[ptfir]

Yes sir cmik please share to us. Thank u po.

In my case, I’m using an Apache server on another raspberry pi, set as SSL proxypass for akamai urls.
I can explain how I’ve done if you prefer this solution. 

 Yes please if you don't mind sharing it to us. 😬

Does it require some additional configuration in the Apache server? I might try and do it in a docker container so it'll always run in the background.

[cmik]

To use Apache as an SSL proxy :
- You will need an Apache server accessible from your Kodi system.
- You will need to access ssh to your Kodi system and be able to make changes to /etc/hosts file.

In my case, I use Kodi on a raspberry pi (computer A) and have an Apache server on another raspberry (computer B).

On computer B (Apache):
1. enable ssl and proxy on Apache server:

ssh:
$ sudo a2enmod ssl

$ sudo a2enmod proxy

$ sudo a2enmod proxy_http

2. create SSL certificate :

ssh:
$ sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/apache-selfsigned.key -out /etc/ssl/certs/apache-selfsigned.crt

ssh:
$ sudo openssl dhparam -out /etc/ssl/certs/dhparam.pem 2048

see step one of this article : https://www.digitalocean.com/community/t...untu-16-04

3. create a virtual host :

ssh:
$ sudo nano /etc/apache2/sites-enabled/default-ssl.conf

with content :

xml:
<IfModule mod_ssl.c>

        <VirtualHost *:443>

                ServerName o2-i.akamaihd.net



                ErrorLog ${APACHE_LOG_DIR}/error.log

                CustomLog ${APACHE_LOG_DIR}/access.log combined



                SSLEngine on

                SSLProxyEngine on

                SSLCertificateFile /etc/ssl/certs/apache-selfsigned.crt

                SSLCertificateKeyFile /etc/ssl/private/apache-selfsigned.key

                SSLCertificateChainFile /etc/ssl/certs/dhparam.pem



                ProxyRequests Off

                <Proxy *>

                        AllowOverride all

                        Order deny,allow

                        Allow from all

                </Proxy>



                ProxyErrorOverride On

                ProxyPreserveHost On



                RequestHeader unset Icy-MetaData

                RequestHeader unset User-Agent

                RequestHeader append User-Agent "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0"



                ProxyPass / https://o2-i.akamaihd.net/

                ProxyPassReverse / https://o2-i.akamaihd.net/



                <Location />

                        Order allow,deny

                        Allow from all

                </Location>

        </VirtualHost>

</IfModule>

ssh:
$ sudo service apache2 restart

On computer A (Kodi):
4. modify /etc/hosts and make the host o2-i.akamaihd.net point to address ip of your machine B (ex : 192.168.0.25):

Code:

192.168.0.25    o2-i.akamaihd.net

[Jeremiah]

Are you saying that we need to run 2 systems? or is that just how you have gotten your setup. Can you set it all up on a single pi. I am running stock rasbian with installed kodi and retropi but all built on the standard Raspbian. So can this be simply done on a single pi. I remember trying to setup apache years ago without any success and just remember none of it made any sense to me. So I am fearful of apache.

[rpbg]

@cmik, many thanks for this.  This is great.

I did all the necessary steps, however I encountered the following issue when I restarted the Apache 2, here:

$ sudo service apache2 restart

I have got the following error:
Nov 14 01:09:30 osmc systemd[1]: Starting The Apache HTTP Server...
Nov 14 01:09:30 osmc apachectl[4711]: AH00526: Syntax error on line 2 of /etc/apache2/sites-enabled/default-ssl.conf:
Nov 14 01:09:30 osmc apachectl[4711]: Invalid command '\xc2\xa0', perhaps misspelled or defined by a module not included in the server conf
Nov 14 01:09:30 osmc apachectl[4711]: Action 'start' failed.
Nov 14 01:09:30 osmc apachectl[4711]: The Apache error log may have more information.
Nov 14 01:09:30 osmc systemd[1]: apache2.service: Control process exited, code=exited status=1
Nov 14 01:09:30 osmc systemd[1]: Failed to start The Apache HTTP Server.
Nov 14 01:09:30 osmc systemd[1]: apache2.service: Unit entered failed state.
Nov 14 01:09:30 osmc systemd[1]: apache2.service: Failed with result 'exit-code'.

Although I followed your steps and instructions I was not able to find the syntax error on line 2 in your 
/etc/apache2/sites-enabled/default-ssl.conf  file.

Could you please let me know what could be wrong.

Again, thanks for your help.

[seangworld]

this is so fn stupid. we actually pay for the tfc service ($7.99/month) and use kodi/tfc.tv app on a firestick to watch something we pay for. igotta hear my wife bitch and moan about this shit not working every day like its my friggin fault. she can watch on our apple devices, as well as using a browser on our smart tv stiil tho.

[Karellen]

@seangworld

Calm down, and show some respect to cmik for providing his time and effort to bring you this add-on.

If you don't like it, then use your apple devices and smart tv to watch your programs.

[cmik]

Are you saying that we need to run 2 systems? or is that just how you have gotten your setup. Can you set it all up on a single pi. I am running stock rasbian with installed kodi and retropi but all built on the standard Raspbian. So can this be simply done on a single pi. I remember trying to setup apache years ago without any success and just remember none of it made any sense to me. So I am fearful of apache.

You can also use one pi for Kodi/Apache if you are able to install Apache on it. My Kodi system is locked because it is from a file image install.

[cmik]

@cmik, many thanks for this.  This is great.

I did all the necessary steps, however I encountered the following issue when I restarted the Apache 2, here:

$ sudo service apache2 restart

I have got the following error:
Nov 14 01:09:30 osmc systemd[1]: Starting The Apache HTTP Server...
Nov 14 01:09:30 osmc apachectl[4711]: AH00526: Syntax error on line 2 of /etc/apache2/sites-enabled/default-ssl.conf:
Nov 14 01:09:30 osmc apachectl[4711]: Invalid command '\xc2\xa0', perhaps misspelled or defined by a module not included in the server conf
Nov 14 01:09:30 osmc apachectl[4711]: Action 'start' failed.
Nov 14 01:09:30 osmc apachectl[4711]: The Apache error log may have more information.
Nov 14 01:09:30 osmc systemd[1]: apache2.service: Control process exited, code=exited status=1
Nov 14 01:09:30 osmc systemd[1]: Failed to start The Apache HTTP Server.
Nov 14 01:09:30 osmc systemd[1]: apache2.service: Unit entered failed state.
Nov 14 01:09:30 osmc systemd[1]: apache2.service: Failed with result 'exit-code'.

Although I followed your steps and instructions I was not able to find the syntax error on line 2 in your 
/etc/apache2/sites-enabled/default-ssl.conf  file.

Could you please let me know what could be wrong.

Again, thanks for your help.

Can you check if you have 

Code:

Listen 443

in your conf files ?

It can be in ports.conf file

Can you check also the enabled modules ?

This is a partial view of my apache2 directory :
pi@raspberry:/etc/apache2 $ tree .
.
├── apache2.conf
├── conf-available
...
├── conf-enabled
│   ├── charset.conf -> ../conf-available/charset.conf
│   ├── localized-error-pages.conf -> ../conf-available/localized-error-pages.conf
│   ├── other-vhosts-access-log.conf -> ../conf-available/other-vhosts-access-log.conf
│   ├── security.conf -> ../conf-available/security.conf
│   └── serve-cgi-bin.conf -> ../conf-available/serve-cgi-bin.conf
...
│   ├── proxy_ajp.load -> ../mods-available/proxy_ajp.load
│   ├── proxy_http.load -> ../mods-available/proxy_http.load
│   ├── proxy.load -> ../mods-available/proxy.load
...
│   ├── ssl.conf -> ../mods-available/ssl.conf
│   └── ssl.load -> ../mods-available/ssl.load
├── ports.conf
...
└── sites-enabled
    ├── 000-default.conf -> ../sites-available/000-default.conf
    └── default-ssl.conf

[d8a3th]

@cmik
I was able to setup one of my rpi as an apache 2 debian as per your settings. However Im having 503 error now: (see logs below).

@rpbg - try running
sudo a2enmod headers
then
sudo service apache2 restart
That fixed the problem for me

-----------------------------------------------------------------------------------------------------------------------------------------------------
20:47:17.370 T:1925896704   ERROR: Playlist Player: skipping unplayable item: 0, path [plugin://plugin.video.tfctv/?url=169547&mode=4&name=Ep.+02+-+Nov+10%2$
20:47:17.387 T:1925896704  NOTICE: CVideoPlayer::CloseFile()
20:47:17.387 T:1925896704  NOTICE: VideoPlayer: waiting for threads to exit
20:47:17.387 T:1925896704  NOTICE: VideoPlayer: finished waiting
20:47:17.387 T:1925896704  NOTICE: CVideoPlayer::CloseFile()
20:47:17.387 T:1925896704  NOTICE: VideoPlayer: waiting for threads to exit
20:47:17.387 T:1925896704  NOTICE: VideoPlayer: finished waiting
20:47:46.128 T:1925896704  NOTICE: VideoPlayer: Opening: https://o2-i.akamaihd.net/i/tvpatrol/201...000,800000,$
20:47:46.128 T:1925896704 WARNING: CDVDMessageQueue(player):ut MSGQ_NOT_INITIALIZED
20:47:49.433 T:1925896704   ERROR: CCurlFile::Stat - Failed: HTTP response code said error(22) for https://o2-i.akamaihd.net/i/tvpatrol/201...0181111-tv$
20:47:49.434 T:1696592640  NOTICE: Creating InputStream
20:47:52.571 T:1696592640   ERROR: CCurlFile::FillBuffer - Failed: HTTP returned error 503
20:47:52.571 T:1696592640   ERROR: CCurlFile::Open failed with code 503 for https://o2-i.akamaihd.net/i/tvpatrol/201...,150000,30$
20:47:52.572 T:1696592640  NOTICE: Creating Demuxer
20:47:55.823 T:1696592640   ERROR: OpenDemuxStream - Error creating demuxer
20:47:55.824 T:1696592640  NOTICE: CVideoPlayer::OnExit()
20:47:55.824 T:1925896704   ERROR: Playlist Player: skipping unplayable item: 0, path [plugin://plugin.video.tfctv/?url=169619&mode=4&name=Ep.+03+-+Nov+11%2$
20:47:55.825 T:1925896704  NOTICE: CVideoPlayer::CloseFile()
20:47:55.825 T:1925896704  NOTICE: VideoPlayer: waiting for threads to exit
20:47:55.825 T:1925896704  NOTICE: VideoPlayer: finished waiting
20:47:55.826 T:1925896704  NOTICE: CVideoPlayer::CloseFile()
20:47:55.826 T:1925896704  NOTICE: VideoPlayer: waiting for threads to exit
20:47:55.826 T:1925896704  NOTICE: VideoPlayer: finished waiting

[Bodoy]

Thank you very much for the effort CMIK.
Meanwhile, I am using TFC apk for now. You can as well use ROKU as an alternative. Interface is similar to CMIK Kodi addon and cost effective as well.

[rpbg]

@cmik, thank you so much for your quick action and support.

I will try your suggestions this evening once I am at home.
I will keep you posted.

[rpbg]

Hello @d8a3th,  thanks to you as well and sharing your experience on this.

As said to @cmik couple of minutes ago once I am at home I will continue to fix my issue.   Will keep you informed too.

[cmik]

@cmik
I was able to setup one of my rpi as an apache 2 debian as per your settings. However Im having 503 error now: (see logs below).

@rpbg - try running
sudo a2enmod headers
then
sudo service apache2 restart
That fixed the problem for me

...

Can you check in your logs that you are passing through the Apache proxypass when you call akamai url ?

[pixelatedgod]

The BS with ABS-CBN is why aren't they make their app compatible with Android TV since I guess the majority of the subscribers prefer watching on TV not cellphone or computer browser. I know they have a TFC box that they sell but even if they make Android TV version a one time Paid App most will probably buy just to save us some hassle in installing add-ons on Kodi or trying alternatives which are most of the time not compatible with Android TV.

The solution I currently use is using the old TFC apk version 9.0.9 the version before the latest because if I install the latest it's not working it sends me to Google Play Store on my Nvidia Shield with no Option but to click Upgrade that is not even working. I am using a wireless mouse to navigate, you can use a wired mouse but it's a little BS because you have to get close to your device just to navigate so wireless is perfect for me.

What I am trying to do now is to learn Android Studio and tinkering how to convert Android Apps to make it Android TV compatible to make it able to navigate without the need of mouse or keyboard.

[rpbg]

@cmik,

I checked the ports.conf and found 2 entries of Listen 443:

-------------------------
# If you just change the port or add more ports here, you will likely also
# have to change the VirtualHost statement in
# /etc/apache2/sites-enabled/000-default.conf

Listen 80

<IfModule ssl_module>
    Listen 443
</IfModule>

<IfModule mod_gnutls.c>
    Listen 443
</IfModule>

# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
------------------------

In addition, I also checked  the enabled modules as you suggested and my apache2 directory is the same as what you have posted.

Furthermore, I executed @d8a3th suggestion, see below for easy reference. 

-----------------------------
1) sudo a2enmod headers
then
2) sudo service apache2 restart
----------------------------
but it did not solve my issue .

The results below is similar to what I have reported yesterday:
----------------------------------
-- Unit apache2.service has begun starting up.
Nov 14 19:29:39 osmc apachectl[10934]: AH00526: Syntax error on line 2 of /etc/apache2/sites-enabled/default-ssl.conf:
Nov 14 19:29:39 osmc apachectl[10934]: Invalid command '\xc2\xa0', perhaps misspelled or defined by a module not included in the server configuration
Nov 14 19:29:39 osmc apachectl[10934]: Action 'start' failed.
Nov 14 19:29:39 osmc apachectl[10934]: The Apache error log may have more information.
Nov 14 19:29:39 osmc systemd[1]: apache2.service: Control process exited, code=exited status=1
Nov 14 19:29:39 osmc systemd[1]: Failed to start The Apache HTTP Server.
-- Subject: Unit apache2.service has failed
-- Defined-By: systemd
-- Support: https://www.debian.org/support
--
-- Unit apache2.service has failed.
--
-- The result is failed.
Nov 14 19:29:39 osmc systemd[1]: apache2.service: Unit entered failed state.
Nov 14 19:29:39 osmc systemd[1]: apache2.service: Failed with result 'exit-code'.
Nov 14 19:29:39 osmc sudo[10928]: pam_unix(sudoession): session closed for user root

----------------------------------

Any furhter hints where I can look into?

Thanks in advanced.