Jump to content

Apple TV and reverse proxy, bug


ketiljo

Recommended Posts

There seems to be a bug in the Apple TV app that causes it to not connect to a server behind reverse proxy if the server allows for TLS1.0 or 1.1. It works perfectly fine for everything else but tvOS devices. I guess the Emby app tries with the lowest version possible and the OS is denying it to use this, letting it silently fail to find the server. 

I blocked TLS 1.0 and 1.1 in Traefik, which I'm using as my reverse proxy and I'm now able to connect with https and/or port 443.

To fix this, put this on top of the dynamic config (YAML):

tls:
    options:
      default:
        minVersion: VersionTLS12
        sniStrict: true

      mintls13:
        minVersion: VersionTLS13

I'm using Letsencrypt sertificates if that matters. 

The best would be to fix the app so that it connects with at least TLS 1.2 instead. 

You can test if the server accepts TLS 1.0 or 1.1 here: https://www.ssllabs.com/ssltest/ 

 

Edited by ketiljo
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...