Quantcast
Jump to content

LG WEBOS 4.0 and below. Letsencrypt root certificated expired.


Recommended Posts

Found multiplex application that use letsencrypt stop working in 30 September 2021 on LG WebOS 3.5. This appear to be wide spread multiplex version of WEBOS. 

See 

link hidden, please login to view

AND 

As PLEX blaming to be LG fault. LG please provide solution to only 2 year old TV

LG

Our current app is available on 4K/UHD LG television models running the following system software:

  • webOS 3.0
  • webOS 3.5
  • webOS 4.0
  • webOS 5.0

No 720p or 1080p (“full HD”) sets are supported for our current app at this time.

Note: Due to root certificate limitations with the device OS itself, only webOS 5.0+ devices support secure connections with a personal Plex Media Server. To allow connections to a personal server, devices running earlier webOS versions must be set to Allow Insecure Connections in the TV app settings and the Plex Media Server must be set to Preferred for the Secure Connections preference.

  • Like 2
Link to comment
Share on other sites

I've got 

I've got this problem too with my OLED55E6V (AKA: the E6). I bought it in 2017. I find it baffling that a modern smart TV like has this problem. Built in obsolescence? LG should sort this out. I spent thousands of £ on this.

I have a Plex Media Server. I've tried the server and app settings to allow insecure connections but that isn't working.

Isn't this just a case of LG updating certificates?

The TV received a firmware update recently. Surely LG can resolve this?

 

Link to comment
Share on other sites

It should be very easy for LG to exchange the root certificates with an update. However, the question is whether this will happen....

Connections to older Plex servers still seem to work.
Also to those in the same network that are up to date but do not have their own certificates.

Whether this is really the problem is questionable.
However, SSL should be the most important thing these days and that must be running!

Link to comment
Share on other sites

19 hours ago, micneon said:

Whether this is really the problem is questionable.

It definitely is the problem.  Here's what works to recreate it on my 55B6, on firmware 5.60.25.

Manually set your TV clock to Sept 30, 9AM EDT (convert to your time zone if needed).

Goto any Wikipedia page using the browser. Works.

Manually set your TV clock to Sept 30, 11AM EDT (convert to your time zone if needed).

Goto any Wikipedia page using the browser. Does NOT work, you get a security error that cannot be bypassed.

Now manually set your TV clock back to Sept 30, 9AM EDT again (convert to your time zone if needed).

Goto any Wikipedia page using the browser. Works again.

A root cert (DST Root CA X2) expired around 10AM EDT on September 30th. Servers using Let's Encrypt certs (which includes Wikipedia) should be testable using either that root or the newer ISRG Root X1 - which, by the way, has been around since June 2015. If you have not updated the trusted root list attached to the browser since 2015, then you will see this failure, because after 10AM Sept 30th, only the ISRG Root X1 is still valid.

LG has had FIVE YEARS to fix this problem before it happened.

  • Like 1
Link to comment
Share on other sites

If your TV is rooted, you can use a bash script I wrote to remove the expired LetsEncrypt cert and add two new certs to the TV's truststore.  Open a shell on your TV and run the following four commands:

cd /tmp

wget  

link hidden, please login to view

chmod +x update-ca-certs.sh

./update-ca-certs.sh

After updating the certs, the TV will reboot, and you should be good to go.

Link to comment
Share on other sites

On 10/20/2021 at 10:31 PM, tam said:

If your TV is rooted, you can use a bash script I wrote to remove the expired LetsEncrypt cert and add two new certs to the TV's truststore.  Open a shell on your TV and run the following four commands:

cd /tmp

wget  

link hidden, please login to view

chmod +x update-ca-certs.sh

./update-ca-certs.sh

After updating the certs, the TV will reboot, and you should be good to go.

Can you please make some tutorial how to do it step by step for fresh people ? 

Link to comment
Share on other sites

On 10/20/2021 at 9:31 PM, tam said:

If your TV is rooted, you can use a bash script I wrote to remove the expired LetsEncrypt cert and add two new certs to the TV's truststore.  Open a shell on your TV and run the following four commands:

cd /tmp

wget  

link hidden, please login to view

chmod +x update-ca-certs.sh

./update-ca-certs.sh

After updating the certs, the TV will reboot, and you should be good to go.

Hi TAM,

I found a few issues with your script,

1. wget doesn't work on my TV I get - wget: not an http or ftp url:

2. Tried to overcome that by just downloading the script and SCP it to the TV that worked fine BUT you have wget again in the update-ca-certs.sh so I had to download and SCP the certs to the correct folders - NOW the final issue I see is and cannot understand is how is  /media/cryptofs/apps/usr/palm/services/com.palmdts.devmode.service/start-devmode.sh going to run and apply the setting? what will trigger this script?

Thanks, From what I can find you are the only one really working on this issue - Really appreciate it!

UPDATE:

To over come the wget issue I just used 'curl -k  --output update-ca-certs.sh'

I also update the 'update-ca-certs.sh' and replaced wget with curl --output' script (attached)   update-ca-certs.txt

still not seeing the certificates updated

 

 

 

Link to comment
Share on other sites

Hi Fem,

Thanks for pointing out the issue with wget. I may have installed wget myself some time ago and forgotten, so maybe it is a different version to the one you have. I have updated the script and instructions to use curl instead.

The script at /media/cryptofs/apps/usr/palm/services/com.palmdts.devmode.service/start-devmode.sh was created by the rooting process I used. So this file existed before I made any changes myself. It gets executed automatically each time the TV is switched on, so I just appended a few commands to the end of that script (to overlay the new certs and cert config onto the underlying readonly filesystem, and to force the system to recognise these new certs each time). If you used a different mechanism to get root, then maybe you have some script that executes on startup that you could append these commands to instead.

Link to comment
Share on other sites

  • 2 weeks later...

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Similar Topics

    • By majorusa
      Please post here firmware number for your WebOS set including your country or the country where you downloaded the firmware and the model of your tv set:
      - 3.23.24 - Romania- 47LB730v
      - 3.23.34 - Romania -47LB730v - 21.08.2014 by USB
      - 4.30.09 - Romania - 47LB730v - 29.08.2014 - OTA
    • By Harald Dunkel
      According to the specs my OLED55BX9LB is supposed to run webos 5.0, but the firmware update claims 04.40.15 is the most recent version. How comes?
       
    • By Paul Griffith
      When I try to go to a TV programme via the remote control voice option, the TV tries to look up the channel on the app I'm on, instead of going straight to the TV channel on the antenna. This used to work without any problems up until a couple of days ago. Any help appreciated.
    • By Costin Angelescu
      Good afternoon,
      I have a 49UB850V-ZD smart TV and has the issues below. Can't understand if its a software issue or components issues:
      1. Can't reset using meniu. I can access the meniu, I inserted pin 0000 and if I try to click Confirm it just flashes the button with no success. If I click Cancel then the meniu closes
      2. The Live TV channels are not working. There is no issue with the provider. It just not plays any channel
      3. If I connect the usb or hard-disk driver to play some movies I can navigate thru folder but I can t play any
      4. When I connect to Netflix or youtube I can navigate but if i try to play it does not load.
      5. The remote TV does not work anymore -> Only the Power Off/On button
      6. I have a magic remote TV for LG and works to navigate with the indicator
      7. The button of the TV (under the TV led) works only to open the TV -> the menu does not work anymore
      8. In the advanced menu, the Channel settings is not active among other options that are disabled. 
      9. When I try to access the LG STORE it says: loading unsuccessful (82) because the hour of the TV is not the correct one. I tryed to change time to something different and also changed location and removed the location. This change did not had any effect 
      What do you think? What do I need to do?
       

    • By News Reporter
      Being an environmentally conscious company means looking deep into all business processes and putting the utmost effort into transforming, both externally and internally, from the supply chain to the organizational culture. In other words, LG aims to be an environmentally sustainable business, calling for specific and tangible actions with the three environmental ESG initiatives outlined in its BETTER LIFE PLAN 2030.

      The initiatives mark a paradigm shift towards adopting tangible, specific and measurable actions for a better, cleaner and greener environment. Part two of the Better Life story series, this article looks at the environmental action plans LG has established and the goals it is working hard to achieve.

      According to research, the average temperature on
      link hidden, please login to view (2.2 degrees Fahrenheit) since pre-industrial times. Responding to the urgency of climate change, LG remains steadfastly committed to attaining carbon neutrality, and to converting entirely to renewable energy in the long term. Its dedication to both goals can already be seen in the energy-efficient technologies applied at LG Smart Park in Changwon, South Korea. Exercising immediate change for its carbon initiative, LG is converting to more efficient operational processes and applying energy-efficient technologies across all of its production plants. LG Smart Park, the company’s revolutionary production facility, deploys next-generation manufacturing innovations to simultaneously achieve higher production efficiency and enhanced sustainability. The manufacturing hub has increased productivity by 20 percent and reduced the cost of defective-product returns by 80 percent. Moreover, LG Smart Park has reduced greenhouse gas emissions and boosted energy efficiency per unit by 30 percent compared to the previous factory.

      LG is looking to change the status quo of end-of-lifecycle management by using eco-friendly materials, streamlining manufacturing processes and turning discarded materials into ‘new’ resources, with the aim of creating a circular economy.
      The reducing, recovering, recycling and reusing of materials are all very important in a circular economy. LG operates a free e-waste retrieval service in 52 countries and aims to collect an accumulated total of over eight million tons of used appliances from 2006 to 2030. As for recycling, LG is improving its existing processes to achieve a higher recycling rate, with the end goal of hitting 95 percent by 2030. As part of this, the company’s Chilseo Recycling Center (CRC) situated in Hamyang, South Korea, plans to replace the compressor and old equipment by the latter half of the year. Furthermore, LG recently invited its employees to come together in the collective journey towards circularity by using fewer disposable paper cups at work.

      A global leader in consumer electronics, LG is dedicated to helping consumers realize a more sustainable lifestyle. This is why the company is applying eco-friendly technologies to all newly developed products, contributing to a smaller carbon footprint and resource recirculation.
      By 2030, LG plans to have reduced total carbon emissions from the product-usage stage by 20 percent. It also projects that, from 2021 to 2030, it will have used an accumulated total of six hundred thousand tons of recycled plastics in the production of new home appliances. In the future, the company will be able to offer products that are even more energy-efficient and environmentally sustainable than its current crop of models, helping consumers to reduce their monthly energy bills, achieve a more sustainable household and enjoy the best version of the Better Life LG aims to provide.

      For more on how LG is embracing inclusivity, sustainability and diversity in all that it does, stay tuned for the third and final Better Life story, coming soon to Beyond News.
      # # #

×
×
  • Create New...