Cannot connect from Samsung and LG TVs

[Thuzad 42]

Hello,

I have a connection problem somewhere else than my home via an LG TV. I use the application directly on the store of the TV and the application has always worked and from one day to another it started not to work.

I have been trying to figure out what the problem is but I am currently stuck.

Here is some information:
* I don't see any logs on the httpd reverse proxy (apache2) coming from this ip
* I don't see any logs on the Emby server
* I tested with a PC connected to the current wifi network and was able to access Emby without any problem
* I tested connecting to Emby via the LG TV's built-in browser and it works

 

For information I have a friend who has the same problem with a Samsung TV, I also tried to debug the problem but no connection seems to be made to the server.

 

I did my tests around 22:40

Here are the httpd (apache2) logs when I was able to connect via the browser:

2021-11-08 22:44:19.728 Info Server: http/1.1 Response 302 to 90.XX.XX.XX. Time: 0ms. http://emby/
2021-11-08 22:44:53.324 Info Server: http/1.1 Response 302 to 90.XX.XX.XX. Time: 0ms. http://emby/
2021-11-08 22:44:55.635 Info Server: http/1.1 Response 200 to 90.XX.XX.XX. Time: 39ms. http://emby/web/modules/themes/logowhite.png

 

SSL labs to check certificate:

 

I send you the emby and httpd logs in private.

 

Thank you for your help

[Luke 37060]

@SamES

[CassTG 98]

@FloflobelIs your server using  letsencrypt generated ssl certficates.

If so the Samsung and LG TVs will fail as Letsencrypt revoked an existing intermediate cert unlike a pc which can update to the new certs the certs on tv's are in the firmware.

I know both LG and Samsung TV's in my house received an update this week, so may be worth checking if there is an update for your tele which has the new intermediate cert

Otherwise one solution is switching your ssl cert from LetsEncrypt to Zerossl, they are free if using certbot acme to generate and do not suffer the same issue

Edited November 9, 2021 by CassTG

[Thuzad 42]

@CassTG

Thanks for your feedback. But shouldn't I at least see a connection to the proxy server if it was a certificate issue?

I'll look on the various TVs if I see an update.

I'm using dehydrated but I'll see what I can do about the certificate.

[SamES 890]

14 hours ago, CassTG said:

If so the Samsung and LG TVs will fail as Letsencrypt revoked an existing intermediate cert unlike a pc which can update to the new certs the certs on tv's are in the firmware.

I know both LG and Samsung TV's in my house received an update this week, so may be worth checking if there is an update for your tele which has the new intermediate cert

Otherwise one solution is switching your ssl cert from LetsEncrypt to Zerossl, they are free if using certbot acme to generate and do not suffer the same issue

I would definitely suggest confirming that this is not your problem as it has caused more than a few issues recently for others.

Many people have had success with ZeroSSL, so worth trying.

[Thuzad 42]

Hi all,

I changed my certificate authority from "letsencrypt" to "ZeroSSL". And I have a friend who has a "Formuler Z8 Pro" and has exactly the same problem. I don't see any logs on my reverse proxy and even less on Emby. I don't have any blocking on the firewall because the site works fine for all my users. How can I debug the problem directly on its application?

If he goes to the site with another device on the same wifi network, he has no problem. 

Thank you !

[Luke 37060]

6 hours ago, Floflobel said:

Hi all,

I changed my certificate authority from "letsencrypt" to "ZeroSSL". And I have a friend who has a "Formuler Z8 Pro" and has exactly the same problem. I don't see any logs on my reverse proxy and even less on Emby. I don't have any blocking on the firewall because the site works fine for all my users. How can I debug the problem directly on its application?

If he goes to the site with another device on the same wifi network, he has no problem. 

Thank you !

You can't really debug it from the smart tv, you can only try things and then draw conclusions based on that. So trying plain http would be one thing to test to rule out basic connectivity.