Quantcast
Jump to content

LG WEBOS 4.0 and below. Letsencrypt root certificated expired.


Recommended Posts

Found multiplex application that use letsencrypt stop working in 30 September 2021 on LG WebOS 3.5. This appear to be wide spread multiplex version of WEBOS. 

See 
AND 

link hidden, please login to view

As PLEX blaming to be LG fault. LG please provide solution to only 2 year old TV

LG

Our current app is available on 4K/UHD LG television models running the following system software:

  • webOS 3.0
  • webOS 3.5
  • webOS 4.0
  • webOS 5.0

No 720p or 1080p (“full HD”) sets are supported for our current app at this time.

Note: Due to root certificate limitations with the device OS itself, only webOS 5.0+ devices support secure connections with a personal Plex Media Server. To allow connections to a personal server, devices running earlier webOS versions must be set to Allow Insecure Connections in the TV app settings and the Plex Media Server must be set to Preferred for the Secure Connections preference.

  • Like 2
Link to comment
Share on other sites

Same here on my 2 year old 65SK8000PLB with firmware 05.40.09

I cannot load any websites with Letsencrypt encrypted certificates.

Examples:

  • link hidden, please login to view

This is a good example for unsufficient product lifecycle management.

Link to comment
Share on other sites

I've got 

I've got this problem too with my OLED55E6V (AKA: the E6). I bought it in 2017. I find it baffling that a modern smart TV like has this problem. Built in obsolescence? LG should sort this out. I spent thousands of £ on this.

I have a Plex Media Server. I've tried the server and app settings to allow insecure connections but that isn't working.

Isn't this just a case of LG updating certificates?

The TV received a firmware update recently. Surely LG can resolve this?

 

Link to comment
Share on other sites

It should be very easy for LG to exchange the root certificates with an update. However, the question is whether this will happen....

Connections to older Plex servers still seem to work.
Also to those in the same network that are up to date but do not have their own certificates.

Whether this is really the problem is questionable.
However, SSL should be the most important thing these days and that must be running!

Link to comment
Share on other sites

19 hours ago, micneon said:

Whether this is really the problem is questionable.

It definitely is the problem.  Here's what works to recreate it on my 55B6, on firmware 5.60.25.

Manually set your TV clock to Sept 30, 9AM EDT (convert to your time zone if needed).

Goto any Wikipedia page using the browser. Works.

Manually set your TV clock to Sept 30, 11AM EDT (convert to your time zone if needed).

Goto any Wikipedia page using the browser. Does NOT work, you get a security error that cannot be bypassed.

Now manually set your TV clock back to Sept 30, 9AM EDT again (convert to your time zone if needed).

Goto any Wikipedia page using the browser. Works again.

A root cert (DST Root CA X2) expired around 10AM EDT on September 30th. Servers using Let's Encrypt certs (which includes Wikipedia) should be testable using either that root or the newer ISRG Root X1 - which, by the way, has been around since June 2015. If you have not updated the trusted root list attached to the browser since 2015, then you will see this failure, because after 10AM Sept 30th, only the ISRG Root X1 is still valid.

LG has had FIVE YEARS to fix this problem before it happened.

  • Like 1
Link to comment
Share on other sites

I have a C9 and rooted the TV once the RootMy.TV exploit came out. Thanks to this, Im able the overwrite all the expired certificates and everything works great again
Where do I get the updated certificated, and where do I put them in the fillesystem?

Sent from my LM-V600 using Tapatalk

Link to comment
Share on other sites

If your TV is rooted, you can use a bash script I wrote to remove the expired LetsEncrypt cert and add two new certs to the TV's truststore.  Open a shell on your TV and run the following four commands:

cd /tmp

wget  

link hidden, please login to view

chmod +x update-ca-certs.sh

./update-ca-certs.sh

After updating the certs, the TV will reboot, and you should be good to go.

Link to comment
Share on other sites

On 10/20/2021 at 10:31 PM, tam said:

If your TV is rooted, you can use a bash script I wrote to remove the expired LetsEncrypt cert and add two new certs to the TV's truststore.  Open a shell on your TV and run the following four commands:

cd /tmp

wget  

link hidden, please login to view

chmod +x update-ca-certs.sh

./update-ca-certs.sh

After updating the certs, the TV will reboot, and you should be good to go.

Can you please make some tutorial how to do it step by step for fresh people ? 

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Similar Topics

    • By Rob007
      LGTV had a new Sling TV app update which left me with no Channels option in Sling. I only have the Guide and Search Options. How can I get the Channels selection back?
    • By Hblone
      Hallo, I bought a 55un74006LB smart tv in Italy. It seems not to have usb recording capabilities, according to the information on the italian website, but the UK site declare it has. I think it's the same product with the same functions, so how can I turn the live tv and usb recording on? I think I found the options in the service menu but I cannot change the values. Any suggestion?
    • By mradyali
      we are developing player for LG,  we want to get available subtitles  for the VOD, like this one

      link hidden, please login to view textTracks() didn't return any result , is their any custom API or internal call to get them?
      Note :  audioTracks() work like  charm.
    • By News Reporter
      LG Smart TVs to Offer Amazing Stadia Gaming Experience Complete with Immersive
      5.1 Surround Sound for Stadia Pro Gamers in the Second Half of the Year

      SEOUL, Jan. 11, 2021 — LG Electronics (LG) announces a planned partnership with Google to bring Stadia to its latest webOS smart TVs in the second half of this year. After Stadia comes to Google TV, LG will be the first TV manufacturer to natively support Stadia gameplay via webOS.
      LG is demonstrating its commitment to supporting premium gaming on its state-of-the-art displays, made even more compelling with support for 4k and 5.1 surround sound for Stadia Pro users. Stadia on LG TVs will allow customers to instantly play hit Stadia games such as Cyberpunk 2077, NBA 2K21, Assassin’s Creed: Valhalla and Watch Dogs: Legion with just a Stadia controller and no additional hardware or game downloads required.
      LG plans to have the new service launched within the second half of 2021 on LG Smart TVs as a downloadable app from the LG Content Store in countries where Stadia is available. Stadia already offers more than 130 games with more being added regularly. Games can be purchased individually or gamers can claim a regular cadence of games to be played for free with a subscription to Stadia Pro, which includes exclusive discounts and up to 4K resolution. Exhilarating gaming with immersive 5.1 channel surround sound and support for up to 4K HDR and 60 FPS makes the Stadia platform a compelling choice for anyone looking for a great gaming experience without the need for an expensive, dedicated gaming console.
      And when it comes to gaming, it’s hard to beat the advanced combination of Stadia and  LG OLED TVs. LG OLED’s self-lighting pixels ensure best-in-class HDR picture quality with deep blacks and extremely accurate colors. LG became the first company to launch HDR-capable 4K OLED TVs in 2015 and content on LG OLED TVs – both streaming and externally stored – benefit from the display’s fast 1ms response time, outstandingly low input lag without experiencing any loss in picture quality.
      “Supporting Stadia on LG TVs is our commitment to customers that gaming is an increasingly important feature expected by LG TV owners,” said Lee Sang-woo, senior vice president of corporate business strategy at LG Electronics Home Entertainment Company. “Stadia is changing how people access their favorite games and by providing webOS compatibility, we’re making an early commitment to the platform.”
      LG’s perfect-for-gaming LG OLED TVs, new LG QNED Mini LED TVs (with the company’s propriety Quantum Dot NanoCell Technology and mini LED backlighting) and upgraded LG NanoCell TVs will be on display in during CES 2021 starting January 11.
      # # #
      * At time of launch, Stadia available only on LG smart TVs running webOS 6.0. LG webOS 5.0 TVs will receive the service later this year.

      link hidden, please login to view
    • By ROSSMAN
      I am creating a streaming application, where user can access a list of mkv files from my server, Mkv is not supported in web browsers and it is not loading properly within my webOS web app.
      I cannot modify my files to another video format.
      Is there a native player for LG WebOS that I can embed into my web application ?
      Is there any video player with web sdk to play mkv on a smart tv.
      Ps: my videos are working well on chrome, as for Firefox or Safari, it tells me that the format is not supported.
×
×
  • Create New...