SkyGo italian / mytf1vod - error 6030 (with Silverlight 5.0 and 5.1)

Hi hoeg85,

it might be possible that you're the first person that is stumpled upon a page, that requires a better DRM protection level.

A bit background information: The error 6030 is nothing completely new, it also occured on a lot of other pages in earlier versions of pipelight, but it should be fixed for most of them - EXCEPT pages that really require Microsoft signed driver certificates - see https://bugs.launchpad.net/pipelight/+bug/1222293 .

Nevertheless it might be possible that there is still something configured wrong, so to ensure that this is not the case, please check the following things, and report back, what the settings are / if these things work for you.

* I'm not sure if this could be related to the problem, but please check, if there is an update for "wine-compholio" available. The following line suggests that you're still using an older version, as this message doesn't occur that often in new versions:
[PIPELIGHT:LIN] pluginfunctions.c:561:NPP_Destroy(): plugin did not deinitialize properly, killing it!

sudo apt-get update && sudo apt-get upgrade

You should also install all other updates related to pipelight, wine-*-installer and things like that.

* The debug output above shows that you've already changed the silverlightVersion in your config file, but doesn't show all the other settings. Can you please attach your config file to take a look at it, and to verify that all changes are correct:

/home/user/.config/pipelight

* I assume you didn't have the possibility yet to test with other DRM protected pages yet, is this correct? The following DRM test page should work with Silverlight 5.0: http://web.sldrm.video.msn.com/d1/sldrm.html (BUT NOT WITH 5.1!).
If this one also doesn't work, please check with the following command if you have XATTR enabled.

touch ~/.xattr_test && setfattr -n 'user.testAttr' -v 'attribute value' ~/.xattr_test &> /dev/null; getfattr ~/.xattr_test 2>&1 | grep -q user.testAttr && echo 'It works!' || echo 'No workie!'; rm ~/.xattr_test &> /dev/null

If this prints "No workie!" you should check if you have XATTR disabled in /etc/fstab or if you're using a filesystem without any XATTR support (ext3,4 should be supported).

.

I hope that one of these ideas helps to solve the problem, as its currently not possible yet to work around this issue, when the webpage REALLY wants Microsoft signed driver certificates - but so far we didn't find any example for this yet.

Sebastian

Hi Sebastian,
This link works http://web.sldrm.video.msn.com/d1/sldrm.htm only on progressive download an dnot with streaminbg option.

Also rai.tv works fine.

This command

Touch ~/.xattr_test && setfattr -n 'user.testAttr' -v 'attribute value' ~/.xattr_test &> /dev/null; getfattr ~/.xattr_test 2>&1 | grep -q user.testAttr && echo 'It works!' || echo 'No workie!'; rm ~/.xattr_test &> /dev/null

results in "No workie!" I'm a low experience user, how can I fix it?
If I gedit /etc/fstab the file show

# UNCONFIGURED FSTAB FOR BASE SYSTEM

Thanks

I hope that you can add skygo.it to the list :)

Hi hoeg85,

as the DRM test page works XATTR is definitely available for Silverlight, even if you're probably missing the command line tool to test it via terminal. To fix this you can install the "attr" package:
sudo apt-get update && sudo apt-get install attr
but this will have no effect on SkyGo.

Does the italian SkyGo page mention that it will only work with Microsoft signed graphic card drivers or something similar? It is really a bit weird, but exactly the same configuration you're using seems to work for SkyGo in other countries :/

I assume you already did some testing, nevertheless I would suggest you to try:

1) select some other user agent strings, and retest - for example newer firefox versions, or alternative windows user agent strings. The user agent switcher somewhere offers a settings-menu where you can enter custom user agent strings. You can test with some of the strings for example from here:

http://www.useragentstring.com/pages/Firefox/
http://www.useragentstring.com/pages/Chrome/

2) You can also try to downgrade to 4.0 - even if the page states that a newer version is required, it could be just some kind of artificial check, not a real requirement. See: https://answers.launchpad.net/pipelight/+faq/2358

sudo apt-get install wine-silverlight4-installer

The following changes in ~/.config/pipelight are always required:
dllPath = c:\Program Files\Silverlight\4.1.10329.0\
silverlightVersion = silverlight4

These changes could help, if the page wants you to update your Silverlight version:
fakeVersion = 5.1.20513.0
overwriteArg = minRuntimeVersion=4.1.10329.0

.

If nothing of these ideas helps (and the other DRM pages work as expected) I suspect that they really require signed graphic drivers. The same problem would also occur on Windows, when you're using for example an old graphic card without signed drivers, or running it in a VM which doesn't have signed graphic drivers - do you know if some other customers have similar problems on Windows?

Sebastian

Hi Sebastian

1) I use user switcher with MAC OS because otherwise SKYGO will not reconize a supported operating system. Changing to other versions of Firefox and Chrome for Win had not fixed the problem. I am still able to view only SKYTG24

2) Downgrading had not changed the result

here the output when the error comes:

fixme:wininet:query_global_option Stub for 6
fixme:quartz:VMR7_IVMRMonitorConfig_GetAvailableMonitors (0x4acdb88/0x4acdb88)->(...) stub
fixme:win:EnumDisplayDevicesW ((null),0,0x63d468,0x00000000), stub!
fixme:win:EnumDisplayDevicesW ((null),1,0x63d468,0x00000000), stub!
fixme:quartz:VMR7_IVMRMonitorConfig_SetMonitor (0xb7b1918/0xb7b1918)->(...) stub
err:quartz:CheckCircularConnection Checking filtergraph returned 80040231, something's not right!
fixme:quartz:VMR9Inner_QueryInterface No interface for {fd501041-8ebe-11ce-8183-00aa00577da2}
fixme:quartz:VMR_IAMCertifiedOutputProtection_KeyExchange (0xb6bc198/0xb6bc198)->(...)
fixme:wininet:query_global_option Stub for 6
fixme:quartz:VMR7_IVMRMonitorConfig_GetAvailableMonitors (0x4acdb88/0x4acdb88)->(...) stub
fixme:win:EnumDisplayDevicesW ((null),0,0x63d468,0x00000000), stub!
fixme:win:EnumDisplayDevicesW ((null),1,0x63d468,0x00000000), stub!
fixme:quartz:VMR7_IVMRMonitorConfig_SetMonitor (0xb7b1918/0xb7b1918)->(...) stub
err:quartz:CheckCircularConnection Checking filtergraph returned 80040231, something's not right!
fixme:quartz:VMR9Inner_QueryInterface No interface for {fd501041-8ebe-11ce-8183-00aa00577da2}
fixme:quartz:VMR_IAMCertifiedOutputProtection_KeyExchange (0xb6bc198/0xb6bc198)->(...)

I am running Chrubuntu on a Chromebox serie 3. The video card is Intel.

Thanks

Everything so far looks like the page really needs signed graphic drivers :/ Unfortunately this means that there isn't an easy workaround, but we will have a look at it, and check if we can fix this somehow. We cannot promise anything, because it isn't possible to create such a certificate ourself, but we would have to find some way to reuse existing certificates or make the pages itself use a lower DRM protection instead - don't know yet if any of these methods would work in practice.

For other readers that stumple upon this bug report: For most other pages downgrading to Silverlight 5.0 solves this problem completely, this bug only affects pages, that completely refuse to work without MS graphic drivers.

Sebastian

Hi Sebastian,
thanks for the big effort! I'm available for doing tests.
I have already registered the device! Would be good if someone else will try to stream Skygo.it using pipelight.

ps: in the web I found that some people solved the error 6030 (in Windows system) deleting the files into the folder ..... \Application Data\......PlayReady\

Hoping for good news

Marco

Hi,

I agree - if some other people could confirm this bug report (or provide a test page that has the same bug with Silverlight 5.0) that definitely could help to track down the issue.

Deleting the PlayReady folder can help in some cases (e.g. when the files are corrupted), but I doubt that it helps in your case. You can try it out just by executing the following command (close all browser windows before that):

rm -rf ~/.wine-pipelight/drive_c/users/Public/Application\ Data/Microsoft/PlayReady/

Sebastian

Hi Sebastian,

some people reported error 6030b when they uses an external monitor. My configuration is , a Samsung Chromebox running chrubuntu (phisically it has 2 DP + 1 DVI). I use the tv as monitor connected with a DP to HDMI cable.

Could you help me checking if skygo is detecting the tv as not the main screen?
Attached the lshw output, xorg.conf.failsafe and the monitor.xml.

Thanks

Marco

Hi Sebastian,

here the test page of skygo.it

http://skygo.sky.it/systemcheck.shtml

I can pass the OS check only if I use an user agent switcher with Mac OS X (not Safari 5).
Any ideas?

Thanks

Marco

Hi Marco,

in the first entry you wrote that you're using a user agent switcher set to Firefox 15 - did you change the user agent between the bug report and attaching the screenshot?

Nevertheless I doubt that the user agent is the real issue. The SkyGo check page probably fails just because it isn't the latest available firefox version (even though this is not really a requirement to use Silverlight).

All things I've heard to far (the error code, the things we've already tried out, the fact that it works with the silverlight DRM test page) sound exactly like the issue that this page requires some other DRM protection.

You've to know that there isn't just one kind of DRM protection, but instead Silverlight gets a (cryptographically signed) license file, which exactly contains output protections and restrictions, for example that a specific movie should only be played with signed graphic drivers or things like that. Error 6030 has the meaning that it wasn't possible to fulfill these requirements and thus the output is denied.

The best method to find out what exactly goes wrong would be to have some kind of test page, with exactly the same DRM protection (does the italian SkyGo have something like that?).

Sebastian

Hi Sebastian,

RAI.TV works only in if I use an user agent switcher that let my system appear like a MAC. (I've tested a huge amount of strings)

Also skygo pass the OS check only if I use an user agent switcher with a MAC string. In any other case the OS check results in a red cross. I've tested also the last version of Firefox but red cross again. (the version of the browser is a separate check).

In the last period SKY blocked the secondary monitor and people on the forum reported error 6030b. I'm aware that this can be my issue.

Unfortunatly Sky provides only this page http://skygo.sky.it/systemcheck.shtml for a system check.

Marco

Hi,

thanks to the following bug report we finally have a page where we can reproduce exactly the same error and do some more testing:
https://bugs.launchpad.net/pipelight/+bug/1243655

We'll keep you up to date in case we're able to find a workaround.

Sebastian

Hi,
that's a good news.

Do you feel comfortable to make it works?
I always had few problems when I used an user agent that makes me like a mac user. I don't believe that the check on the mac is based on "Windows" certified video drivers. I would suggest you to explore the way to pass MAC infos to the test page. But I'm not an expert!

have a good job!

Marco

Do you have any news about it? I have the same issue.

Hi,

I'm very sorry, but currently we don't have any working solution for this. Solving this problem isn't that easy, especially because it involves myriad legal issues.

Implementing the missing functions into Wine would require specific graphic driver features, which unfortunately are not available on Linux, not even in proprietary graphic drivers. We've already been talking to employees of graphic card vendors, and they're also not able to port these features in the near future since this would violate their contracts with Microsoft when they do this. We're also not able to implement it ourself since the drivers have to be signed by Microsoft, and only Windows drivers can be signed at all.

We're not yet giving up on this bug, but nevertheless you better shouldn't expect a solution immediately during the next time. We are still evaluating different options we have left, but most of them involve a lot of additional work (like using these functions from a Windows version of the graphic card drivers).

@giovanni: If you want to use a different site than the one mentioned in this bug report and you've experienced the problem with Silverlight 5.1, then there is still a bit hope, that it could work with 5.0 (the DRM system has changed between these versions). This bug report is only related to the issues when it doesn't work at all with both 5.0 and 5.1.

Sebastian

Hi Sebastian. I have the same problem with both 5.0 and 5.1.

However thanks a lot for your work: for Italian users it's very useful to have a plugin that works in rai.tv, as Pipelight perfectly do. I'm not able to help you at all.

Rai.tv is not working anymore for me. I have tried several user-agents. Giovanni could you please confirm that it is still working for you?

Silverlight Plug-In
Descrizione: 5.1.20513.0
Versione:
Percorso: /usr/lib/pipelight/libpipelight-silverlight5.1.so

Some channels are working like RAI4, RAI movie but others after the buffering reaches 100% black screen. I have found a workaround by opening as pop-up or using the agent Opera10

Hi,

a long time passed since we gave you an update on this problem and now we can give you a final answer.

Before I will tell you the recent updates, I will first give again a short summary about the background of this problem. Some Silverlight videos use the so-called "certified output protection", which is only available when the graphic card supports a special set of commands. These commands use cryptographic methods, so that the application can be sure it gets the correct values from the graphic card, and the response is not faked. The graphic cards have a certificate which they use to sign the responses and the certificate itself must be signed by Microsoft. The problem is that the Linux drivers (even the proprietary ones from AMD or NVIDIA) do not support these commands. We asked them to simply enable them on Linux since this would be a perfect legal way for us to solve this problem, but they declined this idea. The only company left here which could indeed help us solving this problem. would be Microsoft. If they would give us a legal key we could add the required implementation, but everyone else who gets the key could use it to break their whole DRM, so this is very unlikely to happen. Even if they would give us such a key, it would mean that we need to provide binary blobs with pipelight/wine-compholio, which is also not really possible since both are open-source projects.

Beside these perfectly legal ideas, there also some other creative ways to get around this problem. We spent most of them time talking to organizations like the Free Software Foundation Europe and asked them whether one of these creative ways may not violate any laws. The result is sadly that all these ideas are at least in some gray area and they don't know any similar cases and therefore highly suggest us not to do any of them. The Software Freedom Conservancy, which helps the Wine project to solve such problems, declined to take a look at our ideas, since they think this problem is not related to Wine (although all these functions needs to be implemented in wine and the problem can also be triggered without pipelight at all) . The only way to continue would be to pay some good lawyers to analyze this more in detail and there is no guarantee that a judge would decide the same way.

We can not really spent a lot of money on this problem and it does not make sense to endanger the whole project to solve this bug. We therefore think that this problem a is a won't fix. We can do a lot to solve technical problems, but we can not change laws.

Michael

Thanks a lot for this update.

--
Stephane
Le 24 oct. 2014 21:55, "Michael Müller" <email address hidden> a écrit :

> Hi,
>
> a long time passed since we gave you an update on this problem and now
> we can give you a final answer.
>
> Before I will tell you the recent updates, I will first give again a
> short summary about the background of this problem. Some Silverlight
> videos use the so-called "certified output protection", which is only
> available when the graphic card supports a special set of commands.
> These commands use cryptographic methods, so that the application can be
> sure it gets the correct values from the graphic card, and the response
> is not faked. The graphic cards have a certificate which they use to
> sign the responses and the certificate itself must be signed by
> Microsoft. The problem is that the Linux drivers (even the proprietary
> ones from AMD or NVIDIA) do not support these commands. We asked them to
> simply enable them on Linux since this would be a perfect legal way for
> us to solve this problem, but they declined this idea. The only company
> left here which could indeed help us solving this problem. would be
> Microsoft. If they would give us a legal key we could add the required
> implementation, but everyone else who gets the key could use it to break
> their whole DRM, so this is very unlikely to happen. Even if they would
> give us such a key, it would mean that we need to provide binary blobs
> with pipelight/wine-compholio, which is also not really possible since
> both are open-source projects.
>
> Beside these perfectly legal ideas, there also some other creative ways
> to get around this problem. We spent most of them time talking to
> organizations like the Free Software Foundation Europe and asked them
> whether one of these creative ways may not violate any laws. The result
> is sadly that all these ideas are at least in some gray area and they
> don't know any similar cases and therefore highly suggest us not to do
> any of them. The Software Freedom Conservancy, which helps the Wine
> project to solve such problems, declined to take a look at our ideas,
> since they think this problem is not related to Wine (although all these
> functions needs to be implemented in wine and the problem can also be
> triggered without pipelight at all) . The only way to continue would be
> to pay some good lawyers to analyze this more in detail and there is no
> guarantee that a judge would decide the same way.
>
> We can not really spent a lot of money on this problem and it does not
> make sense to endanger the whole project to solve this bug. We therefore
> think that this problem a is a won't fix. We can do a lot to solve
> technical problems, but we can not change laws.
>
> Michael
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1235918
>
> Title:
> SkyGo italian / mytf1vod - error 6030 (with Silverlight 5.0 and 5.1)
>
> Status in Netflix Desktop:
> Triaged
> Status in Pipelight:
> Confirmed
> Status in Wine:
> Confirmed
> Status in Wine "Compholio" Edition:
> Triaged
>
> Bug description:
> Hi there, I,m unable...

Thank you Michael for the clear explanation.

Do you think that asking Sky to remove this check might be a viable option?

Perhaps if enough people speak up, they might do it.

Since nvidia drivers are signed in linux, would it possible to fix this bug for nvidia users?

Jeremielapuree: It would be if nVidia provided us with an API that we could use to talk to the driver to implement COPP. Unfortunately, we've been told that it is a condition of some of their contracts that they do not do this.

The driver signing is completely unrelated to this issue. COPP requires that the driver is signed by microsoft (and not by nvidia) and the driver needs to support some special interface.

In France, any tool whose aim is to preserve the interoperability between operating system is allowed:
Extract of the law (DADVSI law): (in french) "Un dispositif mis en place par un exploitant aux fins de permettre l'interopérabilité de systèmes informatiques, dès lors qu'il est rendu possible par la diffusion d'informations par les fournisseurs de mesures techniques, ne constitue pas un dispositif portant atteinte aux mesures de protection au sens du décret attaqué"

So, could you provide a special pipelight for french people that can bypass the 6030 bug ?

Thanks in advance

Just to add: Once you had requested all the informations to the editors (here microsoft and nvidia) to help interoperaibility, you can ask to the French goverment agency Hadopi to oblige these editors to release all the needed informations for interoperability

http://www.legifrance.gouv.fr/affichCodeArticle.do?cidTexte=LEGITEXT000006069414&idArticle=LEGIARTI000021212211

The code itself is not so problematic, but you need to have a private key for a certificate signed by microsoft. This is similar if you would like to have the private key for the SSL certificate of microsoft.com, don't you think microsoft will take all possible legal actions to prevent you from publishing it?

Some countries have laws to allow disassembling of applications in order to achieve compatibility with existing systems, but in this case you need to have the private for something that allows you to circumvent copy protections. Your idea of enforcing Microsoft to publish this key won't work, it would break their protection. There may be a little chance that you could enforce them to sign a linux driver if the driver would provide the same protection (i.e HDCP), but at the moment this is not the case for any linux driver. You would need to convince both NVIDIA and Microsoft.

There is theoretically also another solution: Some nouveau developer told us that the firmware used on NVIDIA gpus is the same between windows and linux. I don't know whether parts of COPP are implemented in the firmware, but it might be possible that everything we need is already inside of the firmware but the proprietary NVIDIA driver does not use it. If this would be the case, it might be possible for a nouveau developer to find out how COPP and HDCP is controlled on Windows and to implement the same logic into the nouveau driver. However, I think they have more important tasks than finding out how to enable copy protection features.

Here now good news and might be helpful

http://www.phoronix.com/scan.php?page=news_item&px=Freedreno-MSM-Linux-4.3

It would need to implement COPP as well, HDCP is only one element of the "protected output" delivery chain.

I'd just like to note that it is now possible to use skygo.it using the Chrome browser (not chromium!) under linux. Although a bit laggy on my intel HD5000 graphic card, it worsk just fine.
It does not use Silverlight anymore but an html5 player.
I think we should thank netflix for this step forward ;)