New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 705976 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner:
Closed: Apr 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows , Mac
Pri: 1
Type: Bug-Regression



Sign in to add a comment

Widevine CDM sends certificate request while persistentState is set to 'optional'

Reported by bertrand...@orange.com, Mar 28 2017

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0

Steps to reproduce the problem:
1. Open shaka player demo page (https://shaka-player-demo.appspot.com/demo/)
2. Load a protected test stream, for example "Tears of Steel (Widevine)"
3. The widevine CDM sends 2 requests, the certificate request followed by the license challenge request

What is the expected behavior?
The CDM should only send the license challenge request since the persistentState of the MediaKeySystemConfiguration is set to 'optional'

What went wrong?
The widevine CDM sends a certificate request while the persistentState of the MediaKeySystemConfiguration is set to 'optional'

Did this work before? Yes 57.0.2987.110

Does this work in other browsers? Yes

Chrome version: 58.0.3029.33  Channel: beta
OS Version: 10.0
Flash Version:
 
Labels: Needs-Bisect Needs-Triage-M58
Cc: kavvaru@chromium.org
Labels: Needs-Feedback
Tested the issue on windows 7 using chrome version 58.0.3029.33 with the below steps

1.Open URL https://shaka-player-demo.appspot.com/demo/
2.Load the Stream "Tears of Steel"
3.Able to see the messages in console as like in screen shot

Observed the same behaviour on chrome version 57.0.2987.110.
Could you please find the attached screen shot and confirm if anything missed here.If possible please provide us any screen shot for better understanding the issue.

Thanks,
705976.png
149 KB View Download
Pleased find attached the illustration of the difference between chrome 57 and chrome 58.
In chrome 58 we see the certificate request before the license challenge request.
chrome57.jpg
294 KB View Download
chrome58.jpg
325 KB View Download
Project Member

Comment 4 by sheriffbot@chromium.org, Mar 30 2017

Labels: -Needs-Feedback
Thank you for providing more feedback. Adding requester "kavvaru@chromium.org" to the cc list and removing "Needs-Feedback" label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Components: Internals>Network>HTTP
Labels: -Pri-2 -Needs-Bisect -Needs-Triage-M58 has-Bisect M-58 OS-Mac Pri-1
Owner: jrumm...@chromium.org
Status: Assigned (was: Unconfirmed)
Able to reproduce the issue on windows 7, Mac 10.12.3 using chrome version 58.0.3029.41 and canary 59.0.3061.0 with the below steps

1.Open URL https://shaka-player-demo.appspot.com/demo/
2.Load the Stream "Tears of Steel(Widevine)"
3.Observed that request payload is not properly displayed.But on Mac Request Payload is empty.

This is regression issue broken in M58.Please find the bisect information as below

Narrow Bisect::
Good :: 58.0.3016.0  --   (build revision 451403)
Bad:: 58.0.3017.0  --   (build revision 451476)

Tried the bisect on windows and Mac.On Mac getting all the good builds even after increasing the bad revision.
On Windows the provided video is disabled on invoked builds.Hence unable to provide tool bisect.

Omahaproxy CL::
https://chromium.googlesource.com/chromium/src/+log/58.0.3016.0..58.0.3017.0?pretty=fuller&n=10000

Possible suspect might be
https://codereview.chromium.org/2699773003

jrummell @ Could you please look into this issue if it is related to your change,else please help us in finding the appropriate owner for this issue.

Thanks,
Components: -Internals>Network>HTTP -Blink>Internals Internals>Media>Codecs
Components: -Internals>Media>Codecs Internals>Media>Encrypted
Status: WontFix (was: Assigned)
By design. Before Chrome 58, certificates were only needed when certain options were used.  Starting in Chrome 58, certificates are always needed, so Widevine will always request the certificate.
OK thanks. I got also this information in parallel.
This issue can be closed.

Sign in to add a comment