Unsecure Connection HTTP - Web App with Emby Connect Broken maybe?

[Shattered 1]

If the remote connecting server has an http url emby connect via app.emby.media doesn't seem to work. It wont let me connect to the remote connection because the web browser is forcing a secure connection and emby doesn't switch it. This is a friends server and i'm trying to not use up his device limit. I tested it in emby theater and that works, browser doesn't

I get this

Quote

 

Connection Failure

We're unable to connect to the selected server right now. Please ensure it is running and try again.

 

 

Edited October 5, 2023 by Shattered

[GrimReaper 3294]

27 minutes ago, Shattered said:

web browser is forcing a secure connection and emby doesn't switch it.

Not sure what would Emby switch if your browser is forcing https - use another browser that doesn't force https or disable forcing secure connection. Have you tried actually typing http://app.emby.media as opposed to only app.emby.media?

[Luke 37066]

Hi, I have been working on updating the error dialog to provide better info, but essentially your options are:

• use the http version http://app.emby.media - this is getting harder to do because the browser will try to force you to the https version, but you can still type it in manually
• add an https certificate to the emby server so that it can be used with https://app.emby.media

[Shattered 1]

8 hours ago, Luke said:

Hi, I have been working on updating the error dialog to provide better info, but essentially your options are:

• use the http version http://app.emby.media - this is getting harder to do because the browser will try to force you to the https version, but you can still type it in manually
• add an https certificate to the emby server so that it can be used with https://app.emby.media

is there a guide on how to do the latter so I can send it to my friend? Where does he put the https certificate? thnx

[Luke 37066]

23 hours ago, Shattered said:

is there a guide on how to do the latter so I can send it to my friend? Where does he put the https certificate? thnx

Hi, there are a lot of ways that he could obtain an SSL cert. For example: 

As far as where he puts he, he can do that in the Emby Server web interface, in the Network section.

[Boburto 4]

Sorry to revive an old topic but i have a strange issue.

My server is behind a reverse proxy which is only accessible by HTTPS, any http access is redirected to HTTPS. Also for testing i physically disabled any port 80 access into my server.

If i use https://app.emby.media everything works fine and everything is secure.

If i use http://app.emby.media everything also works fine, and the user is shown the "Not secure" warning. I'm just confused how the access can work since there is no HTTP access to the server externally. There is no mapping from port 80 into my network.

On another note, i'd like if we could enforce HTTPS when using reverse proxy. It seems this can only be forced if we use a certificate within emby.

[Luke 37066]

Hi, it's able to work because even on http://app.emby.media, the web app will still connect to your server using your https address.

[Delafuentedelfuego 0]

Good morning,

 I have a question regarding a similar problem.

 I just installed an SSL certificate from Synology to benefit from a secure HTTPS connection.  Everything works perfectly well on smartphones and PCs but does not work on TVs.  I can understand that some TVs which are not recent may not be compatible but for users of (recent) TV boxes it seems strange to me.  For the moment users must connect via HTTP but this is not optimal.
 Do you have a solution ?
 
 Good day !

[Luke 37066]

9 hours ago, Delafuentedelfuego said:

Good morning,

 I have a question regarding a similar problem.

 I just installed an SSL certificate from Synology to benefit from a secure HTTPS connection.  Everything works perfectly well on smartphones and PCs but does not work on TVs.  I can understand that some TVs which are not recent may not be compatible but for users of (recent) TV boxes it seems strange to me.  For the moment users must connect via HTTP but this is not optimal.
 Do you have a solution ?
 
 Good day !

The only solution is finding a source of SSL certificate that all of your TV's will accept. That might require purchasing one from Digicert although depending on the ages of the TV there's no guarantee that will work.

[Boburto 4]

On 2/5/2024 at 11:17 PM, Luke said:

Hi, it's able to work because even on http://app.emby.media, the web app will still connect to your server using your https address.

Will the user name and password ever be passed as plaintext? The initial connection is http so not encypted at source. 

I would feel more secure if the website defaulted to https.

[Luke 37066]

14 minutes ago, Boburto said:

Will the user name and password ever be passed as plaintext? The initial connection is http so not encypted at source. 

I would feel more secure if the website defaulted to https.

The reason why we can't force everyone to use https://app.emby.media is because those who haven't setup SSL will be unable to connect. Those people need to use http://app.emby.media

If you prefer https://app.emby.media then just simply use that. Nowadays the browsers are forcefully redirecting to the https version anyway, so if you are worried about your users accidentally using the http version, that's unlikely to happen anymore.

[Luke 37066]

@Boburtohas this answered your question?