Jump to content

Emby Android and Client Certificate Authentication


soloam
 Share

Recommended Posts

soloam
Hello, I wanted I have my emby server running on a server that is accessed by a reverse proxy. This allows me to have multiple domains (other services) under the same IP address. This works great, and I have it running for some time now.

 

Now I would like to enhance the security by adding a required Client Certificate Authentication, so that only authorised personal have access to the server. I configured it on the reverse proxy, and now when I access the server by the Webbrowser (desktop and android) it works, only people that have the certificate installed can communicate with the server. But the app does not work. When I access by the browser it asks me what is the client certificate to use, but in the app I simply can't connect.

 

Is this possible? Or I have some miss configuration?

 

Thank you

Edited by soloam
Link to comment
Share on other sites

Hi, I'm afraid we've never tested this requirement in the android app before. Additionally we also configure the http server to not require client certificate validation, so what you're looking for would require server-side changes anyway.

Link to comment
Share on other sites

soloam

But this works 100% on the browser, on my desktop and my android phone. The problem is the app's, they don't take into account the client certificate authentication. Please note that all this is done on the reverse proxy side, nothing needs to be changed on emby server. 

Link to comment
Share on other sites

  • 3 years later...
EmbyForEver

Hi I see there is no much activity on this topic, but I would also feel much more comfortable to enable client side certificate support in Emby android App.

For instance Chrome is supporting it, you simply have to install client certificate in Android certificate store and then applications can use it. For instance this blog post to see to support this in the Android App. https://chariotsolutions.com/blog/post/https-with-client-certificates-on/

Looks like a relatively contained change that would add great security value!!

Any chance this feature request could be considered? Any way we could help?

Thx!

Link to comment
Share on other sites

7 hours ago, EmbyForEver said:

Hi I see there is no much activity on this topic, but I would also feel much more comfortable to enable client side certificate support in Emby android App.

For instance Chrome is supporting it, you simply have to install client certificate in Android certificate store and then applications can use it. For instance this blog post to see to support this in the Android App. https://chariotsolutions.com/blog/post/https-with-client-certificates-on/

Looks like a relatively contained change that would add great security value!!

Any chance this feature request could be considered? Any way we could help?

Thx!

HI, yes it's possible for the future. Thanks for the feedback.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

×
×
  • Create New...