Borghez 0 Posted December 21, 2020 Share Posted December 21, 2020 Salve a tutti, chiedevo se è stato risolto il problema con Lg per quanto riguarda connettersi a Emby tramite SSL in http funziona senza problemi da app, con https non accede più al server, si può ovviare al problema? Ho provato anche con Emby Connect ma non cambia niente. Grazie in anticipo per il vostro aiuto. Link to comment Share on other sites More sharing options...
Luke 37098 Posted December 21, 2020 Share Posted December 21, 2020 Ciao, SSL funziona perfettamente con LG ma devi utilizzare un certificato SSL di cui i dispositivi LG si fidano. Non possiamo fare nulla per forzarlo ad accettare altri certificati. Link to comment Share on other sites More sharing options...
Luke 37098 Posted December 21, 2020 Share Posted December 21, 2020 @SamES do you recall what SSL certificates are trusted by LG ? Link to comment Share on other sites More sharing options...
SamES 891 Posted December 21, 2020 Share Posted December 21, 2020 The list of root certs is available here by webos version, but it's one big PEM file so it needs to be split up and the certificate providers extracted into a readable list. See bottom of this page ::: LG | webOS TV Developer :: Web Engine (lge.com) I will extract it tonight into a list Link to comment Share on other sites More sharing options...
SamES 891 Posted December 21, 2020 Share Posted December 21, 2020 This is not pretty, but let me know you want it differently. This is for webos 5.0 (2020), so if you have an older model, just let me know what webos version it is using certlist by issuer.txt Extract this if you want each individual root certificate. I haven't given them any useful names, so not easy to browse, but let me know if you're looking for something in particular Archive.zip Link to comment Share on other sites More sharing options...
Borghez 0 Posted December 21, 2020 Author Share Posted December 21, 2020 (edited) Il modello di SmartTv LG se può è 49UJ635V-ZF io ho comprato il certificato ssl sul sito di no-ip e ho un dominio free e da quello mi sono tirato fuori il file per far funzionare emby in ssl che è installato su un Nas QNAP Edited December 21, 2020 by Borghez Link to comment Share on other sites More sharing options...
SamES 891 Posted December 21, 2020 Share Posted December 21, 2020 (edited) OK, that TV is webOS 3.5. I can give you a different list for that TV, but it's probably not much different. I suspect that if it is not supported in webOS 5.0 (list in my previous post) then it is unlikely to be in the webOS 3.5 list. I assume you bought the RapidSSL certificate. I can't see that Issuer in the list, but I can see the GeoTrust Issuer,. Their cert is more expensive, and I couldn't guarantee that it will work Issuer: C = US, O = GeoTrust Inc., CN = GeoTrust Global CA Issuer: C = US, O = GeoTrust Inc., CN = GeoTrust Global CA 2 Issuer: C = US, O = GeoTrust Inc., CN = GeoTrust Primary Certification Authority Issuer: C = US, O = GeoTrust Inc., CN = GeoTrust Universal CA Issuer: C = US, O = GeoTrust Inc., CN = GeoTrust Universal CA 2 Issuer: C = US, O = GeoTrust Inc., OU = (c) 2007 GeoTrust Inc. - For authorized use only, CN = GeoTrust Primary Certification Authority - G2 Issuer: C = US, O = GeoTrust Inc., OU = (c) 2008 GeoTrust Inc. - For authorized use only, CN = GeoTrust Primary Certification Authority - G3 Edited December 21, 2020 by SamES Link to comment Share on other sites More sharing options...
Borghez 0 Posted December 21, 2020 Author Share Posted December 21, 2020 (edited) Io ho fatto un dominio free su no-ip, poi ho comprato un licenza ssl sempre da loro sul mio dominio, io mi sono estrapolato i file *.key e *.cert dal sito e ho provato a fare un certificato leggendo nei vari siti e funziona emby in ssl, poi non so se ho fatto la cosa correttamente, se non è così mi puoi dire come fare per fare un certificato valido? grazie. p.s. la tv è aggiornata a webOS 05.80.65 Edited December 21, 2020 by Borghez Link to comment Share on other sites More sharing options...
SamES 891 Posted December 21, 2020 Share Posted December 21, 2020 But which authority is listed as the root certificate issuer for the certificate you bought and the one you made? That will be the main concern. webOS 05.80.65 is the firmware version, you need to go deeper into the menu of the TV info to get the webos version, which I expect will be 3.8 Link to comment Share on other sites More sharing options...
Borghez 0 Posted December 21, 2020 Author Share Posted December 21, 2020 (edited) ho verificato sul sito no-ip e ho comprato un certificato di RapidSSL, ho visto ora che mi chiede il CSR che non ho messo, che sia per quello che non va come dovrebbe? p.s. mi chiede su che tipo di server configurarlo.. penso che Aphace OpenSSL possa andare bene? o hai suggerimenti da darmi? Edited December 21, 2020 by Borghez Link to comment Share on other sites More sharing options...
SamES 891 Posted December 22, 2020 Share Posted December 22, 2020 (edited) So based on the list of supported RootCA's (in my earlier post) and this list for webos3.5 below, RapidSSL is not a supported certificate authority, so I don't think there is any way to make it work with this certificate As for a suggestion, you can try a certificate issued by someone on this list webos35_certlist by issuer.txt Edited December 22, 2020 by SamES Link to comment Share on other sites More sharing options...
Borghez 0 Posted December 22, 2020 Author Share Posted December 22, 2020 quindi che posso usare come certificato supportato da lg? Link to comment Share on other sites More sharing options...
SamES 891 Posted December 23, 2020 Share Posted December 23, 2020 Yes, if you want to use https on your LG TV, then you must use one that is signed by a root certificate that is already installed on the TV by LG. Unlike your own server, it is not possible to install additional root certificates. Link to comment Share on other sites More sharing options...
Borghez 0 Posted December 23, 2020 Author Share Posted December 23, 2020 Ho risolto mettendo il certificato preferito ma non richiesto nelle opzioni di emby, l'unica cosa è che volevo completare il certificato inserendo il CSR che non riesco a capire che dati servono e se scriverli maiuscoli o minuscoli per poi caricarlo in RapidSSL di no-ip Link to comment Share on other sites More sharing options...
SamES 891 Posted December 24, 2020 Share Posted December 24, 2020 8 hours ago, Borghez said: Ho risolto mettendo il certificato preferito ma non richiesto nelle opzioni di emby I think this is your only option to make this work on the TV Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now