work through the app.

I read that Android needs a full chain.pem certificate, I created it (added an intermediate certificate in pkcs 12) - it works through Chrome, It doesn't work through the app.

Installed certificates in Android manually (this pkcs 12 certificate was installed in "VPN and Application Certificates") - It doesn't work through the app.

Is someone using the Jellyfin app over https? not through a proxy, without Let's Encryption

I would be grateful if you shared your certificate creation scheme)

It seems that the problem is precisely in the certificate, which is not suitable for Android

And I will be grateful for any thoughts on which way to dig)

I tried it in legacy format, it still doesn't work

openssl pkcs12 -nodes jellyfin2.pfx certbag.pem
openssl pkcs12 -export -legacy -in certbag.pem > /tmp/legacy.p12