Skip to content

Reveal PSSH source - Verimatrix Widevine #61

@bracarino

Description

@bracarino

Hello,

Claro TV Mais (Brazil) website implemented a two-step approach to decrypt Widevine. After requesting the service certificate, the browser makes two calls to the Verimatrix Widevine License Server:

  1. Gets the PSSH from the M4I init segment, sends the license request and receive a response (with a key)
  2. Gets another PSSH (with a different KID), sends the license request and receive a response with the final decryption key.

WidevineProxy2 is logging both calls correctly. But, PSSH2 is rotating —which prevents any automation I’d like to build (for example with pywidevine). I tried to find this second PSSH in all M4I streams and no luck.

Is there a way to WidevineProxy2 to reveal the source of the PSSH in the logs?
I believe this is not an issue and should be treated as a feature request.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions