roTextureRequest to Cloudfront https not working

I assume you are, but you don't mention it, so it's worth asking if you're setting the certificates file on your roTextureRequest...?

request = CreateObject("roTextureRequest", "https://.....")
request.SetCertificatesFile("common:/certs/ca-bundle.crt")

Hi TheEndless -
Thanks for your reply - yes the certificates are being set. roTextureRequest gets images over https from our origin, just not from Cloudfront. My guess is that the origin allows TLS1.0, but I'm trying to verify and figure out the best solution.
Thanks!
Joe

anything uploaded to your AWS does not immediately get referenced in the cloud front
So if you are recently updating your AWS bucket then give it some time before you try to access it via cloud front

Thanks NewManLiving -

I'm confirming the images are there in the browser using the same URL I'm getting from the channel debug output. In the app they fail with the "handshakefailed" error.
I now have the channel using roUrlTransfer to store the images in tmp:/ then pulling them up with TextureManager, but it seems to be slower this way. Testing on some other roku models to confirm.

But basically this tells me that, "yes roTextureManager is using the outdated TLS1.0 and won't get anything over https from modern CDN's that enforce security by requiring TLS1.2"

Now we are faced with using this slower method or switching to http:// or a less secure CDN that uses TLS1.0.
Or hope for a new roku firmware release tomorrow that resolves the TLS issues 😄

Update - Looks like it works correctly on Roku 4 / firmware 7.X - the same channel on that device is getting the images from Cloudfront.
But not on Roku 3 or less.

Assuming You have a ROKU 4, what do you think of it?

my boss received some sort of advanced demo model a few weeks ago, I haven't used it much other than limited testing. The model we have isn't in the production case, but it's thinner and has a larger physical footprint (about 5" x 5") compared to older models and gets nice and warm while running.

Happy the TLS works with modern servers, but concerned that means older Rokus might never work with TLS > 1.0

Is there something you'd want me to test on it?

Just curious - Can only get better right...........

Fixes that work on the Roku 4 are likely to eventually make it to all non-legacy devices.

- Joel

Joel - any chance you can dig into this issue a bit more w/ engineering and see if / when a fix for this would be pushed to the older devices? Having some components only support TLS 1.0 is pretty rough to deal with.