emby.media front page link to "Sign In" access HTTP instead of HTTPS

[dariusaurius 1]

Dear Emby-Team,

a couple of times today it happened to me, that I didn't notice that my remote connector was using HTTP instead of HTTPS.

Each time I have accessed the portal page for the remote connector through the front page, which didn't forwarded me to the secured HTTPS site.

Not sure if this is intended, but this could harm potentially someones whole network.

Thanks for reading and best regards 

 

 

[Luke 37064]

Hi, the problem is that the https version can only connect to your Emby Server if you have setup SSL on your server. Have you done that?

[dariusaurius 1]

Hi Luke, thanks for your response.

1. My emby Server is running in a Docker container behind a reverse proxy with the network mode "host", it shares his local IP with my Docker host.

2. The reverse proxy has an URL rewrite module to forward HTTP (80) inquires for my domain name (emby.some.domain.de) to HTTPS (443). 

3. The HTTPS inquire is forwarded to the emby servers remote HTTP (8920) port.

4. emby is configured to let the reverse proxy handle the secured connection in the network settings.

5. My domain name (emby.some.domain.de) is configured in emby. 

6. The local IP of the Docker host is also configured

If there are still any informations which myth help you identify the problem, I will gladly provide them.

Regards

 

[Luke 37064]

3 hours ago, dariusaurius said:

Hi Luke, thanks for your response.

1. My emby Server is running in a Docker container behind a reverse proxy with the network mode "host", it shares his local IP with my Docker host.

2. The reverse proxy has an URL rewrite module to forward HTTP (80) inquires for my domain name (emby.some.domain.de) to HTTPS (443). 

3. The HTTPS inquire is forwarded to the emby servers remote HTTP (8920) port.

4. emby is configured to let the reverse proxy handle the secured connection in the network settings.

5. My domain name (emby.some.domain.de) is configured in emby. 

6. The local IP of the Docker host is also configured

If there are still any informations which myth help you identify the problem, I will gladly provide them.

Regards

 

Hi, I understand. All you need to do is use https://app.emby.media

[Carlo 4330]

On 9/27/2020 at 9:20 AM, dariusaurius said:

Hi Luke, thanks for your response.

1. My emby Server is running in a Docker container behind a reverse proxy with the network mode "host", it shares his local IP with my Docker host.

2. The reverse proxy has an URL rewrite module to forward HTTP (80) inquires for my domain name (emby.some.domain.de) to HTTPS (443). 

3. The HTTPS inquire is forwarded to the emby servers remote HTTP (8920) port.

4. emby is configured to let the reverse proxy handle the secured connection in the network settings.

5. My domain name (emby.some.domain.de) is configured in emby. 

6. The local IP of the Docker host is also configured

If there are still any informations which myth help you identify the problem, I will gladly provide them.

Regards

 

Do you have a valid cert somewhere in there to handle SSL?

[dariusaurius 1]

Yes, I use an wildcard certificate from LetsEncrypt on my reverse proxy, HTTPS is fine as long as I enter manually the address "https://app.emby.media". Using the Link on the emby homepage is just linking to the the HTTP address instead of the HTTPS one

[Luke 37064]

14 minutes ago, dariusaurius said:

Yes, I use an wildcard certificate from LetsEncrypt on my reverse proxy, HTTPS is fine as long as I enter manually the address "https://app.emby.media". Using the Link on the emby homepage is just linking to the the HTTP address instead of the HTTPS one

Right now we have to do that because if we link to the https version, then users will not be able to use that unless they've setup SSL on their Emby Server.

[dariusaurius 1]

I understand, unfortunately this decision may compromise the security of the users which have SSL enabled but don't notice that SSL is not used.

For me it is now clear what I need to do, in the case I use another PC where I navigate to emby by using i.e. Google, for others maybe not.

Thanks both of you for your support!

Regards

Edited September 30, 2020 by dariusaurius

[Luke 37064]

Thanks for the feedback.