• jjk
  • Member
  • Offline
  • Registered: 2014-07-14
  • Posts: 13

Topic: NeTVBrowser and TLS versions

Hi there,

we have a DDOS protection for our service accessed by netv browsers, and due to the latest ssl vulnerability they only support TLS and all netv's are not working anymore with our website.

What is the NeTVBrowser using under the hood? If i do a sitecheck with

https://www.ssllabs.com/ssltest/index.html

THis is the result of our page, not working in NeTVBrowser:

TLS 1.2    Yes
TLS 1.1    Yes
TLS 1.0    Yes
SSL 3    No
SSL 2    No

There is no debug when using NeTVBrowser command on console on netv, nothing. We are somekind of lost, as it was a cool thing using the netv to show informations to our customers.

best regards
  Jens

  • jjk
  • Member
  • Offline
  • Registered: 2014-07-14
  • Posts: 13

Re: NeTVBrowser and TLS versions

As i see in source, netv uses QtSingleApplication and therefore only a newer Qt version could solve that, right?

  • jjk
  • Member
  • Offline
  • Registered: 2014-07-14
  • Posts: 13

Re: NeTVBrowser and TLS versions

So, to continue soliloquizing, i found that if overwriting QNetworkAccessManager with special protocol this could work. Sadly i can't do that as i'm a stupid java developer and my c is not that good.

Is there anybody who can introduce new commandline parameter for setting protocol to use?

An example is shown on in this thread: http://stackoverflow.com/questions/1220 … -use-sslv3

So if no parameter is present the default would be used, otherwise a forced protocol. Is this possible?

best regards
  Jens

  • jjk
  • Member
  • Offline
  • Registered: 2014-07-14
  • Posts: 13

Re: NeTVBrowser and TLS versions

Hi there,

nobody? Can nobody help?

  • jjk
  • Member
  • Offline
  • Registered: 2014-07-14
  • Posts: 13

Re: NeTVBrowser and TLS versions

I can't belive that nobody else has this problem, as many websites are disabling SSLv3 ...

I will try to cross-compile netvbrowser from source myself, but I'm a total c noob ...

6 Reply by jjk (edited by jjk 2014-12-08 19:08:41)

  • jjk
  • Member
  • Offline
  • Registered: 2014-07-14
  • Posts: 13

Re: NeTVBrowser and TLS versions

If anyone cares, it's now running with qt version 4.8, as the QtWebKit browser supports TLS 1.0 ... For now that works.

  • Registered: 2016-05-25
  • Posts: 8

Re: NeTVBrowser and TLS versions

Hi,

I'm running an HTML page overlay of NeTV but all HTTPS URL don't work.
This is somehow a real problem because

- Feeds like facebook, twittter, etc ... use HTTPS
- CDN for JQuery, etc ... use HTTPS
- ...

What should I do ? Is there (in 2016) an easy workaround ?

Thanks

  • jjk
  • Member
  • Offline
  • Registered: 2014-07-14
  • Posts: 13

Re: NeTVBrowser and TLS versions

Hi jpencausse,

as TLS will be mandatory nowadays and even the new compiled qt version with TLS 1.0 support will be outdated soon, i would also be interested in a new image, as there could not be another workaround. You have to update the complete linux image. Otherwise it makes no sense.

I will check if i can supply a bare version of our image as a download. Than all https sites with TLS 1.0 support will work. If TLS 1.0 will be deactivated from those sites, nothing will work again.

best regards
jjk

  • Registered: 2016-05-25
  • Posts: 8

Re: NeTVBrowser and TLS versions

Ok thanks !

As a workaropund I embed all resources on my own server but it's limited.
I was thinking at setting a proxy to convert stream in http but i's also quickly limited.

10 Reply by taa

  • taa
  • Member
  • Offline
  • Registered: 2014-06-15
  • Posts: 78

Re: NeTVBrowser and TLS versions

Hi jjk and jpencausse,

jjk: It sounds like you might have done this as part of a commercial product? If you can provide details on what you changed and how you did it, the rest of us might be able to make generic changes so you wouldn't have to worry about revealing too much. I might have enough C experience to help. Can't promise anything. I don't know java or javascript.

jpencausse: Do you mean you're using the "Remote"  event sources described at https://kosagi.com/w/index.php?title="App"_development ? What is the limitation you're running into?


(Note to myself: Never got email notification about any of the activity on this thread. Stumbled on this by accident.)

  • Registered: 2016-05-25
  • Posts: 8

Re: NeTVBrowser and TLS versions

@taa I simply set a webpage to tab 0 using SSH. But when the webpage load external resource like JS or CSS in https it won't work. So I have to copy resource on my webserver and get then in http. It works but very limitated.

A little french article with video :
http://blog.encausse.net/2016/10/27/tel … -0-part-2/

BTW, browser didn't like flow of tweet :-) and freeze quickly

  • Registered: 2016-08-02
  • Posts: 9

Re: NeTVBrowser and TLS versions

@jpencausse Can you share with us your widget in the blog ?
Can we modify the NetvBrowser to render a text in chinese or others languages ?
Thanks

  • Registered: 2016-05-25
  • Posts: 8

Re: NeTVBrowser and TLS versions

Hard to share the HTML but there is nothing new.
I made a custom home page with a dead simple DIV to display some notification pushed throught SocketIO I didn't touch the browser

14 Reply by taa

  • taa
  • Member
  • Offline
  • Registered: 2014-06-15
  • Posts: 78

Re: NeTVBrowser and TLS versions

Hi jpencausse,

I'm also interested in seeing the code if you would be willing to share. Can you elaborate on what "hard to share the HTML" means? For example, does it mean you tried to share it already but this forum rejected it for some reason? At least you didn't write, "impossible" to share, so there's hope that it's some sort of obstacle that can be overcome. big_smile