Jump to content

Live TV unable to open m3u8 streams that throw a warning

Nimasa

By Nimasa
in Live TV

 Share

Recommended Posts

Nimasa

Nimasa 11

Posted
Posted (edited)

Emby latest stable version is unable to play the following stream: 

https://iran613hls.wns.live/hls/stream.m3u8

And throws this error:

Quote

https://i.ibb.co/Y7CMtThZ/Emby-Error.png

However, Google Chrome can handle and play the stream fine, as shown in this screenshot:

Quote

https://i.ibb.co/tTSxMJR1/Chrome.png

Opening the stream in Pot Player, at first, shows a warning to proceed, as shown below:

Quote

https://i.ibb.co/qL5qfCFv/warning-in-Pot-Player.png

and initially fails. But after double-clicking the address in playlist, it plays fine as shown below.

Quote

https://i.ibb.co/hFyg9HTn/Pot-Player.png

Server log is attached.

 

 

embyserver.txt

Edited by Nimasa
Luke Emby Team

Luke 42608

Posted
Posted

Hi, we'll take a look at it. Thanks.

  • 3 months later...
Nimasa

Nimasa 11

Posted
  • Author
Posted (edited)

any updates?

There are many more samples that I can provide for testing, e.g. this link: 

  

https://live-azd1105.telewebion.ir/ek/tv1/live/1080p/index.m3u8

I guess having an option for such cases to suppress/bypass the warning while setting up live channels in Emby could be helpful. Something like a checkbox that the user can choose to either bypass these errors, or not.

Edited by Nimasa
Luke Emby Team

Luke 42608

Posted
Posted

Hi, what warning do you mean?

Nimasa

Nimasa 11

Posted
  • Author
Posted (edited)

[quote="Luke"]Hi, what warning do you mean?[/quote]

Please read the first post. I showed an screenshot of the error.

Edited by Nimasa
Nimasa

Nimasa 11

Posted
  • Author
Posted

it's a security warning regarding domain certificate. Is it possible to have an option to suppress such security warnings?

Luke Emby Team

Luke 42608

Posted
Posted
On 5/12/2026 at 8:40 AM, Nimasa said:

[quote="Luke"]Hi, what warning do you mean?[/quote]

Please read the first post. I showed an screenshot of the error.

@Nimasacan you please attach the screenshot to this forum posting? That's not a domain I'm familiar with. Thanks.

Nimasa

Nimasa 11

Posted
  • Author
Posted
13 hours ago, Luke said:

@Nimasacan you please attach the screenshot to this forum posting? That's not a domain I'm familiar with. Thanks.

 

Please find them attached here.

Chrome.png

Emby-Error.png

Pot-Player.png

warning-in-Pot-Player-Windows.png

  • 2 weeks later...
Luke Emby Team

Luke 42608

Posted
Posted

So the security warning is just in PotPlayer ?

Nimasa

Nimasa 11

Posted
  • Author
Posted (edited)
1 hour ago, Luke said:

So the security warning is just in PotPlayer ?

Also in Chrome, but after proceeding and approving the warning, both Chrome and PotPlayer play the video. This is not the case with emby. Emby fails to open the URL without even asking the user. It just throws an error. Having an option in the server side to bypass (approve) such warnings would be helpful.

Edited by Nimasa
Luke Emby Team

Luke 42608

Posted
Posted

By Emby you mean in the web app?

Nimasa

Nimasa 11

Posted
  • Author
Posted (edited)
51 minutes ago, Luke said:

By Emby you mean in the web app?

Both the web app and Adroid app. Tested just know again on:

Windows 11 - Chrome browser v148.0.7778.217

Android 16 - Chrome browser v148.0.7778.180

Android 16 - Emby app v3.5.36

with this URL: 

https://simahls.wns.live/hls/stream.m3u8

And all of them fail.

Emby Server: 4.9.5.0

Edited by Nimasa
  • 2 weeks later...
Luke Emby Team

Luke 42608

Posted
Posted

This is happening on the server: 

2026-02-01 20:13:33.563 Error HttpClient: Error getting response from https://host5/x_path1_x/x_path2_x
	*** Error Report ***
	Version: 4.9.3.0
	Command line: C:\Users\public.DESKTOP-482PEL4\AppData\Roaming\Emby-Server\system\EmbyServer.dll
	Operating system: Microsoft Windows 10.0.19045
	OS/Process: x64/x64
	Framework: .NET 8.0.22
	Runtime: C:/Users/public.DESKTOP-482PEL4/AppData/Roaming/Emby-Server/system/System.Private.CoreLib.dll
	Processor count: 4
	Data path: C:\Users\public.DESKTOP-482PEL4\AppData\Roaming\Emby-Server\programdata
	Application path: C:\Users\public.DESKTOP-482PEL4\AppData\Roaming\Emby-Server\system
	MediaBrowser.Model.Net.HttpException: MediaBrowser.Model.Net.HttpException: The SSL connection could not be established, see inner exception.

Does that stream use an older, insecure SSL protocol version? Or does it redirect to plain http?

Nimasa

Nimasa 11

Posted
  • Author
Posted (edited)
7 hours ago, Luke said:

This is happening on the server: 

2026-02-01 20:13:33.563 Error HttpClient: Error getting response from https://host5/x_path1_x/x_path2_x
	*** Error Report ***
	Version: 4.9.3.0
	Command line: C:\Users\public.DESKTOP-482PEL4\AppData\Roaming\Emby-Server\system\EmbyServer.dll
	Operating system: Microsoft Windows 10.0.19045
	OS/Process: x64/x64
	Framework: .NET 8.0.22
	Runtime: C:/Users/public.DESKTOP-482PEL4/AppData/Roaming/Emby-Server/system/System.Private.CoreLib.dll
	Processor count: 4
	Data path: C:\Users\public.DESKTOP-482PEL4\AppData\Roaming\Emby-Server\programdata
	Application path: C:\Users\public.DESKTOP-482PEL4\AppData\Roaming\Emby-Server\system
	MediaBrowser.Model.Net.HttpException: MediaBrowser.Model.Net.HttpException: The SSL connection could not be established, see inner exception.

Does that stream use an older, insecure SSL protocol version? Or does it redirect to plain http?

No idea. I'm not the maintainer of that stream. I'm just a user and expect Emby to have a solution for such cases. So, I leave these questions for you.

Does that stream use an older, insecure SSL protocol version? Or does it redirect to plain http? How can Emby handle them?

Edited by Nimasa
  • 2 weeks later...
Luke Emby Team

Luke 42608

Posted
Posted
Quote

Does that stream use an older, insecure SSL protocol version? Or does it redirect to plain http?

The error coming from the dotnet runtime is RemoteCertificateNameMismatch. The explanation is 

Quote
The error RemoteCertificateNameMismatch occurs when the hostname or IP address used by a client to connect to a server does not match any name listed in the server’s SSL/TLS certificate. [1, 2]
This error is a standard security mechanism designed to prevent Man-in-the-Middle (MitM) attacks by ensuring you are talking to the correct server.

It is in theory possible to provide a dialog to force acceptance of it, it's just not something we've looked at yet. It's also a little tricky given that this is happening in the background on the server, not in the client app that you're playing from.

  • Thanks 1
Nimasa

Nimasa 11

Posted
  • Author
Posted (edited)
On 6/21/2026 at 11:33 PM, Luke said:

The error coming from the dotnet runtime is RemoteCertificateNameMismatch. The explanation is 

It is in theory possible to provide a dialog to force acceptance of it, it's just not something we've looked at yet. It's also a little tricky given that this is happening in the background on the server, not in the client app that you're playing from.

Thank you for explaining and looking into it.

Having that option on the server is helpful for such cases. So to play a stream Emby checks for a condition if acceptance of the security warning is permitted or not, and if so, it plays the stream. If not, for security reasons it won't play. Leaving it to admin to decide.

And this option could be set for each stream separetly. Therefore, acceptance of one stream warning won't permit the other ones.

 

I'd be thankful if you consider adding this option to Emby.

Edited by Nimasa

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing
×
×
  • Create New...