Error 6036 when trying to connect to a stream.

[Gaëtan André]

I am using Archlinux and installed the pipelight package from the AUR as specified on pipelight's page. I got this error :

6036 : Graphics device's driver certificate is invalid.

I am using the lastest nvidia drivers available in arch repos.

[Gaëtan André (gaetan-andre)]

* The console output when starting your browser via the command line

http://dpaste.com/1353228/

* The URL to the Silverlight application you have problems with (if it is available for the public)

You need an account to connect. : http://www.canalplus.fr/secure/2/abonne/livetv/pid3647-c-live-tv-premium.html

* The Silverlight version you are using (see about://plugins in your browser)

5.1.20513.0

* The desktop enviroment / window manager you are using (Unity, GNOME, Cinnamon, ....)

GNOME

* If it is DRM related, do you have problems with a specific video or all DRM protected content?

Apparently, Silverlight does not manage to get the licence of the graphic drivers.

[Sebastian Lackner (slackner)]

Hi,

hm, unfortunately thats not an easy to solve error message :/

There are different levels of DRM protection, most video streaming sites don't use the "strongest" level which requires to use signed video drivers - unfortunately there is no workaround available for wine yet.

You can probably try to downgrade to Silverlight 5.0 or 4.0 and enable faking for 5.1 if it requires the latest one, this might help with some sites, but not with all.
How to do this is described in these instructions:
https://answers.launchpad.net/pipelight/+faq/2358

If this still doesn't help solving the problem, you'll unfortunately have to be patient. The same problem also occurs with Lovefilm, and we are already investigating if there is a workaround for that.

If the method to downgrade helps in your case please report back.

Sebastian

[Gaëtan André (gaetan-andre)]

I am under ArchLinux and only the wine-silverlight5 installer is available.

[Gaëtan André (gaetan-andre)]

By the way, thanks for the answer! And pipelight, is almost awesome. But I hope that someday it will be unnecessary.

[Sebastian Lackner (slackner)]

Hm, its theoretically also possible to install Silverlight manually, but thats much more complicated - probably there will be some installers for other Silverlight versions available in the next AUR release, Anish is working on making it a bit more compatible with the Ubuntu release.

Nevertheless I don't really think that downgrading will fix this, as its unlikely that the video content is delived with different DRM strength in this case.

Unfortunately there is not much I can do to fix this at the moment. :/ If you manage to find any public available test site which raises this error, please share! This would make testing much easier.

[Gaëtan André (gaetan-andre)]

What would be the point for a pulic site to have the strongest DRM protection available ? I don't think such a website exists. But anyway, maybe administrators of Canal+ would agree to create a test account. I will try to contact them.

[Michael Müller (mqchael)]

Hi Gaëtan André,

Silverlight describes even worse DRM protections levels. They are divided in categories and can be seen here:
http://blogs.msdn.com/b/silverlight_sdk/archive/2010/07/09/silverlight-output-protection.aspx

A content provider can for example force you to use a Display which is connected via HDCP encryption and things like that.

Michael

[Erich E. Hoover (ehoover)]

We could probably convince someone to compile a Silverlight "app" that allows us to choose a protection level and generate a custom manifest for testing. Unfortunately, I don't know anyone who does anything with Silverlight though :/

[Michael Müller (mqchael)]

Good news! I found the corresponding bugs and missing features in Wine which prevented Lovefilm from working. Lovefilm does not absolutely require a driver certificate, but it will try to use one if available. If we tell Silverlight that the driver does not have any certificate, it will play anyway. This might also apply to other streaming sites, but we need to test this.

If a website really requires a driver certificate I currently do not know any perfect solution as the certificate must be signed by Microsoft.

Small tip: You can try to use your streaming website in Virtualbox as the WDM driver of Virtualbox is not signed either. If it works, you have a good chance that the website will also work with the next version of Pipelight.

[Miguel (xadrezmiguelpires)]

Hi @Michael Müller,
I can test this with the service MeoGo.pt. If the pipelight have the patch now, in 2h I can test.
Regards
Miguel

[Sebastian Lackner (slackner)]

Hi Miguel,

unfortunately the patch is not available yet, as we still have to clean up the code a bit and add it to the wine-compholio package.
The current solution is more like a hack-fix. Cleaning up and including it to the package will most probably need at least ~24hours or even a few days, until it is available via update, as there are a lot of changes involved.

We will change the status of this bug report when its included and everything is ready to test. Just subscribe to this bug report if you want to be informed as soon as possible.

Sebastian

[Miguel (xadrezmiguelpires)]

Ok Sebastian! Thks for the eforts.
:)

[Gaëtan André (gaetan-andre)]

I tested the Canal + website with WDDM drivers in VirtualBox. Same error . Thanks guys for the effort.

[Michael Müller (mqchael)]

@Gaëtan André:
This is dumb, but since we won't get any certificate from Microsoft and every other solution (although technically possible) would be illegal in some countries we can't do anything against it. We can not pass any certificate to Silverlight or make Silverlight believe that our certificate is valid without breaking any laws, so you would need to convince the streaming website that they do not require driver signing to be able to use Pipelight with it (I believe the chances to convince them is as high as we will get a certificate from Microsoft...).

We can only hope that most websites like Lovefilm just ask if a driver certificate is available but do not really require one.

[Miguel (xadrezmiguelpires)]

Any news about the new version?
About the possible illegality of your solution what they are doing is not illegal to? I don't agree with my provider to they use some program installed in my system to check components. I made a formal complain against them. I'm wayting for the anwser.
Will see what this going to end.
Regards

[Michael Müller (mqchael)]

The current solution is not illegal, we simply tell Silverlight that our Driver is not signed. This is already implemented in our development version, but we currently have some issues with Lovefilm which are not DRM related. We simply get an annoying popup message which wants to inform us about some error, but everything else works without issues. We are already spent some days to find this error, but it seems to be a race condition (i.e. the error shows up after a random amount of time) so it's really hard to find the cause of this problem. Our plan is to get rid of this error before publishing the new version (otherwise you would need to click away some annoying popup messages every 2-3 minutes).

I think this should work for most of the sites, but not all. I assume that the other sites do not just want to check the driver certificate, they want to create a chain of trust. The typical next step after checking a driver certificate would be to enable HDCP encryption on the display to protect the video. I wonder if one of this sites, which do no work in Virtualbox, work in Windows if your Monitor is connected via VGA, since I doubt that any of this protection mechanisms work with VGA. If you have multiple monitors, you can also try to add a monitor during the playback in Windows, this should also stop playback if this kind of encryption is enabled.

If anyone is interested in more information about this topic take a look at http://msdn.microsoft.com/en-us/library/windows/desktop/dd407266(v=vs.85).aspx

[Gaëtan André (gaetan-andre)]

I tried the Canal + website in Windows (not in VirtualBox) with VGA cable and it works. All of this is just unbelievable.

[Michael Müller (mqchael)]

Just a small update: We finally found the bug which caused these annoying popup messages on Lovefilm. I am still a bit annoyed that we spent countless hours (6 days...) to find a bug which was inside Silverlight. They expected some settings to be set by default which is clearly not part of the NPAPI or documented anywhere. Most browsers set this by accident as they need it somewhere, so this error does not occur on Windows. Since this is already the third time we found Silverlight violating the NPAPI or requiring some undocumented behavior it doesn't surprise me much.

Anyway, this was the last blocker which prevents us from releasing the next version. The last step is now that ehoover push a new Wine package and we need to include some scripts to install some additional files. So it shouldn't take too long till we are able to release the next version.

[Sebastian Lackner (slackner)]

Hi,

we have just requested a new build for the updated version v0.1-3, which includes a fix for the Lovefilm bug.

You can view the current progress here:
https://code.launchpad.net/~mqchael/+recipe/pipelight-release

For other distributions it will probably take a bit longer, depending on the schedule of the involved maintainers, so just check periodically if there are updates available.

I recommend everyone having DRM related problems to test again with this new version (as soon as it is available) - even if it doesn't provide a complete fix its possible that we're a big step closer with all these additional patches.

If you're still experiencing problems, please note that one streaming provider even told on the phone, that their service doesn't work with Silverlight 5.1, so you should consider downgrading to Silverlight 5.0 in this case (as far as I know the next AUR release provides some easier ways to do this, too).

If the problem persists we would like to get some more detailed information (especially the terminal output, ..) - please post it in this new bug report: https://bugs.launchpad.net/pipelight/+bug/1222293

Sebastian

[Sebastian Lackner (slackner)]

Fixed (at least for Lovefilm), and works, as you can see on the following screenshot:
https://dl.dropboxusercontent.com/u/21447213/lovefilm-pipelight.png

Watchever support will be fixed too soon, on the next wine-compholio release.

For other streaming sites, which still don't work, please provide additional information as described in my previous post.

Sebastian

[Miguel (xadrezmiguelpires)]

Hi Sebastian,
A first test i did with the new build in a 13.04 Machine, and I can say it works in Meogo.pt (only have done test like change channels and lets stay a few minutes on that channel) I' going to test a little further. Men thks for the hard work. Let me now wher i can donnate!

Best Regards
Miguel