9 replies to this topic

[ian1095]

Surely its about time you fixed the https certs problem ?

 

So many https sites cannot be connected to now which are perfectly fine when using other images.

 

Come on guys,this is not a trivial issue.

 

Ian.

Edited by ian1095, 25 June 2016 - 16:30.

[Erik Slagter]

Let's start with what the hell you're talking about? Context?

[ian1095]

Pli cannot connect to sites such as

 

https://afdah.org

 

or

 

https://watchseriesfree.to

 

Because the https certs are out of date. All other images have updated their ssl certs, therefore they can connect without any issues. Its only Pli that cannot. Those are just two examples,there are many others.

 

Is that clear enough for you ?

 

Ian.

Edited by ian1095, 1 July 2016 - 17:11.

[mrvica]

I got it now

certs = certificates (or certifications)

[ian1095]

Yes sorry maybe I shouldn't have abbreviated.

 

Ian.

[athoik]

Those sites require SNI. Wait openpli 5 because python has SNI.

SNI tester https://www.fairssl.se/en/ssltest

[ian1095]

I dont think Pli 5.0 is going to have Kodi from what ive read nor the Serviceapp plugin and Exteplayer ?

 

So I will be sticking with MastaG images.

 

So whats SNI and how can I add it to the certs in the MastaG image ?

 

It must be doable because every other image handles connection to all ssl sites ok,its just Pli that cannot connect to them.

 

Ian.

[athoik]

SNI:
 

Server Name Indication (SNI) is an extension to the TLS computer networking protocol[1] by which a client indicates which hostname it is attempting to connect to at the start of the handshaking process. This allows a server to present multiple certificates on the same IP address and TCP port number and hence allows multiple secure (HTTPS) websites (or any other Service over TLS) to be served off the same IP address without requiring all those sites to use the same certificate. It is the conceptual equivalent to HTTP/1.1 name-based virtual hosting, but for HTTPS. The desired hostname is not encrypted,[2] so an eavesdropper can see which site is being requested.

[ian1095]

So not supported on Python 2.7.3 which Pli is using only from 2.7.9 onwards which explains why its not been fixed.

 

So until Pli update their Python to 2.7.9 like ATV and BH have then this cannot be fixed.

 

Ian.

[Erik Slagter]

So yes, I perfectly know what you mean by "certs", but it was clearly the context that was missing.