Jump to content

Fire TV Stick + SSL not working -> cannot connect


sualfred

Recommended Posts

sualfred

I found similar threads, but no solution to my problem.

 

The Fire TV cannot connect to my server with enabled SSL. It's working on all of my Android mobiles, three different XBOX One, on the PS4 and on all PC devices. Only the FireTV is driving me nuts.

 

My server is running the latest .NET version on Debian Jessie with a lets encrpyt certificate and I used "openssl pkcs12 -export -out cert.pfx -inkey privkey.pem -in cert.pem -certfile chain.pem -passout pass:Emby" to convert the generated cert to the .pfx format.

The cert is signed for my used dynamic DNS domain "server.xxx.net".

 

I don't see any log information on my server and I have no clue what I can do on the FireTV devices to see what's causing the problem.

 

Edit:

If I remember it correctly -> On my Android devices I was asked to trust the certificate, but not on the FireTV. Do I have to manually add it somehow/somewhere on device?

Edited by sualfred
Link to comment
Share on other sites

Being asked to trust the certificate on a client would indicate that the certificate or certificate chain is not in the devices publicly trusted stores on the client device. Are you sure you are using the publicly trusted certificate?

 

Are the android/firestick device on your local LAN?

 

 

Sent from my iPhone using Tapatalk

Edited by Tur0k
Link to comment
Share on other sites

sualfred

@@Tur0k @@Luke

 

With letsencrypt I get cert.pem, chain.pem fullchain.pem and privkey.pem.

And I convert it to the required .pfx file with 

openssl pkcs12 -export -out cert.pfx -inkey privkey.pem -in cert.pem -certfile chain.pem -passout pass:Emby

There's is nothing to adjust from my side. It's a valid and fully trusted letsencrypt certificate. But if I did something wrong, hints are welcome.

 

And it's a remote problem (dyndns + ssl is not required on a local network). I'm facing it on two different Fire TV sticks at different homes (family members). My father owns a Xbox One too, which is working.

 

 

This is the message:

vsZPTEIm.jpg

 

It is shown as soon as you add the server via the Emby for Android app. It wasn't displayed on the FireTV.

This message only appears once and only in the app. The Chrome browser on the phone instantly recognize it as trusted.

Edited by sualfred
Link to comment
Share on other sites

sualfred

I've tested it with "Emby for Android TV". Same issue. I won't get the dialog to confirm the certificate and the connection will be refused.

Edited by sualfred
Link to comment
Share on other sites

So, i have a google domain (ex: mydomain.net) I pay for. I run a reverse proxy to host multiple web services on my wan. I separate each web service by a separate subdomain (ex: Emby.mydomain.net), and use a let's encrypt SSL certificate for each of the subdomains.

 

I don't get those warnings in Emby on my browsers, iphones, iPads, amazon Fire 7 tab browser, Emby Theatre, or android TV.

 

Do note that let's encrypt can't do wildcard SSL certificates (ex: *.mydomain.net) so each subdomain has to be separately handled by a unique SSL certificate.

 

 

Have you tested your publicly accessible SSL config here: https://www.ssllabs.com

 

Sent from my iPhone using Tapatalk

Edited by Tur0k
Link to comment
Share on other sites

sualfred

Yes, I have. It's trusted. As I said, it's a common letsencrypt cert which is not a wildcard SSL.

I generated two. One is wol.mydomain.net and the other is server.mydomain.net. Both are generated on the same Raspberry PI, because the :80 and :433 port are forwarded to it. After that I converted the server.mydomain.net cert and moved it to my local Debian/Emby server. The SSL port 8920 is forwarded to this machine.

 

And the only place where I get this message (it's not a warning in my eyes) is in the Emby for Android app. Browser and all other OS based clients are working fine without any issues. The message is displayed once or if the cert has been renewed.

 

Edit:

Afaik users with the same problem solved it by using a reverse proxy, but I don't want to have my Raspberry as a required part in my network.

Edited by sualfred
Link to comment
Share on other sites

Ok, that sounds like it should work then. Also note let's encrypt certs expire every 90 days. Have you checked to confirm that it is still valid?

 

A reverse proxy should not be required to get it working. You should be able to setup and work without a reverse. I set one up because:

1. I have a single public IP and I want to host multiple web services on it without having to punch a port hole in My firewall for each.

2. It also allows me to house all my ssl certs on a single system and automate re-issuance of SSL certificates without need for my interaction.

3. I can do client certificate authentication from it as an added layer of protection.

 

Sent from my iPhone using Tapatalk

Edited by Tur0k
Link to comment
Share on other sites

sualfred

Yes, otherwise all other devices and browser would throw warnings. My certs are auto renewed.

 

The issue is based somewhere in the "Emby for Android TV" and "Emby for Fire TV" apk.

Edited by sualfred
Link to comment
Share on other sites

I ask because is seem to recall let's encrypt relies on identrust's DST root X3 certificate being in the client's trust store, and SHA-2. If the client does not have that available you could get warnings.

 

 

Sent from my iPhone using Tapatalk

Link to comment
Share on other sites

Ok, that OS should support it.

I think we should confirm that you have a clear cert chain loaded. I know you are using .net but in mono you have to add the cert chain items for your SSL cert store. Do you have to do this in .net as well?

 

You should be able to confirm that you have an intermediate cert listed with your certificate. 

https://whatsmychaincert.com/
https://www.digicert.com/help/

Sent from my iPhone using Tapatalk

Edited by Tur0k
Link to comment
Share on other sites

Search in here for Linux certificate chain.  There is a thread explaining how some Linux distros do not deliver the complete certificate chain and this causes the Fire TV to reject it.  There are solutions in the thread.

  • Like 2
Link to comment
Share on other sites

Yes, that's the one and, I guess if you're not on a mono version of Emby it wouldn't apply anymore.

 

The bottom line here is almost certainly that the certificate is being rejected though.

Link to comment
Share on other sites

sualfred

I also think so.

Grml.. I don't want to tunnel all request through a reverse proxy to get rid of this handshake problem. Is this nothing which can be fixed on the Android application side?

Link to comment
Share on other sites

sualfred

For what? I know my cert is valid. It seems to be a handshake problem of the Emby server and the Android apps.

Link to comment
Share on other sites

I also think so.

Grml.. I don't want to tunnel all request through a reverse proxy to get rid of this handshake problem. Is this nothing which can be fixed on the Android application side?

 

Afraid not.  The appstores frown on apps that try to circumvent proper SSL validation... :)

Link to comment
Share on other sites

I think you need to adjust your SSL cert configuration to list an intermediate cert in the certificate chain that is supported by the client systems. 

Link to comment
Share on other sites

sualfred

I stopped searching for a solution and configured a Apache reverse proxy for it. Now it's working with Emby for Android TV. I guess it's ok now, since it's similar to the FireTV app.

Edited by sualfred
Link to comment
Share on other sites

sualfred

@@ebr @@Luke @@Tur0k

 

I was wrong. The cert message is gone for Emby for Android, but Emby for Android Tv and Emby for FireTV still won't work. I can connect and login, but as soon as I start a playback I'll get 1 or 2 frames of the video and a busy spinner for a few seconds and the playback stops.

 

Log quote:

 
2017-12-28 20:14:08.252 Info HttpServer: HTTP POST [url=http://myreverse.proxy.domain:8096/emby/Users/AuthenticateByName?format=json]http://myreverse.proxy.domain:8096/emby/Users/AuthenticateByName?format=json[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:08.256 Info UserManager: Authentication request for gast has succeeded.
2017-12-28 20:14:08.256 Info SessionManager: Reissuing access token: 301f024dbbbc4e5393bff687fda0672c
2017-12-28 20:14:08.259 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 8ms. [url=http://myreverse.proxy.domain:8096/emby/Users/AuthenticateByName?format=json ]http://myreverse.proxy.domain:8096/emby/Users/AuthenticateByName?format=json [/url]
2017-12-28 20:14:08.445 Info HttpServer: HTTP POST [url=http://myreverse.proxy.domain:8096/emby/Sessions/Capabilities/Full]http://myreverse.proxy.domain:8096/emby/Sessions/Capabilities/Full[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:08.449 Info HttpServer: HTTP Response 204 to 109.43.2.119. Time: 4ms. [url=http://myreverse.proxy.domain:8096/emby/Sessions/Capabilities/Full ]http://myreverse.proxy.domain:8096/emby/Sessions/Capabilities/Full [/url]
2017-12-28 20:14:08.715 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/DisplayPreferences/f5ffa90a639350d66e7adea337714446bb8517a25f872dd3?userId=6e7adea337714446bb8517a25f872dd3&client=ATV&format=json]http://myreverse.proxy.domain:8096/emby/DisplayPreferences/f5ffa90a639350d66e7adea337714446bb8517a25f872dd3?userId=6e7adea337714446bb8517a25f872dd3&client=ATV&format=json[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:08.717 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 3ms. [url=http://myreverse.proxy.domain:8096/emby/DisplayPreferences/f5ffa90a639350d66e7adea337714446bb8517a25f872dd3?userId=6e7adea337714446bb8517a25f872dd3&client=ATV&format=json ]http://myreverse.proxy.domain:8096/emby/DisplayPreferences/f5ffa90a639350d66e7adea337714446bb8517a25f872dd3?userId=6e7adea337714446bb8517a25f872dd3&client=ATV&format=json [/url]
2017-12-28 20:14:09.200 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items?Filters=IsResumable&Fields=PrimaryImageAspectRatio%2COverview%2CItemCounts%2CDisplayPreferencesId&recursive=true&Limit=2&sortOrder=Descending&SortBy=DatePlayed&IncludeItemTypes=Movie&format=json]http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items?Filters=IsResumable&Fields=PrimaryImageAspectRatio%2COverview%2CItemCounts%2CDisplayPreferencesId&recursive=true&Limit=2&sortOrder=Descending&SortBy=DatePlayed&IncludeItemTypes=Movie&format=json[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:09.207 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 7ms. [url=http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items?Filters=IsResumable&Fields=PrimaryImageAspectRatio%2COverview%2CItemCounts%2CDisplayPreferencesId&recursive=true&Limit=2&sortOrder=Descending&SortBy=DatePlayed&IncludeItemTypes=Movie&format=json ]http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items?Filters=IsResumable&Fields=PrimaryImageAspectRatio%2COverview%2CItemCounts%2CDisplayPreferencesId&recursive=true&Limit=2&sortOrder=Descending&SortBy=DatePlayed&IncludeItemTypes=Movie&format=json [/url]
2017-12-28 20:14:09.238 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/System/Info?format=json]http://myreverse.proxy.domain:8096/emby/System/Info?format=json[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:09.251 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 13ms. [url=http://myreverse.proxy.domain:8096/emby/System/Info?format=json ]http://myreverse.proxy.domain:8096/emby/System/Info?format=json [/url]
2017-12-28 20:14:09.328 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/System/Endpoint?format=json]http://myreverse.proxy.domain:8096/emby/System/Endpoint?format=json[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:09.331 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 2ms. [url=http://myreverse.proxy.domain:8096/emby/System/Endpoint?format=json ]http://myreverse.proxy.domain:8096/emby/System/Endpoint?format=json [/url]
2017-12-28 20:14:09.379 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items/3cc260ea36e1824e04c846a655ffcece?format=json]http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items/3cc260ea36e1824e04c846a655ffcece?format=json[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:09.410 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 31ms. [url=http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items/3cc260ea36e1824e04c846a655ffcece?format=json ]http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items/3cc260ea36e1824e04c846a655ffcece?format=json [/url]
2017-12-28 20:14:09.431 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items?Filters=IsUnplayed&Fields=PrimaryImageAspectRatio%2COverview%2CItemCounts%2CDisplayPreferencesId&recursive=true&Limit=3&sortOrder=Descending&SortBy=DateCreated&IncludeItemTypes=Movie&format=json]http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items?Filters=IsUnplayed&Fields=PrimaryImageAspectRatio%2COverview%2CItemCounts%2CDisplayPreferencesId&recursive=true&Limit=3&sortOrder=Descending&SortBy=DateCreated&IncludeItemTypes=Movie&format=json[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:09.452 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 21ms. [url=http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items?Filters=IsUnplayed&Fields=PrimaryImageAspectRatio%2COverview%2CItemCounts%2CDisplayPreferencesId&recursive=true&Limit=3&sortOrder=Descending&SortBy=DateCreated&IncludeItemTypes=Movie&format=json ]http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items?Filters=IsUnplayed&Fields=PrimaryImageAspectRatio%2COverview%2CItemCounts%2CDisplayPreferencesId&recursive=true&Limit=3&sortOrder=Descending&SortBy=DateCreated&IncludeItemTypes=Movie&format=json [/url]
2017-12-28 20:14:09.498 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/Shows/NextUp?Limit=3&UserId=6e7adea337714446bb8517a25f872dd3&Fields=PrimaryImageAspectRatio&format=json]http://myreverse.proxy.domain:8096/emby/Shows/NextUp?Limit=3&UserId=6e7adea337714446bb8517a25f872dd3&Fields=PrimaryImageAspectRatio&format=json[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:09.550 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/System/Configuration?format=json]http://myreverse.proxy.domain:8096/emby/System/Configuration?format=json[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:09.551 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 1ms. [url=http://myreverse.proxy.domain:8096/emby/System/Configuration?format=json ]http://myreverse.proxy.domain:8096/emby/System/Configuration?format=json [/url]
2017-12-28 20:14:09.566 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/Registrations/androidtv?format=json]http://myreverse.proxy.domain:8096/emby/Registrations/androidtv?format=json[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:09.567 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 1ms. [url=http://myreverse.proxy.domain:8096/emby/Registrations/androidtv?format=json ]http://myreverse.proxy.domain:8096/emby/Registrations/androidtv?format=json [/url]
2017-12-28 20:14:09.637 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 139ms. [url=http://myreverse.proxy.domain:8096/emby/Shows/NextUp?Limit=3&UserId=6e7adea337714446bb8517a25f872dd3&Fields=PrimaryImageAspectRatio&format=json ]http://myreverse.proxy.domain:8096/emby/Shows/NextUp?Limit=3&UserId=6e7adea337714446bb8517a25f872dd3&Fields=PrimaryImageAspectRatio&format=json [/url]
2017-12-28 20:14:09.687 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Views?format=json]http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Views?format=json[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:09.688 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 2ms. [url=http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Views?format=json ]http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Views?format=json [/url]
2017-12-28 20:14:09.807 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Views?format=json]http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Views?format=json[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:09.812 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 5ms. [url=http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Views?format=json ]http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Views?format=json [/url]
2017-12-28 20:14:09.817 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items/Latest?Limit=50&IncludeItemTypes=Movie&Fields=PrimaryImageAspectRatio%2COverview&GroupItems=false&format=json]http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items/Latest?Limit=50&IncludeItemTypes=Movie&Fields=PrimaryImageAspectRatio%2COverview&GroupItems=false&format=json[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:09.817 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items?Filters=IsResumable&ImageTypeLimit=1&Fields=PrimaryImageAspectRatio%2COverview%2CItemCounts%2CDisplayPreferencesId&sortOrder=Descending&ExcludeLocationTypes=Virtual&SortBy=DatePlayed&MediaTypes=Video&EnableTotalRecordCount=false&recursive=true&Limit=50&format=json]http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items?Filters=IsResumable&ImageTypeLimit=1&Fields=PrimaryImageAspectRatio%2COverview%2CItemCounts%2CDisplayPreferencesId&sortOrder=Descending&ExcludeLocationTypes=Virtual&SortBy=DatePlayed&MediaTypes=Video&EnableTotalRecordCount=false&recursive=true&Limit=50&format=json[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:09.818 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/Shows/NextUp?Limit=50&UserId=6e7adea337714446bb8517a25f872dd3&ImageTypeLimit=1&Fields=PrimaryImageAspectRatio%2COverview%2CDateCreated&format=json]http://myreverse.proxy.domain:8096/emby/Shows/NextUp?Limit=50&UserId=6e7adea337714446bb8517a25f872dd3&ImageTypeLimit=1&Fields=PrimaryImageAspectRatio%2COverview%2CDateCreated&format=json[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:09.832 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 15ms. [url=http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items?Filters=IsResumable&ImageTypeLimit=1&Fields=PrimaryImageAspectRatio%2COverview%2CItemCounts%2CDisplayPreferencesId&sortOrder=Descending&ExcludeLocationTypes=Virtual&SortBy=DatePlayed&MediaTypes=Video&EnableTotalRecordCount=false&recursive=true&Limit=50&format=json ]http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items?Filters=IsResumable&ImageTypeLimit=1&Fields=PrimaryImageAspectRatio%2COverview%2CItemCounts%2CDisplayPreferencesId&sortOrder=Descending&ExcludeLocationTypes=Virtual&SortBy=DatePlayed&MediaTypes=Video&EnableTotalRecordCount=false&recursive=true&Limit=50&format=json [/url]
2017-12-28 20:14:09.855 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 38ms. [url=http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items/Latest?Limit=50&IncludeItemTypes=Movie&Fields=PrimaryImageAspectRatio%2COverview&GroupItems=false&format=json ]http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items/Latest?Limit=50&IncludeItemTypes=Movie&Fields=PrimaryImageAspectRatio%2COverview&GroupItems=false&format=json [/url]
2017-12-28 20:14:09.928 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items/Latest?Limit=50&IncludeItemTypes=Episode&Fields=PrimaryImageAspectRatio%2COverview&GroupItems=true&format=json]http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items/Latest?Limit=50&IncludeItemTypes=Episode&Fields=PrimaryImageAspectRatio%2COverview&GroupItems=true&format=json[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:09.999 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/Items/3cc260ea36e1824e04c846a655ffcece/Images/Primary?PercentPlayed=5&Tag=5a1af1af36ad953ef02b478fcfebd517&EnableImageEnhancers=true&MaxHeight=300]http://myreverse.proxy.domain:8096/emby/Items/3cc260ea36e1824e04c846a655ffcece/Images/Primary?PercentPlayed=5&Tag=5a1af1af36ad953ef02b478fcfebd517&EnableImageEnhancers=true&MaxHeight=300[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:10.000 Info HttpResultFactory: Transmit file /var/lib/emby/cache/images/resized-images/d/d76d43e0-325f-0db0-40ad-bedd287afe78.jpg
2017-12-28 20:14:10.000 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 1ms. [url=http://myreverse.proxy.domain:8096/emby/Items/3cc260ea36e1824e04c846a655ffcece/Images/Primary?PercentPlayed=5&Tag=5a1af1af36ad953ef02b478fcfebd517&EnableImageEnhancers=true&MaxHeight=300 ]http://myreverse.proxy.domain:8096/emby/Items/3cc260ea36e1824e04c846a655ffcece/Images/Primary?PercentPlayed=5&Tag=5a1af1af36ad953ef02b478fcfebd517&EnableImageEnhancers=true&MaxHeight=300 [/url]
2017-12-28 20:14:10.026 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 98ms. [url=http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items/Latest?Limit=50&IncludeItemTypes=Episode&Fields=PrimaryImageAspectRatio%2COverview&GroupItems=true&format=json ]http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items/Latest?Limit=50&IncludeItemTypes=Episode&Fields=PrimaryImageAspectRatio%2COverview&GroupItems=true&format=json [/url]
2017-12-28 20:14:10.042 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 224ms. [url=http://myreverse.proxy.domain:8096/emby/Shows/NextUp?Limit=50&UserId=6e7adea337714446bb8517a25f872dd3&ImageTypeLimit=1&Fields=PrimaryImageAspectRatio%2COverview%2CDateCreated&format=json ]http://myreverse.proxy.domain:8096/emby/Shows/NextUp?Limit=50&UserId=6e7adea337714446bb8517a25f872dd3&ImageTypeLimit=1&Fields=PrimaryImageAspectRatio%2COverview%2CDateCreated&format=json [/url]
2017-12-28 20:14:10.052 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/Playback/BitrateTest?Size=1000000]http://myreverse.proxy.domain:8096/emby/Playback/BitrateTest?Size=1000000[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:10.492 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 441ms. [url=http://myreverse.proxy.domain:8096/emby/Playback/BitrateTest?Size=1000000 ]http://myreverse.proxy.domain:8096/emby/Playback/BitrateTest?Size=1000000 [/url]
2017-12-28 20:14:11.405 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/Playback/BitrateTest?Size=3000000]http://myreverse.proxy.domain:8096/emby/Playback/BitrateTest?Size=3000000[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:12.051 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items/e9d2ae7f86aa4200464fee61b0261a7f?format=json]http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items/e9d2ae7f86aa4200464fee61b0261a7f?format=json[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:12.056 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 6ms. [url=http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items/e9d2ae7f86aa4200464fee61b0261a7f?format=json ]http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items/e9d2ae7f86aa4200464fee61b0261a7f?format=json [/url]
2017-12-28 20:14:12.278 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/Shows/0a8f04e63fccaf052b8b3696565ef458/Episodes?UserId=6e7adea337714446bb8517a25f872dd3&Fields=PrimaryImageAspectRatio&SeasonId=f2ee48d7c16a43c1b0659c20e0d1eefa&format=json]http://myreverse.proxy.domain:8096/emby/Shows/0a8f04e63fccaf052b8b3696565ef458/Episodes?UserId=6e7adea337714446bb8517a25f872dd3&Fields=PrimaryImageAspectRatio&SeasonId=f2ee48d7c16a43c1b0659c20e0d1eefa&format=json[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:12.285 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 8ms. [url=http://myreverse.proxy.domain:8096/emby/Shows/0a8f04e63fccaf052b8b3696565ef458/Episodes?UserId=6e7adea337714446bb8517a25f872dd3&Fields=PrimaryImageAspectRatio&SeasonId=f2ee48d7c16a43c1b0659c20e0d1eefa&format=json ]http://myreverse.proxy.domain:8096/emby/Shows/0a8f04e63fccaf052b8b3696565ef458/Episodes?UserId=6e7adea337714446bb8517a25f872dd3&Fields=PrimaryImageAspectRatio&SeasonId=f2ee48d7c16a43c1b0659c20e0d1eefa&format=json [/url]
2017-12-28 20:14:14.168 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items?IsVirtualUnaired=false&Fields=MediaSources%2CMediaStreams%2CPath%2CChapters%2COverview%2CPrimaryImageAspectRatio&recursive=false&SortBy=SortName&IncludeItemTypes=Episode&MinIndexNumber=2&ParentId=f2ee48d7c16a43c1b0659c20e0d1eefa&format=json]http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items?IsVirtualUnaired=false&Fields=MediaSources%2CMediaStreams%2CPath%2CChapters%2COverview%2CPrimaryImageAspectRatio&recursive=false&SortBy=SortName&IncludeItemTypes=Episode&MinIndexNumber=2&ParentId=f2ee48d7c16a43c1b0659c20e0d1eefa&format=json[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:14.179 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 11ms. [url=http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items?IsVirtualUnaired=false&Fields=MediaSources%2CMediaStreams%2CPath%2CChapters%2COverview%2CPrimaryImageAspectRatio&recursive=false&SortBy=SortName&IncludeItemTypes=Episode&MinIndexNumber=2&ParentId=f2ee48d7c16a43c1b0659c20e0d1eefa&format=json ]http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items?IsVirtualUnaired=false&Fields=MediaSources%2CMediaStreams%2CPath%2CChapters%2COverview%2CPrimaryImageAspectRatio&recursive=false&SortBy=SortName&IncludeItemTypes=Episode&MinIndexNumber=2&ParentId=f2ee48d7c16a43c1b0659c20e0d1eefa&format=json [/url]
2017-12-28 20:14:14.753 Info HttpServer: HTTP POST [url=http://myreverse.proxy.domain:8096/emby/Items/e9d2ae7f86aa4200464fee61b0261a7f/PlaybackInfo?format=json]http://myreverse.proxy.domain:8096/emby/Items/e9d2ae7f86aa4200464fee61b0261a7f/PlaybackInfo?format=json[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:14.757 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 5ms. [url=http://myreverse.proxy.domain:8096/emby/Items/e9d2ae7f86aa4200464fee61b0261a7f/PlaybackInfo?format=json ]http://myreverse.proxy.domain:8096/emby/Items/e9d2ae7f86aa4200464fee61b0261a7f/PlaybackInfo?format=json [/url]
2017-12-28 20:14:15.053 Info HttpServer: HTTP POST [url=http://myreverse.proxy.domain:8096/emby/Sessions/Playing]http://myreverse.proxy.domain:8096/emby/Sessions/Playing[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:15.056 Info Trakt: Playback Started
2017-12-28 20:14:15.056 Error Trakt: Event details incomplete. Cannot process current media
2017-12-28 20:14:15.056 Warn App: PlaybackStart reported with null media info.
2017-12-28 20:14:15.057 Info HttpServer: HTTP Response 204 to 109.43.2.119. Time: 4ms. [url=http://myreverse.proxy.domain:8096/emby/Sessions/Playing ]http://myreverse.proxy.domain:8096/emby/Sessions/Playing [/url]
2017-12-28 20:14:15.317 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/Videos/e9d2ae7f86aa4200464fee61b0261a7f/stream.mov?DeviceId=f5ffa90a639350d6&MediaSourceId=e9d2ae7f86aa4200464fee61b0261a7f&Static=true&Tag=c29f5f05e28dd63c0f6239ef4cc6870e]http://myreverse.proxy.domain:8096/emby/Videos/e9d2ae7f86aa4200464fee61b0261a7f/stream.mov?DeviceId=f5ffa90a639350d6&MediaSourceId=e9d2ae7f86aa4200464fee61b0261a7f&Static=true&Tag=c29f5f05e28dd63c0f6239ef4cc6870e[/url]. Host=myreverse.proxy.domain, User-Agent=Emby/1.5.22g (Linux;Android 7.0) ExoPlayerLib/2.5.3/Emby, Accept-Encoding=identity, X-Forwarded-For=109.43.2.119, X-Forwarded-Host=myreverse.proxy.domain, X-Forwarded-Server=myreverse.proxy.domain, Connection=Keep-Alive
2017-12-28 20:14:15.323 Info HttpResultFactory: Transmit file /mnt/omv3/omv3/serien/Black Sails (2014)/Season 1/Black Sails - S01E01 - Urca de Lima.mp4
2017-12-28 20:14:15.411 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 4006ms (slow). [url=http://myreverse.proxy.domain:8096/emby/Playback/BitrateTest?Size=3000000 ]http://myreverse.proxy.domain:8096/emby/Playback/BitrateTest?Size=3000000 [/url]
2017-12-28 20:14:15.657 Info HttpServer: HTTP Response 500 to 109.43.2.119. Time: 340ms. [url=http://myreverse.proxy.domain:8096/emby/Videos/e9d2ae7f86aa4200464fee61b0261a7f/stream.mov?DeviceId=f5ffa90a639350d6&MediaSourceId=e9d2ae7f86aa4200464fee61b0261a7f&Static=true&Tag=c29f5f05e28dd63c0f6239ef4cc6870e ]http://myreverse.proxy.domain:8096/emby/Videos/e9d2ae7f86aa4200464fee61b0261a7f/stream.mov?DeviceId=f5ffa90a639350d6&MediaSourceId=e9d2ae7f86aa4200464fee61b0261a7f&Static=true&Tag=c29f5f05e28dd63c0f6239ef4cc6870e [/url]
2017-12-28 20:14:15.768 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/Videos/e9d2ae7f86aa4200464fee61b0261a7f/stream.mov?DeviceId=f5ffa90a639350d6&MediaSourceId=e9d2ae7f86aa4200464fee61b0261a7f&Static=true&Tag=c29f5f05e28dd63c0f6239ef4cc6870e]http://myreverse.proxy.domain:8096/emby/Videos/e9d2ae7f86aa4200464fee61b0261a7f/stream.mov?DeviceId=f5ffa90a639350d6&MediaSourceId=e9d2ae7f86aa4200464fee61b0261a7f&Static=true&Tag=c29f5f05e28dd63c0f6239ef4cc6870e[/url]. Host=myreverse.proxy.domain, Range=bytes=1686979827-, User-Agent=Emby/1.5.22g (Linux;Android 7.0) ExoPlayerLib/2.5.3/Emby, Accept-Encoding=identity, X-Forwarded-For=109.43.2.119, X-Forwarded-Host=myreverse.proxy.domain, X-Forwarded-Server=myreverse.proxy.domain, Connection=Keep-Alive
2017-12-28 20:14:15.772 Info HttpResultFactory: Setting range response values for /mnt/omv3/omv3/serien/Black Sails (2014)/Season 1/Black Sails - S01E01 - Urca de Lima.mp4. RangeRequest: bytes=1686979827- Content-Length: 3464444, Content-Range: bytes 1686979827-1690444270/1690444271
2017-12-28 20:14:19.387 Info HttpServer: HTTP Response 206 to 109.43.2.119. Time: 3619ms (slow). [url=http://myreverse.proxy.domain:8096/emby/Videos/e9d2ae7f86aa4200464fee61b0261a7f/stream.mov?DeviceId=f5ffa90a639350d6&MediaSourceId=e9d2ae7f86aa4200464fee61b0261a7f&Static=true&Tag=c29f5f05e28dd63c0f6239ef4cc6870e ]http://myreverse.proxy.domain:8096/emby/Videos/e9d2ae7f86aa4200464fee61b0261a7f/stream.mov?DeviceId=f5ffa90a639350d6&MediaSourceId=e9d2ae7f86aa4200464fee61b0261a7f&Static=true&Tag=c29f5f05e28dd63c0f6239ef4cc6870e [/url]
2017-12-28 20:14:20.140 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/Videos/e9d2ae7f86aa4200464fee61b0261a7f/stream.mov?DeviceId=f5ffa90a639350d6&MediaSourceId=e9d2ae7f86aa4200464fee61b0261a7f&Static=true&Tag=c29f5f05e28dd63c0f6239ef4cc6870e]http://myreverse.proxy.domain:8096/emby/Videos/e9d2ae7f86aa4200464fee61b0261a7f/stream.mov?DeviceId=f5ffa90a639350d6&MediaSourceId=e9d2ae7f86aa4200464fee61b0261a7f&Static=true&Tag=c29f5f05e28dd63c0f6239ef4cc6870e[/url]. Host=myreverse.proxy.domain, Range=bytes=48-, User-Agent=Emby/1.5.22g (Linux;Android 7.0) ExoPlayerLib/2.5.3/Emby, Accept-Encoding=identity, X-Forwarded-For=109.43.2.119, X-Forwarded-Host=myreverse.proxy.domain, X-Forwarded-Server=myreverse.proxy.domain, Connection=Keep-Alive
2017-12-28 20:14:20.144 Info HttpResultFactory: Setting range response values for /mnt/omv3/omv3/serien/Black Sails (2014)/Season 1/Black Sails - S01E01 - Urca de Lima.mp4. RangeRequest: bytes=48- Content-Length: 1690444223, Content-Range: bytes 48-1690444270/1690444271
2017-12-28 20:14:21.474 Info HttpServer: HTTP Response 500 to 109.43.2.119. Time: 1334ms (slow). [url=http://myreverse.proxy.domain:8096/emby/Videos/e9d2ae7f86aa4200464fee61b0261a7f/stream.mov?DeviceId=f5ffa90a639350d6&MediaSourceId=e9d2ae7f86aa4200464fee61b0261a7f&Static=true&Tag=c29f5f05e28dd63c0f6239ef4cc6870e ]http://myreverse.proxy.domain:8096/emby/Videos/e9d2ae7f86aa4200464fee61b0261a7f/stream.mov?DeviceId=f5ffa90a639350d6&MediaSourceId=e9d2ae7f86aa4200464fee61b0261a7f&Static=true&Tag=c29f5f05e28dd63c0f6239ef4cc6870e [/url]
2017-12-28 20:14:21.538 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/DisplayPreferences/e9d2ae7f86aa4200464fee61b0261a7f?userId=6e7adea337714446bb8517a25f872dd3&client=ATV&format=json]http://myreverse.proxy.domain:8096/emby/DisplayPreferences/e9d2ae7f86aa4200464fee61b0261a7f?userId=6e7adea337714446bb8517a25f872dd3&client=ATV&format=json[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:21.541 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 3ms. [url=http://myreverse.proxy.domain:8096/emby/DisplayPreferences/e9d2ae7f86aa4200464fee61b0261a7f?userId=6e7adea337714446bb8517a25f872dd3&client=ATV&format=json ]http://myreverse.proxy.domain:8096/emby/DisplayPreferences/e9d2ae7f86aa4200464fee61b0261a7f?userId=6e7adea337714446bb8517a25f872dd3&client=ATV&format=json [/url]
2017-12-28 20:14:21.774 Info HttpServer: HTTP POST [url=http://myreverse.proxy.domain:8096/emby/Items/e9d2ae7f86aa4200464fee61b0261a7f/PlaybackInfo?format=json]http://myreverse.proxy.domain:8096/emby/Items/e9d2ae7f86aa4200464fee61b0261a7f/PlaybackInfo?format=json[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:21.785 Info HttpServer: HTTP Response 200 to 109.43.2.119. Time: 11ms. [url=http://myreverse.proxy.domain:8096/emby/Items/e9d2ae7f86aa4200464fee61b0261a7f/PlaybackInfo?format=json ]http://myreverse.proxy.domain:8096/emby/Items/e9d2ae7f86aa4200464fee61b0261a7f/PlaybackInfo?format=json [/url]
2017-12-28 20:14:22.078 Info HttpServer: HTTP POST [url=http://myreverse.proxy.domain:8096/emby/Sessions/Playing/Progress]http://myreverse.proxy.domain:8096/emby/Sessions/Playing/Progress[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:22.081 Info HttpServer: HTTP Response 204 to 109.43.2.119. Time: 3ms. [url=http://myreverse.proxy.domain:8096/emby/Sessions/Playing/Progress ]http://myreverse.proxy.domain:8096/emby/Sessions/Playing/Progress [/url]
2017-12-28 20:14:22.525 Info HttpServer: HTTP GET [url=http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items/e9d2ae7f86aa4200464fee61b0261a7f?format=json]http://myreverse.proxy.domain:8096/emby/Users/6e7adea337714446bb8517a25f872dd3/Items/e9d2ae7f86aa4200464fee61b0261a7f?format=json[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:22.527 Info HttpServer: HTTP POST [url=http://myreverse.proxy.domain:8096/emby/Sessions/Playing/Stopped]http://myreverse.proxy.domain:8096/emby/Sessions/Playing/Stopped[/url]. UserAgent: Dalvik/2.1.0 (Linux; U; Android 7.0; LG-H870 Build/NRD90U)
2017-12-28 20:14:22.530 Error Trakt: Event details incomplete. Cannot process current media
2017-12-28 20:14:22.530 Warn App: PlaybackStopped reported with null media info.
 

 

My Apache reverse config:

pi@raspberrypi:/etc/apache2/sites-available $ cat myreverse.proxy.domain.conf 

<VirtualHost *:80>
        Servername myreverse.proxy.domain
        ServerAlias myreverse.proxy.domain

        RewriteEngine on
        RewriteCond %{SERVER_NAME} =myreverse.proxy.domain
        RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,NE,R=permanent]
</VirtualHost>

pi@raspberrypi:/etc/apache2/sites-available $ cat myreverse.proxy.domain-le-ssl.conf 

<IfModule mod_ssl.c>
<VirtualHost *:443>
        ServerName myreverse.proxy.domain
        ServerAlias myreverse.proxy.domain

        <proxy *>
        AddDefaultCharset off
        Order Allow,Deny
        Allow from all
        </proxy>

        ProxyRequests     Off
        ProxyPreserveHost On

        ProxyPass "/embywebsocket" "ws://192.168.2.250:8096/embywebsocket"
        ProxyPassReverse "/embywebsocket" "ws://192.168.2.250:8096/embywebsocket"

        ProxyPass "/" "http://192.168.2.250:8096/"
        ProxyPassReverse "/" "http://192.168.2.250:8096/"

        SSLCertificateFile /etc/letsencrypt/live/myreverse.proxy.domain/fullchain.pem
        SSLCertificateKeyFile /etc/letsencrypt/live/myreverse.proxy.domain/privkey.pem
        Include /etc/letsencrypt/options-ssl-apache.conf
</VirtualHost>
</IfModule>
Any idea? Edited by sualfred
Link to comment
Share on other sites

What's happening is the OS is rejecting your cert. The mobile app has a way of working around this with the manual approval dialog but we haven't added this to the TV app as of yet.

 

Before you ask, yes we would certainly like our apps to be consistent, but the reason this hasn't been given high priority is because even if we have a manual override in android, it won't help you on other devices with other apps where such override is not possible. So it's better if you just use a cert that your devices will accept to begin with.

Link to comment
Share on other sites

sualfred

@@Luke

 

This message is already gone and the mobile app is accepting the cert without any warning, because I moved forward to use a reverse proxy to get rid of this handshake problem. With the proxy I'm suddently able connect and login to the server the Android TV and Fire TV app, but the playback transmission fails for some reasons.

 

u4waGBql.png

 

Summary edit:

web gui on Chome, Firefox, Edge (PC + mobile) -> working

ET desktop version -> working

ET UWP version -> working

iOS verison -> working

Emby for Android -> working

Emby for Android TV / Emby for FireTV -> connection and login works, playback fails.

 

If a network maniac sees an issue in my reverese proxy config, please give me a hint.

Edited by sualfred
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...