Prefer https over http won't automatically direct to https

[vodouch17 0]

Hi, I've been trying to solve a problem where when i go to my emby server through a Web browser then it'll go through http not https even though https is set up correctly and working. I have the preferred but not required setting and I need to keep it that way because a one of my TVs doesn't support https and there were too many problems with it. 

 

PS: sorry for my English it's not my primary language 

[Abobader 3204]

Hello vodouch17,

Please wait for someone from staff support or our members to reply to you.

It's recommended to provide more info, as it explain in this thread:

Thank you.

Emby Team

[Carlo 4451]

56 minutes ago, vodouch17 said:

Hi, I've been trying to solve a problem where when i go to my emby server through a Web browser then it'll go through http not https even though https is set up correctly and working. I have the preferred but not required setting and I need to keep it that way because a one of my TVs doesn't support https and there were too many problems with it. 

 

PS: sorry for my English it's not my primary language 

Hi, Have you tried changing the setting to required?

[vodouch17 0]

2 minutes ago, cayars said:

Hi, Have you tried changing the setting to required?

As I said I can't do that. If I do, emby on my TV will stop working

[Carlo 4451]

11 minutes ago, vodouch17 said:

As I said I can't do that. If I do, emby on my TV will stop working

Why? Is your TV on the same network as your server?

If so it would still have access to port 8096. Even if it wasn't it would still work assuming you have loopback on your router and using a domain name.

[vodouch17 0]

16 minutes ago, cayars said:

Why? Is your TV on the same network as your server?

If so it would still have access to port 8096. Even if it wasn't it would still work assuming you have loopback on your router and using a domain name.

When I had https only then I wouldn't be able to log in to any of the accounts. When i set it to prefered but not required then it starts working. I think it's the Samsung tv not supporting the https certificate I use but I'm not an expert on that. 

Edited January 3, 2021 by vodouch17
Adding details

[Carlo 4451]

Is the TV and your server in the same LAN?

If so just use the server IP and port 8096.

[vodouch17 0]

3 minutes ago, cayars said:

Is the TV and your server in the same LAN?

If so just use the server IP and port 8096.

No it is not unfortunately unfortunately.

[Carlo 4451]

OK, what cert are you using?

[vodouch17 0]

6 minutes ago, cayars said:

OK, what cert are you using?

I`m using certbot and then converting it to a .pfx certificate so i can put it in emby. I couldnt find any other way since this was the first time i`ve done something like this.. If you know a better way please let me know.

Edited January 3, 2021 by vodouch17

[Carlo 4451]

Hmm, I never heart of that cert before.
If that cert isn't recognized by your TV then yes you would have the exact problem you have, so that does seem likely.

Really the only way to "fix" this would be to switch certs or maybe put your server behind Cloudflare.
Other than that, REQUIRED couldn't be used as you already found out. 

[vodouch17 0]

Just now, cayars said:

Hmm, I never heart of that cert before.
If that cert isn't recognized by your TV then yes you would have the exact problem you have, so that does seem likely.

Really the only way to "fix" this would be to switch certs or maybe put your server behind Cloudflare.
Other than that, REQUIRED couldn't be used as you already found out. 

Certbot is made by LetsEncrypt and everybody on the forum was mentioning how they were using letsencrypt so i tried it. I'll try cloudflare. Do you have any other suggestions? 

[Q-Droid 803]

Unless I'm mistaken forcing https only applies to remote (WAN) connections. LAN connections (same subnet) shouldn't need or use https and local devices would not be forced to use it.

If for some reason your LAN subnet does not match what Emby "thinks" it is you can add it in the Network settings. Examples are shown right below the form field.

 

[Q-Droid 803]

How old is the Samsung TV?

[vodouch17 0]

1 minute ago, Q-Droid said:

Unless I'm mistaken forcing https only applies to remote (WAN) connections. LAN connections (same subnet) shouldn't need or use https and local devices would not be forced to use it.

If for some reason your LAN subnet does not match what Emby "thinks" it is you can add it in the Network settings. Examples are shown right below the form field.

 

No no. Lan is a ok. I'm talking about wan. From my Girlfriends TV to my server at home

 

[vodouch17 0]

1 minute ago, Q-Droid said:

How old is the Samsung TV?

It's from 2020. Bought about 2 months ago

[Happy2Play 9060]

Pretty sure this issue was raised for TV.  @SamES

But without Required there will not be a redirect.

[Q-Droid 803]

Ok. Then you shouldn't have a problem with the LetsEncrypt certs. However you might have a problem with your pfx file so let's look there.

Another thing, you don't want to rely on a redirect for apps. The browsers handle it fine but many apps choke on it. So setup the apps using host and port.

Edited January 3, 2021 by Q-Droid

[SamES 954]

Make sure that to connect via https your are using the correct https port

• https://<server>:8920

And for http only (on the TV)

• Use port 8096

This is assuming you have not changed the port numbers

Check the port numbers on the dashboard