[UAT license server bug] Widevine contents fail in demo app with Chrome Beta 58 and Canary 59

• What version of Shaka Player are you using? 2.0.8

  • Can you reproduce the issue with our latest release version? Yes
  • Can you reproduce the issue with the latest code from master? Unknown

• Are you using the demo app or your own custom app? Demo app

• What browser and OS are you using? It fails with Chrome Beta 58 and Canary 59. It works with current Stable Chrome 57.

  • Chrome Beta 58 (58.0.3029.54) and OSX El Capitan (10.11.6)
  • Chrome Canary 59 (59.0.3068.1) and OSX El Capitan (10.11.6)

• What did you do? Load the demo app at https://shaka-player-demo.appspot.com/demo/ Select a Widevine asset from the drop down list Click on “Load”

  • What content did you load? The player fails with the following Widevine contents:

    • Angel One (multicodec, multilingual, Widevine)
    • Sintel 4K (multicodec, Widevine)
    • Tears of Steel (Widevine)
    • Dig the UK It works with the rest of the contents.

  • If standard demo asset, which one? The ones specified in the previous answer.

    • If custom asset, what manifest and license server URIs? No custom asset

  • How did you interact with the content, if at all? I just loaded the content.

• What did you expect to happen? The assets play normally.

• What actually happened? An error is shown with the following message:

Shaka Error DRM.LICENSE_REQUEST_FAILED (shaka.util.Error { “category”: 1, “code”: 1001, “data”: [ “https://widevine-proxy.appspot.com/proxy”, 500, “INVALID_LICENSE_CHALLENGE”, { “content-type”: “text/html; charset=utf-8”, “cache-control”: “no-cache”, “”: “” } ], “message”: “Shaka Error NETWORK.BAD_HTTP_STATUS (https://widevine-proxy.appspot.com/proxy,500,INVALID_LICENSE_CHALLENGE,[object Object])”, “stack”: “Error: Shaka Error NETWORK.BAD_HTTP_STATUS (https://widevine-proxy.appspot.com/proxy,500,INVALID_LICENSE_CHALLENGE,[object Object])\n at new shaka.util.Error (https://shaka-player-demo.appspot.com/lib/util/error.js:63:13)\n at XMLHttpRequest.xhr.onload (https://shaka-player-demo.appspot.com/lib/net/http_plugin.js:76:16)” })

The request to the widevine proxy is failing with a 500 HTTP error and INVALID_LICENSE_CHALLENGE message.

This request seem to be a certificate request since the payload is just 2 bytes.

The problem could be related to the latest Widevine announcement “CHROME 58 AND SERVICE CERTIFICATES” available at https://www.widevine.com/product_news.html

The current stable Chrome 57 release works. In this case, it does not perform any certificate request to the Widevine proxy, it just performs a license request.

[joeyparrish]

Yes, I can confirm that the issue with UAT has been fixed.

The sample code provided by Widevine shows how to avoid the extra request made by the CDM to provision the server certificate. If you provide the CDM with a certificate in advance, it won’t have to request one. This is an optimization that is not required, but Shaka Player supports through configuration.

I don’t have a good answer on where you should get this certificate from. I will work to clarify that, and make an announcement on the shaka-player-users list when I have that information. In the mean time, everything should still work.

Since the bug in UAT is fixed, I’m going to close this issue. Thanks, everyone, for your patience.

[mlondon1]

We reached out to our Widevine contacts, i just wanted to update the ticket. It works in production, which is good.