Stream with ssl

Post here your ideas on how to make TVMosaic product better
Post Reply
Chrunchy
Posts: 3
Joined: Fri Apr 13, 2018 4:29 pm

Stream with ssl

Post by Chrunchy » Fri Apr 13, 2018 4:41 pm

One of the key features i missed about dvblink, was to have somekind of login for clients that was secure.
In dvblink the only security option was to add a plain username/password option. Thus, i always had to use dvblink with a VPN when watching from locations outside my house.

Are there any plans to add some kind of security to TVMosaic? I noticed that even the username/password option was removed from TVmosaic (Atleast i can't find it - username/password option is still available in iOS app though). I would wish there was other options than a VPN to mitigate the issue, so common web lurkers don't have access to it (Back in the day when trying to find solutions for it, i personally found multiple DVBlink instances public available)

Oberon
Posts: 1102
Joined: Thu Jan 26, 2017 8:45 am

Re: Stream with ssl

Post by Oberon » Thu Apr 19, 2018 2:29 pm

user name/ password will come back very soon.

As for https (ssl) - TVMosaic has already everything ready for it. If you happen to have an ssl certificate that matches your external IP, you can put it into the TVMosaic installation tree and enjoy https connection for data and streams on ports 9370/9371.
The real issue is actually having this certificates It cannot be self-signed, because clients will refuse to work with it.
And for cost reasons, we cannot provide at the moment a signed certificate for everyone as, for example, Plex does.

If anyone can propose a working solution here, we would be very much interested.

lakdjwln43
Posts: 21
Joined: Mon Apr 09, 2018 7:21 pm

Re: Stream with ssl

Post by lakdjwln43 » Sat Apr 21, 2018 6:09 am

Could you use Let's encrypt?

https://letsencrypt.org/about/
https://certbot.eff.org/

I think you need to renew every 3 months though.

Gasz2
Posts: 2
Joined: Sun Apr 22, 2018 10:18 am

Re: Stream with ssl

Post by Gasz2 » Sun Apr 22, 2018 7:29 pm

I copy a DER certificate file to the windows installation dir (C:\Program Files (x86)\DVBLogic\TVMosaic\), on server installation, but no ssl connexion is available. What I am doing wrong ?

Oberon
Posts: 1102
Joined: Thu Jan 26, 2017 8:45 am

Re: Stream with ssl

Post by Oberon » Mon Apr 23, 2018 2:04 pm

Gasz2 wrote:
Sun Apr 22, 2018 7:29 pm
I copy a DER certificate file to the windows installation dir (C:\Program Files (x86)\DVBLogic\TVMosaic\), on server installation, but no ssl connexion is available. What I am doing wrong ?
It has to be put into
C:\Program Files (x86)\DVBLogic\TVMosaic\data\common
and the file name should be localserver.pem

e.g.
C:\Program Files (x86)\DVBLogic\TVMosaic\data\common\localserver.pem

Chrunchy
Posts: 3
Joined: Fri Apr 13, 2018 4:29 pm

Re: Stream with ssl

Post by Chrunchy » Wed May 02, 2018 11:26 am

This sounds great.
If a certificate was to be issued by lets encrypt automatically, it will require a webservice to be exposed on 80/443 (Ports can't be different for now).
Port can be closed again after the certificate was issued, but needs to be renewed after the 90days.

I managed to get it up following Oberons instructions.

In the TVMOsaic iOS client, i replaced the IP with https://domain.ext and the port to 9370.
This has been something i have been waiting for several years :D

- Edit -

So i'm able to connect to the server with https to port 9370 and 9371 in the browser, and see the connection is secure with a valid certificate.

iOS:
If i add the server in my IOS client with https://domain.ext port 9370, it connects and shows me the channel list. However, when trying to play anything, i get a black screen.

PC
I tried from another PC that is able to webbrowse to the servers port 9370/9371 (No firewall issues) and install TVMosaic on that as a player. However, that one can't even connect to my main server when typing in https://domain.ext port 9370. If i type the name without https, but just as domain.ext port 9370 it still can't. Only the normal domain.ext port 9270 is working.

When https:// is added to servername, i get a message that Server is not responding

Do you have any suggestions on this matter?

Oberon
Posts: 1102
Joined: Thu Jan 26, 2017 8:45 am

Re: Stream with ssl

Post by Oberon » Wed May 02, 2018 1:32 pm

To check the status of your connection ina browser, please type:
https://<ip>:9370/mobile

This should give you an informational page, where you can check your certificate.

Oberon
Posts: 1102
Joined: Thu Jan 26, 2017 8:45 am

Re: Stream with ssl

Post by Oberon » Thu May 03, 2018 8:15 am

Further, all our clients still need some work to truly enable ssl connection.
It is on our todo list for the short term work.

Post Reply