Roku Developer Program

Join our online forum to talk to Roku developers and fellow channel creators. Ask questions, share tips with the community, and find helpful resources.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
joetesta
Roku Guru

roTextureRequest to Cloudfront https not working

Greetings,

I'm looking for confirmation that roTextureRequest is using TLS1.0.

When trying to get images from AWS CloudFront over https, I'm seeing "handshakefailed" with roTextureRequest.
I used roUrlTransfer and it gets the same images with no error. So I suspect roTextureRequest is subject to the same issue as described here:
viewtopic.php?f=34&t=85897&p=487233&hilit=tls+https

It seems the options I have are:
1) use non-secure http:// for images from Cloudfront
2) find a CDN that allows TLS1.0
3) revise the app to use roUrlTransfer and store the images in tmp for use by TextureManager

Is there anything else I'm missing?
tyvmia,
Joe
aspiring
0 Kudos
10 REPLIES 10
TheEndless
Channel Surfer

Re: roTextureRequest to Cloudfront https not working

I assume you are, but you don't mention it, so it's worth asking if you're setting the certificates file on your roTextureRequest...?
request = CreateObject("roTextureRequest", "https://.....")
request.SetCertificatesFile("common:/certs/ca-bundle.crt")
My Channels: http://roku.permanence.com - Twitter: @TheEndlessDev
Instant Watch Browser (NetflixIWB), Aquarium Screensaver (AQUARIUM), Clever Clocks Screensaver (CLEVERCLOCKS), iTunes Podcasts (ITPC), My Channels (MYCHANNELS)
0 Kudos
joetesta
Roku Guru

Re: roTextureRequest to Cloudfront https not working

Hi TheEndless -
Thanks for your reply - yes the certificates are being set. roTextureRequest gets images over https from our origin, just not from Cloudfront. My guess is that the origin allows TLS1.0, but I'm trying to verify and figure out the best solution.
Thanks!
Joe
aspiring
0 Kudos
NewManLiving
Visitor

Re: roTextureRequest to Cloudfront https not working

anything uploaded to your AWS does not immediately get referenced in the cloud front
So if you are recently updating your AWS bucket then give it some time before you try to access it via cloud front
My Channels: 2D API Framework Presentation: https://owner.roku.com/add/2M9LCVC
Updated: 11-11-2015 - Completed Keyboard interface
The Joel Channel ( Final Beta )
0 Kudos
joetesta
Roku Guru

Re: roTextureRequest to Cloudfront https not working

Thanks NewManLiving -

I'm confirming the images are there in the browser using the same URL I'm getting from the channel debug output. In the app they fail with the "handshakefailed" error.
I now have the channel using roUrlTransfer to store the images in tmp:/ then pulling them up with TextureManager, but it seems to be slower this way. Testing on some other roku models to confirm.

But basically this tells me that, "yes roTextureManager is using the outdated TLS1.0 and won't get anything over https from modern CDN's that enforce security by requiring TLS1.2"

Now we are faced with using this slower method or switching to http:// or a less secure CDN that uses TLS1.0.
Or hope for a new roku firmware release tomorrow that resolves the TLS issues 😄
aspiring
0 Kudos
joetesta
Roku Guru

Re: roTextureRequest to Cloudfront https not working

Update - Looks like it works correctly on Roku 4 / firmware 7.X - the same channel on that device is getting the images from Cloudfront.
But not on Roku 3 or less.
aspiring
0 Kudos
NewManLiving
Visitor

Re: roTextureRequest to Cloudfront https not working

Assuming You have a ROKU 4, what do you think of it?
My Channels: 2D API Framework Presentation: https://owner.roku.com/add/2M9LCVC
Updated: 11-11-2015 - Completed Keyboard interface
The Joel Channel ( Final Beta )
0 Kudos
joetesta
Roku Guru

Re: roTextureRequest to Cloudfront https not working

my boss received some sort of advanced demo model a few weeks ago, I haven't used it much other than limited testing. The model we have isn't in the production case, but it's thinner and has a larger physical footprint (about 5" x 5") compared to older models and gets nice and warm while running.

Happy the TLS works with modern servers, but concerned that means older Rokus might never work with TLS > 1.0

Is there something you'd want me to test on it?
aspiring
0 Kudos
NewManLiving
Visitor

Re: roTextureRequest to Cloudfront https not working

Just curious - Can only get better right...........
My Channels: 2D API Framework Presentation: https://owner.roku.com/add/2M9LCVC
Updated: 11-11-2015 - Completed Keyboard interface
The Joel Channel ( Final Beta )
0 Kudos
RokuJoel
Binge Watcher

Re: roTextureRequest to Cloudfront https not working

Fixes that work on the Roku 4 are likely to eventually make it to all non-legacy devices.

- Joel
0 Kudos