NextPVR Forums
  • ______
  • Home
  • New Posts
  • Wiki
  • Members
  • Help
  • Search
  • Register
  • Login
  • Home
  • Wiki
  • Members
  • Help
  • Search
NextPVR Forums Information Community Announcements v
« Previous 1 … 47 48 49 50 51 … 56 Next »
SSL enabled GBPVR web access? Interested?

 
  • 0 Vote(s) - 0 Average
SSL enabled GBPVR web access? Interested?
Networker
Offline

Member

Posts: 188
Threads: 20
Joined: Feb 2005
#1
2005-06-15, 01:29 AM
Are you interested in wrapping SSL around your GBPVR web console access from outside of your firewall? Tomorrow I will have detailed HOW-TO for you to use. This is Windows-centric since it seems most users in the community are Windows users, I will note any difference for those of us, er you using Linux.

:o

John
//// GBPVR \\\\
Abit
2.8GHz Proc
1 GB RAM
80 GB SATA sys volume
200 GB SATA Video Storage
3x PVR150s
2x MVPs - 100Mbps LAN attached

/// Music Server \\\
CentOS Samba Server
(moving to Video Server to be MediaServer Smile )

/// Video Server \\\
FreeNAS
1TB total storage
<to be renamed MediaServer>


Plugins: Xrecord, Video Archiver, DVD2MPG, My M.V.P., Weather, Theater, Rectracker
kayleigh
Offline

Senior Member

Posts: 321
Threads: 18
Joined: Oct 2004
#2
2005-06-15, 07:08 AM
I'd like to hear this idea; I've never used the web interface since I've had concerns about the security Smile.
[SIZE=1]
HD PVR: nPVR 4.2.2 with VLC 3.0.3 Std Skin
ASRock H170M Pro4 LGA 1151 Intel H170 HDMI-out, Intel Core i3-6100 3.7GHz, 16GB DDR4 2400, Win7 Ultimate x64, Hauppauge Colossus, 1x250GB SSD (System), 1x1TB SATA (Recordings), DirecTV HD22 STB, dtvTune.exe Ethernet channel changer

Running Samsung Smart TV plugin from Fred250
Networker
Offline

Member

Posts: 188
Threads: 20
Joined: Feb 2005
#3
2005-06-15, 06:06 PM (This post was last modified: 2005-06-15, 06:20 PM by Networker.)
<disclaimer>
Okay here you go, remember this uses a third party program to provide the SSL security. Now remember, SSL only products the data in transport from your client to the server. It does not protect the server from any exploits that could come along, I intend to do a little more searching for vulnerabilities and the web server used in the GBPVR web interface.
</disclaimer>

Download these files:

STUNNEL
openSSL libraries

Create a Directory for stunnel, I put my under c:\program files\, and place the file stunnel-4.10.exe there, rename it to remove '-4.10' if you wish, or create a shortcut named stunnel.exe

Next unzip the openssl.zip file, extract the files to c:\windows\system32

If you have not done it already, open the GBPVR config program and in the MISC tab turn on the Web server, change the port if you wish (remember what you change it to) and the username/passwd as well. Save it, with an OK

Now you need to create an SSL certificate (cert) for use with stunnel, the
easiest way is to go here and generate a cert.

Fill in the blanks, none is acceptable so use it if needed. Please be sure to select NO for the DH parameters, it's not needed and the author of the software is generous enough to allow cert generation on his site. Click "Generate stunnel.pem File", copy and paste this information into a new notepad session, save to where you saved stunnel, make sure there is not TXT after the file it should be stunnel.pem.

Next you must create a config file for stunnel to read, this allows it to bind (listen) on the 443 port and redirect to 7647 or whatever port you changed your GBPVR web interface to.

In another notepad session create the file stunnel.conf and put this in it:

[GBPVRSSL]
accept=443
connect=7647

Save it where the stunnel executable is (for me c:\program files\stunnel\).

Now your ready! Do you trust me? Do you trust your work? Then you could just jump straight to starting this as a service, but now let's not get ahead of ourselves, let us test this. Copy a command line window (start -> run -> cmd <ENTER>)

cd "c:\program files\stunnel"

stunnel <enter>

If everything worked right you should see no errors, but you will see a little colored folder in your system try. Right click and you get the option to view the log, do that. Now if you really want to make sure it's working connect to it or run netstat -na to see the bound ports like this:

netstat -na <enter>

Proto Local Address Foreign Address State
TCP 0.0.0.0:443 0.0.0.0:0 LISTENING
TCP 0.0.0.0:7647 0.0.0.0:0 LISTENING

Now if you had done this before you ran stunnel you would not see the line with 443 on it. Yes this list is very short, you will have to scroll up to see this at the top of the list, or you could run netstat -na -p tcp.

Now, connect with a browser to: https://localhost/gbpvr/login.aspx

You will be greated with a warning regarding the SSL cert, the cert is not signed (self-signed actually) by a public CA (certificate authority) and therefore cannot be validated, it's okay as this is for your use and not public use anyway. Just remember the fingerprint or write it down so when you save this from a remote location, if it changes you'll get warned. Save this cert if you wish so you won't get the warning everytime you use it.

That's it!

Oh wait, you want this to be automatic and you want to access it from outside your LAN? Haven't I done enough? Okay just kidding....

to make this automatic do this from a command line:

stunnel -install <ENTER>

This only installs the service, to start it either go to the services tab or run this:

net start stunnel <ENTER>

As far as accessing this from outside your LAN, you must setup a port forward rule on your firewall, allow access to your WAN IP on port 443 (SSL or HTTPS) and forward to your GBPVR machine on port 443, no PAT (Port address translation) needed as stunnel is listening on 443 and then redirecting to 7647.


I will metion that I have only tried this from Windows IE and Windows version of Firefox. From a remote location you cannot stream the video, this would be cool, however the code that is used tries to connect to:

http://127.0.0.1:7647/blah..blah..blah...

So you would have to find the code, if possible (I'm sure it is) and modify it, however if your IP address at home changes it won't work. If you use a FQDN then you'd be set, I have a FQDN that get's set every hour. Smile

RUNNING LINUX at home?

Well you probably already have stunnel installed, maybe not. Get it installed and instead of just putting in the conf file connect=7647 you must put in the IP address of your GBPVR box, something like this:

connect=my.gbpvr.machine.ip:7647

That's it pretty much, just make sure the service is running via inetd, xinetd or however you want to run it.. I'm expecting you to know how to do this if you run Linux.. Smile


Enjoy!

John
//// GBPVR \\\\
Abit
2.8GHz Proc
1 GB RAM
80 GB SATA sys volume
200 GB SATA Video Storage
3x PVR150s
2x MVPs - 100Mbps LAN attached

/// Music Server \\\
CentOS Samba Server
(moving to Video Server to be MediaServer Smile )

/// Video Server \\\
FreeNAS
1TB total storage
<to be renamed MediaServer>


Plugins: Xrecord, Video Archiver, DVD2MPG, My M.V.P., Weather, Theater, Rectracker
Networker
Offline

Member

Posts: 188
Threads: 20
Joined: Feb 2005
#4
2005-06-16, 01:37 AM
Did I mention that you can pretty much just use this for managing your recordings for now. I have tested and it would seem the Web Interface automatically setups the IP address and trusted port (7647/tcp default) based on the IP you connect to. As stunnel is using localhost (127.0.0.1) that's the IP given back.. Easy to fix if you modify the stunnel.conf file, in front of 443 put the assigned IP address of your GBPVR box (i.e 192.168.1.5:443), and the same for the connect port. Restart the stunnel service and all should be good, I have not tested this yet, but it would seem, in theory, to work. It won't fix your connection remotely, that's something you'll have to change in the m3u file.

John
//// GBPVR \\\\
Abit
2.8GHz Proc
1 GB RAM
80 GB SATA sys volume
200 GB SATA Video Storage
3x PVR150s
2x MVPs - 100Mbps LAN attached

/// Music Server \\\
CentOS Samba Server
(moving to Video Server to be MediaServer Smile )

/// Video Server \\\
FreeNAS
1TB total storage
<to be renamed MediaServer>


Plugins: Xrecord, Video Archiver, DVD2MPG, My M.V.P., Weather, Theater, Rectracker
betlit
Offline

Senior Member

Posts: 449
Threads: 17
Joined: Feb 2005
#5
2005-06-16, 10:52 AM (This post was last modified: 2005-06-16, 10:57 AM by betlit.)
thanks a lot, networker!

kayleigh Wrote:I've never used the web interface since I've had concerns about the security Smile.

i don't really trust the '.net-webserver' either *g*

i'm using an apache webserver (running on my 'regular pc' acting as a reverse proxy) to connect my tv-compy for accessing the gbpvr-web-interface.
both are behind a router and only port 80 is opened (forwarded directly to my regular compy)
the whole thing is protected by password (.htacces, .hpasswd 'n stuff).

setting up ssl will now be the next step... *g*

sadly, my (cheap) WLAN-card does not support wake-on-lan (i heard that WOL in a WLAN network is possible in general)
AMD 1600mHz, 512 M RAM, 20+160 GB drive, Hauppauge PVR-350 + PVR-150 + PVR-150MCE, Win XP Pro SP3, using software decoding.


There is a theory which states that if ever anyone discovers exactly what the Universe is for and why it is here, it will instantly disappear and be replaced by something even more bizarre and inexplicable.

There is another theory which states that this has already happened.

(The Restaurant at the End of the Universe)
« Next Oldest | Next Newest »

Users browsing this thread: 1 Guest(s)



Possibly Related Threads…
Thread Author Replies Views Last Post
  External tool: Transfer Season Record schedules from GBPVR to NPVR kendrak24 37 20,964 2013-04-11, 05:58 AM
Last Post: kendrak24
  myGBPVR: use XMBC as GBPVR FrontEnd Ton 161 63,199 2012-02-15, 07:04 PM
Last Post: rantzau
  Translations for nPVR and GBPVR MixMan 19 8,028 2011-08-25, 07:32 PM
Last Post: sub
  N3XT Rev 001.6 with GBPVR support psicotron3 0 1,964 2009-08-30, 08:57 PM
Last Post: psicotron3
  fix for network access + Interact w/desktop pBS 6 6,104 2009-08-04, 03:49 AM
Last Post: mvallevand
  Showname - Rename utility for GBPVR recordings Anthony 0 1,449 2009-03-05, 05:40 PM
Last Post: Anthony
  GBPVR install on WINE/Ubuntu Gutsy fhmanas 28 15,688 2009-02-03, 12:53 PM
Last Post: fhmanas
  GBPVR Wellington Xmas drinks psycik 44 10,802 2008-12-08, 05:44 AM
Last Post: skippy_nz
  Possible infection found on GBPVR site? suddste 40 12,784 2008-10-21, 01:06 AM
Last Post: sub
  GBPVR LCD Plugin for LCDSmartie fooman1 146 67,450 2008-07-03, 08:04 PM
Last Post: prada115

  • View a Printable Version
  • Subscribe to this thread
Forum Jump:

© Designed by D&D, modified by NextPVR - Powered by MyBB

Linear Mode
Threaded Mode