Bromite: 向googleapis.com的Widevine CDM设置请求

创建于 2020-01-21 · 14评论 · 资料来源: bromite/bromite

溴化版本

版本： 79.0.3945.123
拱门： arm64
Android版本： 8.0
设备型号： Poco F1

这是有关SystemWebView的错误吗？

No

该错误可以在最新版本中重现吗？

Yes

可以在相应的Chromium版本中复制该错误吗？

Yes, but won't complain chrome targeting google APIs

该错误是否崩溃？

No

描述错误

从安装了Bromite的设备上的acces点嗅探网络流量（通过使用Wireshark），并注意对

www.googleapis.com

重现该错误的步骤

在Bromite接入点上启动Wireshark。

只需首次运行Bromite（或在清除所有存储缓存后），而无需等待一分钟。

阅读Wireshark跟踪统计信息并注意对Google FQDN的呼叫

www.googleapis.com

预期行为

没有呼叫任何Google FQDN。

屏幕截图

Bromite-Endpoints

bug

资料来源

sooorajjj

👍1

最有用的评论

我分析了Bromite的网络流量，并注意到，在Bromite首次启动约1分钟后，便向www.googleapis.com服务器发出了两个POST请求。下面列出了有关所提出的请求及其相应响应的信息。

网址：（第一个请求）

https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2iU5mko18DfdwK5611JIjbUhE&signedRequest=CpwBCkwIABJIAAAAAgAAEV2MzJHgSmHCbKbxHuc92bLVn1o1rKpIEmigmQjF4GHijQ2TPYBOBlZDy-E4mfo7_nFJJUAxK3v1hoSOzxuxvyfZEgROM9lcGgQIABIAIkBuS1NNa2JGYWZuSUl7Y2xFTXtSS3VCRHpCYVRRZFRVAENBMTI3QUFEQUVEQkM3MkQ4Mzk4Qjg1QjZERjhENjU3EiDo_lja9XRGsBGRKNLh6JS_imuwpAzNVrt2D08geUDRWhgC

客户要求：

POST /certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2iU5mko18DfdwK5611JIjbUhE&signedRequest=CpwBCkwIABJIAAAAAgAAEV2MzJHgSmHCbKbxHuc92bLVn1o1rKpIEmigmQjF4GHijQ2TPYBOBlZDy-E4mfo7_nFJJUAxK3v1hoSOzxuxvyfZEgROM9lcGgQIABIAIkBuS1NNa2JGYWZuSUl7Y2xFTXtSS3VCRHpCYVRRZFRVAENBMTI3QUFEQUVEQkM3MkQ4Mzk4Qjg1QjZERjhENjU3EiDo_lja9XRGsBGRKNLh6JS_imuwpAzNVrt2D08geUDRWhgC h2
Host: www.googleapis.com
Content-Length: 0
User-Agent: Widevine CDM v1.0
Content-Type: application/json
Sec-Fetch-Site: none
Sec-Fetch-Mode: no-cors
Accept-Encoding: gzip, deflate, br

服务器响应：

h2 200
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 24 Jan 2020 03:06:40 GMT
Etag: "MDgIQVwyjNj_tJB_4VOgo5Ibzyk/mC8ppArAMIBxLaap9LYZ1lfM7rQ"
Vary: Origin
Vary: X-Origin
Content-Type: application/json; charset=UTF-8
X-Content-Type-Options: nosniff
Content-Encoding: gzip
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 2695
Server: GSE

{
 "kind": "certificateprovisioning#certificateProvisioningResponse",
 "signedResponse": "CtsTCtAJCkvX77DVtWXoXzDr2RiaD_YOF2s5XbHpH8e7LQL09kzBPS0FeYVt_7-y6Pc26kCk3KTo5_ZSVRYw5kl9F3Tu3DQgolErSlKo2Ea_O5uuDnHO8gleF8JfHhYtfoiAwwBJY4dJn-58rUqUmiY18Y_hZhYme2yRhZksGeQ85kQTDagl4FxGzJwkznmVsM5VEOfY9gqBTzRCtaZQSbr64eOiOMj3I4pBZ0E3XNXCEgR8usXPn_9B99FZ5YfowqvpN3yjOCbfxZ_lDSOF_Uzainpbe0-ioAfMF5-EZsjfi6B29lYhmyf_lHXXwfc5AscQhzuuNyatI0zPjACXbTyGn_3fUYnrQzsEUcQpz2omIDzDYlPP8Yg80MSLUVlKitsY_b9bTtw3f8zLOPfZD7ceB3aDoIE_UQ7zGOJyvlTVXH7Jvf2NQTnGLxW5pOdjYqym5BPfIPIa-PzNiwayhkn-2qrGDLtWHK-YDsXpRFIbQ2ZSo7IVuRztMlsAGSjpEJjThXGKENlw5GkBnOK2H7INJ11Y7gkj8dnRShGBRmoWorsNRgYjjh-qtIPF9haYYdIk7NdncUpCkOCHGF9EIrDSiuUynLAngRjwJ9Jo7pqR53iDcyWYKeiwZ3-iruanZ-bUukr_qT-L6FSFhERzatOTa1-aqpVWcxOSBA0QoihHQtA8ErkV93j6F9zk3jYiXIDQV9Ean-Lo9HX5zHvh3hTFENNRScj8Kqgf2u7J7e-p6Q8IJOidtNeBW7AegqR2EOzE7Q0294bL587xoWfxkxnvx_mjyOZchhWokKTgZrezP9qtchgNkQUYml3alUWgSQ3jfUWSGqXdIJ4UQBX312q3JVm3iOCXjmohcja3Bqtjz-WZpVRyJ8Qxw8hxGVzJ-4bN8gVM7tEX9fzKUcbYYL54QRz1J93LPDt0TAMRXfBW_JjgKGs7IcxoNIqb9kQOyB6oQ85JyQzcUvoH7Irl3iDe65jP2jtvthdt9Glryy7EMZcdpcFRHkvC9XMgFV40Lwxobm4wfzGXNv7qbTJHx29zrTRA8SB7pKD2_XxQJFs-Qv_yXEFQCNzWufXeM_vXRMH0r99JP0THXCY4Mx_crHdPHZfE2D4kUeJOCuOBL0eLW4W6XeHycNkZUB4cI8a8h2RvmIc-frqqJ3Pv3VR7QN7CFS3Up11GbGBy1aYaFj8J0D7p2YZowQT3TLPHch9BYSQ-dYZtUBTZSIDdQvt0kIMn9tY06_fDvTTdu6lXean-54g0cryxizEzUzxv_eCKAz1clM9JViCqxHbX39LdLOQeL7YKLwto0Zl6jV3V_oSjElG7BBHANlktci-Bcnadmpp4pnylNBgnzX77BR-iCS3Se2FyiFRFrBF1VhJYDnBA9lBE3WURTSzEx9kR5e4-CAUy4HOx7kdMhZYZsi1MSKDjy-WfYPqZAnYZjGY_r55qxMmdXJpOyoBxsbANS7BPbO_WaTKowBIdNx9KdsiwkmOePro78cgXB0KESt7lYYkX28YeCLS4A-oEnxOtM3nDYuKpyYTrZTeXB1TV4GlgzvOxK-SAA7W7hj3rfUe2JixrH8Yr5mGw76srfACP6JczW9QZ_1ssOHFTy02pMMWKXe09nsqzjsSaAa0oqLUP7P8VpxBkqUESEE5TKmu9T3cji5NDRcRw43ga7QkKsAIIAhIQHN8SLv6znWQ-b_rcCyQEnhjAvqnxBSKOAjCCAQoCggEBAM1OTlhkJDvBelQ2PliE_InBdhFhznROeS9Ki7hcF1bDonH_pNQvc89pekeSE5EBRJj8LdS2n5wZ9IutY4s3LXGzWswObwm_378FVMl3rCLpZQAdXJ16BmFtTJPHT_5I3tXgXa9reNXnhC638E_049BQnAVhcZqIbvQmuUGmf5OQ4sHyYmoQ3px8tJE_ax6bA_nr51KaimO1zZ3fIZVISVPOsQEQSbP7D7aLDRBsT__LTI0P9VXwlfOS9ixFlfjNIBYpT7TjLjMAM1rrBamtLC35dAY9EonuQHzKp88KlkHmAjqDP5F0-Pmb8RNY5DIwotTCqX32GbHTpF1NzKSaCGkCAwEAASjdIkgBEoACvPOk6yz1Ulz9Trh8geCxe2iwjitx24O1cyO3IFfaPKzn-104ufZu7GgRVq6YdrKnw2AXfIy0DULdmq6zMKQyMic4kkX2FE2wpcmnqTGqbPW9Sv3uRjRaDbyoTHoaju6XfEYvhOfmU_O2JiFyZBnr171gKqDz_F_j0oI_nh9u5FklH24ZKzV8Ry7Y4XbMXgtjzgzmkPuqXhtawi3awvcI12VShWta18J_LgF_SUiJH0fotVpHGCN3bq2u8hCCWUbXyGi3da2hhE8VrLJQdO48Wnl1w5Oiaai1QpMjQ0z5WQdlb8cs-MGBb-QtI0uetYH7BwMvqvRO0-osM2Sc29A5uxq0BQquAggBEhAX3Lwn0RNB1JcTVEKhiNqmGI-JgJEFIo4CMIIBCgKCAQEA0hrddUnSdIs0lFJqnD-4bHk3a76MiFb2AbjRBGH3esxzMbEN6_NlEgBWzbVmLSWQe3TxI4Lw9KDKR17qlWKBXGIo9vaYraJ4ediJDyotlqdG3e9TFjAcADUZwqIlA1RnQWn92kHOFNPFK-p6IDhFFQEtWVKziqGeFehWPMeqqBwhIogKo3CmT-ojxT-4OsPbV1MhRzCjSeB_ZL8yvn6tMNAmEq8RC7RPsI4dMIFzsyfvZNQMQWOVQrLRpzyYpmB-xsaDtROlhHBRQQbvh64ee5xpW5OhBN90N7_EFneJdIpD7SCPLB-nEHk8aIiF6ucyqL_fW0I7I9dbiPwK3I-9tQIDAQABKN0iEoADctL7iAmLo7hba0NU4Ddn2-LXckZj-wpiq_dwTqkQ4B8iE0nuFtAVLHaThAUM54UgZowGzP09eJrz62n_FjYVzWCRaf2-LhWgKdNK0mBWJbyBhEydHizgUZA583ma2u-GZB4gsDPcFt8uW5oaKkF7i7O3pNmtGpk2dEhYfaE93gWj7Z1i-kIHiXO0qkAmPXv6I_EHLpTN8yP6RfeECII-VcT0xccjgZz0TObZjlDATsJNk7GquId7kQi5yjkTCOGjZF67Dnysu0C1RRVg7XmUIYc7-1q7kX-mDbnHfLhgavfjFCYm9epA5cuKoInY59apNhk1xCakRQ6ovC5XKQ078KCWKZHSqRt1L8gMPn5OVQM9cclLMlMHpogV8CZEj1aidBzr78GOjBQvX2K_qmeikVF93pgtjNWp3249Opm4BvbWCZE1jFvncRfU8xaPM0jpoEhTn4kvTXgxUseoCVIkqla3jFz3vRqxsXnAwNEePDushMFBoAGRMh46zBckLmg8IgROM9lcEiCjMY4mUAUCWwagIkrNolslGq5M7OfbMZCWWj3NvGkGNQ=="
}

网址：（第二个请求）

https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2iU5mko18DfdwK5611JIjbUhE&signedRequest=CpwBCkwIABJIAAAAAgAAEV2MzJHgSmHCbKbxHuc92bLVn1o1rKpIEmigmQjF4GHijQ2TPYBOBlZDy-E4mfo7_nFJJUAxK3v1hoSOzxuxvyfZEgSCQ7v3GgQIABIAIkBuS1NNa2JGYWZuSUl7Y2xFTXtSS3VCRHpCYVRRZFRVADU4MUFGQ0NCNzhBMjI2MDA1OTUyODIyQ0U0NzQ5QzNBEiDJkhx1Sy6FUJlhFMW0e91yBNb4PuUj21F1NfrSK41dSBgC

客户要求：

POST /certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2iU5mko18DfdwK5611JIjbUhE&signedRequest=CpwBCkwIABJIAAAAAgAAEV2MzJHgSmHCbKbxHuc92bLVn1o1rKpIEmigmQjF4GHijQ2TPYBOBlZDy-E4mfo7_nFJJUAxK3v1hoSOzxuxvyfZEgSCQ7v3GgQIABIAIkBuS1NNa2JGYWZuSUl7Y2xFTXtSS3VCRHpCYVRRZFRVADU4MUFGQ0NCNzhBMjI2MDA1OTUyODIyQ0U0NzQ5QzNBEiDJkhx1Sy6FUJlhFMW0e91yBNb4PuUj21F1NfrSK41dSBgC h2
Host: www.googleapis.com
Content-Length: 0
User-Agent: Widevine CDM v1.0
Content-Type: application/json
Sec-Fetch-Site: none
Sec-Fetch-Mode: no-cors
Accept-Encoding: gzip, deflate, br

服务器响应：

h2 200
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 24 Jan 2020 03:06:40 GMT
Etag: "MDgIQVwyjNj_tJB_4VOgo5Ibzyk/MIjs71ZGR7Sf6e6PC4ex-Uoo--4"
Vary: Origin
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Vary: X-Origin
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Content-Length: 2697

{
 "kind": "certificateprovisioning#certificateProvisioningResponse",
 "signedResponse": "CtsTCtAJfZfNPOFDI03Ga9Jsm49g_z28VrN9bBeQj3pgYzKQ1FtuF189Nkg78b0JcW-u60JAJvhtDInKiKHyzOWp5JQjFkSlMl5YVgXQO_qG6EuzxVJfXPRkhVI7oI8mMtZApEJzFG4uHcNt-oHvT-0rzhEaCCLOgZVahMK2nCroo-abfYqrUiMVpBjjQ4ojavbhTAahdpUJABEHJcrR56Y2oZx1aZNoAa7Do9_Lam5OK_BfzTnH6_zysV1cA2fIRsxRXwAATY80wP1f-ZkrjAoI4UUfd7S0uuO3ru89TxyzuEAc4aSfB0D2auWAXyOlJwkRjSAZ4ZBAGD65Eq-VIYYev-Ifs8RmlrAa44meqGmcLuNxGXp7xLwvaoMmo9Y7tOcWCj-Avivrl1VjZHdLLfpxtLCXTCmPXgvcadxUDHcCDTX0JvxhuENqMkcqOZReyN7g7M5cmA_qoaYBYxEfwzfx27CEUkb2Pbrnn86CKI4VK6oax5pRqzh0CfIlRVymv3toeGkKfIrA1mZjlfWFiWUbMbwHcFPsyLsPucB3vk1CbiSamSQPryv6XoxkCp-0j1sPvHkCcyW9Aya7aA3aMIDnmqlP-IWSGNVNgD5IWu9uy6ntBn_9zIEYZaIKSZ8SUVQEUySpwzVecfF3RTF12nkg4yTAnoNA42W0UiJaszvbQAHnTe2p8lmwFCWT4icM1yZb9KV4ONlfXFWdI1--JfDdEDUEmnLr9zxf6CRzooWxxv-82JZUGy3Kz4c0jmt0P_WI25PGJ3q5OUp2JXNJ-_dNBAaJCez9THqcb4LJeyeqTqG8jUSGMY8DHttSlEeleIJUFMgtUrr20G3R6O_LY90Q4dWPGfp7ITjiuWUDhfFnhdb2MHaqoYce7nvbf7H2CLZrAMXlkCxXsAq4gytupKicSy_gtYwfoAf9P8Dn_gkdbPXsOFq1037Zfop9oCwdo_hXjMBhXuIhFlaeUuZ-JEjgZF-b_Vb5Tq_8kwKWWOtb7t94q9WxbWjt_Cmb6XEsutWmXPDNTePgrQv-JTz7oENNO2k_k8tdc0Q1s5NCnLhkod7XgIutEn06Q0Lm2wGewbw0uKx9U-n0WvBIvFw82CyLdcocgkd0jTCsuDWFOYhC6p3FJSVPqk5i1qYEzbgk9GxAH8L51yMib2ex5U2Yh-Am7tUEpWEaZL9wsD2HXcYWTezpBet6Mewu56IlzRySYlfGyLWhVrC2tz-2JZ6lc1oWbTem9IU2-UcC0aFw_tEyYSwKYBmznw_iTpWfkVw0iSDnylkLbF6pfDS0WXdcDto3vbsrmaVzXIbszBHc2Alf_2MRdwjJGwh_ACtSQkpiDAArvAnMOgHirHsZyUssjx2pBxCLYMtFAItM2ZeIIzB37juT8DyD-RoTVT-8XwLbMGqIy1cTKJeVpW6iQSSeW8kPyMOQHMKbWrNmYI-eQ7XgtP_CF3JcPzRBrrVydSsCmQg00hyf3cBN9zvAqZbwpNVQVse4FJ8DMMhktDgcy-Iy9X3uZJQXmO2_PIKMZG3eWzMLTC2MrbIIwKedKhsaOJk9J1DLS3CCzqv0OHw_3_QEIea-iH1XoaNaOHxgH6bBba5NH0WPvkbWfCDxbUAUzPSgHNhJJKEu8-7merqW-jZM6hWYwikSEOR-EbdzzaizuzJfxUx-lOga7QkKsAIIAhIQEQvYVI73DWtj9EY6aChRgxjAvqnxBSKOAjCCAQoCggEBAKgqImFtwcu2PTiOZdw8cQaGOAzaQUkEBh8kO0PfpdG0w1vQpk_vt4azXE67dtcKY9op0Hn6jROU-j89cYMeYK1dJfFc9X7pNPyZfL9bz0--OS24ncPBWHZmKqUmK4zfxtgl0i_J7vi5EybiiWTPoLbJWTFwH7QMfQtsd9DmGt1MBuaRMWzFQVE9z5QmiDGPptNFDaDX1FZIxVXarHoHpZuMvyuuHq8Vog9i0ijMoIgY5kUmQUuddiodr6vt6MmRw8z5QzrdYXQ_MI54LPBZeZiEc-Ek9L50d7SCa-BhESgGqBeXc_kSl030MWxy79EeUi2J3V5b3wZARG_pDZa-umkCAwEAASjdIkgBEoACQ9d2R-ioPJll4POUNNaT370wt02MX9KKBaxrUJTnANdlcs-Gr2t7_anOsGUZR3T-VVOSUQ7Zl1N9YiAtSNTgG9-Om_nO73AurKSFOWwx_Vh0Z2EooOZyhZjP7ny3FY85K6wsmFza6WJTnlwVSvJpjVUKliLxFKUtTRJBNp1J8TST6Q1HVcHqlSOHR7d9XDr7FlepILiCuLveqJpvN1526Xx3L4Rh-JpqnqYVFopo8G56l8RCeYm2PEeWEMJLrv8AyPk6HvtwBwQDrFtdJ9TfnRHgM-dnjEVl3-tnG47OjThCS3V4aeF82r6zEjME_Ybez7OeCFKfzqcKZbCjV15sRBq0BQquAggBEhAX3Lwn0RNB1JcTVEKhiNqmGI-JgJEFIo4CMIIBCgKCAQEA0hrddUnSdIs0lFJqnD-4bHk3a76MiFb2AbjRBGH3esxzMbEN6_NlEgBWzbVmLSWQe3TxI4Lw9KDKR17qlWKBXGIo9vaYraJ4ediJDyotlqdG3e9TFjAcADUZwqIlA1RnQWn92kHOFNPFK-p6IDhFFQEtWVKziqGeFehWPMeqqBwhIogKo3CmT-ojxT-4OsPbV1MhRzCjSeB_ZL8yvn6tMNAmEq8RC7RPsI4dMIFzsyfvZNQMQWOVQrLRpzyYpmB-xsaDtROlhHBRQQbvh64ee5xpW5OhBN90N7_EFneJdIpD7SCPLB-nEHk8aIiF6ucyqL_fW0I7I9dbiPwK3I-9tQIDAQABKN0iEoADctL7iAmLo7hba0NU4Ddn2-LXckZj-wpiq_dwTqkQ4B8iE0nuFtAVLHaThAUM54UgZowGzP09eJrz62n_FjYVzWCRaf2-LhWgKdNK0mBWJbyBhEydHizgUZA583ma2u-GZB4gsDPcFt8uW5oaKkF7i7O3pNmtGpk2dEhYfaE93gWj7Z1i-kIHiXO0qkAmPXv6I_EHLpTN8yP6RfeECII-VcT0xccjgZz0TObZjlDATsJNk7GquId7kQi5yjkTCOGjZF67Dnysu0C1RRVg7XmUIYc7-1q7kX-mDbnHfLhgavfjFCYm9epA5cuKoInY59apNhk1xCakRQ6ovC5XKQ078KCWKZHSqRt1L8gMPn5OVQM9cclLMlMHpogV8CZEj1aidBzr78GOjBQvX2K_qmeikVF93pgtjNWp3249Opm4BvbWCZE1jFvncRfU8xaPM0jpoEhTn4kvTXgxUseoCVIkqla3jFz3vRqxsXnAwNEePDushMFBoAGRMh46zBckLmg8IgSCQ7v3EiC7RTrCb5y_Y0JhX15RLI6vseYxurbXyd1OICt2LOOPqw=="
}

SnwMds 于 2020-01-24

👍4

所有14条评论

该设备上还有其他安装吗？我想这是另一个调用Google API的后台进程

HigH-HawK 于 2020-01-21

@sooorajjj请检查请求/响应的内容，我怀疑这是源自Bromite

csagan5 于 2020-01-21

这是我使用NetGuard应用程序进行的另一项测试
只是要确保它不是来自我设备上运行的任何其他服务。
这是如何重现问题的全新安装bromite应用程序，然后等待1分钟。

sooorajjj 于 2020-01-22

我自己尝试过，但无法重现Google访问权限。唯一出现的是bromite.org URL。首次打开Bromite时会打开什么首页？

HigH-HawK 于 2020-01-22

@sooorajjj很好，可以

googleapis请求可能与其他未被阻止的内容有关，但要解决该问题，我们需要完整的请求和响应（根据先前的评论）。

另请参阅此评论。

csagan5 于 2020-01-22

网址：（第一个请求）

https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2iU5mko18DfdwK5611JIjbUhE&signedRequest=CpwBCkwIABJIAAAAAgAAEV2MzJHgSmHCbKbxHuc92bLVn1o1rKpIEmigmQjF4GHijQ2TPYBOBlZDy-E4mfo7_nFJJUAxK3v1hoSOzxuxvyfZEgROM9lcGgQIABIAIkBuS1NNa2JGYWZuSUl7Y2xFTXtSS3VCRHpCYVRRZFRVAENBMTI3QUFEQUVEQkM3MkQ4Mzk4Qjg1QjZERjhENjU3EiDo_lja9XRGsBGRKNLh6JS_imuwpAzNVrt2D08geUDRWhgC

客户要求：

POST /certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2iU5mko18DfdwK5611JIjbUhE&signedRequest=CpwBCkwIABJIAAAAAgAAEV2MzJHgSmHCbKbxHuc92bLVn1o1rKpIEmigmQjF4GHijQ2TPYBOBlZDy-E4mfo7_nFJJUAxK3v1hoSOzxuxvyfZEgROM9lcGgQIABIAIkBuS1NNa2JGYWZuSUl7Y2xFTXtSS3VCRHpCYVRRZFRVAENBMTI3QUFEQUVEQkM3MkQ4Mzk4Qjg1QjZERjhENjU3EiDo_lja9XRGsBGRKNLh6JS_imuwpAzNVrt2D08geUDRWhgC h2
Host: www.googleapis.com
Content-Length: 0
User-Agent: Widevine CDM v1.0
Content-Type: application/json
Sec-Fetch-Site: none
Sec-Fetch-Mode: no-cors
Accept-Encoding: gzip, deflate, br

服务器响应：

h2 200
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 24 Jan 2020 03:06:40 GMT
Etag: "MDgIQVwyjNj_tJB_4VOgo5Ibzyk/mC8ppArAMIBxLaap9LYZ1lfM7rQ"
Vary: Origin
Vary: X-Origin
Content-Type: application/json; charset=UTF-8
X-Content-Type-Options: nosniff
Content-Encoding: gzip
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 2695
Server: GSE

{
 "kind": "certificateprovisioning#certificateProvisioningResponse",
 "signedResponse": "CtsTCtAJCkvX77DVtWXoXzDr2RiaD_YOF2s5XbHpH8e7LQL09kzBPS0FeYVt_7-y6Pc26kCk3KTo5_ZSVRYw5kl9F3Tu3DQgolErSlKo2Ea_O5uuDnHO8gleF8JfHhYtfoiAwwBJY4dJn-58rUqUmiY18Y_hZhYme2yRhZksGeQ85kQTDagl4FxGzJwkznmVsM5VEOfY9gqBTzRCtaZQSbr64eOiOMj3I4pBZ0E3XNXCEgR8usXPn_9B99FZ5YfowqvpN3yjOCbfxZ_lDSOF_Uzainpbe0-ioAfMF5-EZsjfi6B29lYhmyf_lHXXwfc5AscQhzuuNyatI0zPjACXbTyGn_3fUYnrQzsEUcQpz2omIDzDYlPP8Yg80MSLUVlKitsY_b9bTtw3f8zLOPfZD7ceB3aDoIE_UQ7zGOJyvlTVXH7Jvf2NQTnGLxW5pOdjYqym5BPfIPIa-PzNiwayhkn-2qrGDLtWHK-YDsXpRFIbQ2ZSo7IVuRztMlsAGSjpEJjThXGKENlw5GkBnOK2H7INJ11Y7gkj8dnRShGBRmoWorsNRgYjjh-qtIPF9haYYdIk7NdncUpCkOCHGF9EIrDSiuUynLAngRjwJ9Jo7pqR53iDcyWYKeiwZ3-iruanZ-bUukr_qT-L6FSFhERzatOTa1-aqpVWcxOSBA0QoihHQtA8ErkV93j6F9zk3jYiXIDQV9Ean-Lo9HX5zHvh3hTFENNRScj8Kqgf2u7J7e-p6Q8IJOidtNeBW7AegqR2EOzE7Q0294bL587xoWfxkxnvx_mjyOZchhWokKTgZrezP9qtchgNkQUYml3alUWgSQ3jfUWSGqXdIJ4UQBX312q3JVm3iOCXjmohcja3Bqtjz-WZpVRyJ8Qxw8hxGVzJ-4bN8gVM7tEX9fzKUcbYYL54QRz1J93LPDt0TAMRXfBW_JjgKGs7IcxoNIqb9kQOyB6oQ85JyQzcUvoH7Irl3iDe65jP2jtvthdt9Glryy7EMZcdpcFRHkvC9XMgFV40Lwxobm4wfzGXNv7qbTJHx29zrTRA8SB7pKD2_XxQJFs-Qv_yXEFQCNzWufXeM_vXRMH0r99JP0THXCY4Mx_crHdPHZfE2D4kUeJOCuOBL0eLW4W6XeHycNkZUB4cI8a8h2RvmIc-frqqJ3Pv3VR7QN7CFS3Up11GbGBy1aYaFj8J0D7p2YZowQT3TLPHch9BYSQ-dYZtUBTZSIDdQvt0kIMn9tY06_fDvTTdu6lXean-54g0cryxizEzUzxv_eCKAz1clM9JViCqxHbX39LdLOQeL7YKLwto0Zl6jV3V_oSjElG7BBHANlktci-Bcnadmpp4pnylNBgnzX77BR-iCS3Se2FyiFRFrBF1VhJYDnBA9lBE3WURTSzEx9kR5e4-CAUy4HOx7kdMhZYZsi1MSKDjy-WfYPqZAnYZjGY_r55qxMmdXJpOyoBxsbANS7BPbO_WaTKowBIdNx9KdsiwkmOePro78cgXB0KESt7lYYkX28YeCLS4A-oEnxOtM3nDYuKpyYTrZTeXB1TV4GlgzvOxK-SAA7W7hj3rfUe2JixrH8Yr5mGw76srfACP6JczW9QZ_1ssOHFTy02pMMWKXe09nsqzjsSaAa0oqLUP7P8VpxBkqUESEE5TKmu9T3cji5NDRcRw43ga7QkKsAIIAhIQHN8SLv6znWQ-b_rcCyQEnhjAvqnxBSKOAjCCAQoCggEBAM1OTlhkJDvBelQ2PliE_InBdhFhznROeS9Ki7hcF1bDonH_pNQvc89pekeSE5EBRJj8LdS2n5wZ9IutY4s3LXGzWswObwm_378FVMl3rCLpZQAdXJ16BmFtTJPHT_5I3tXgXa9reNXnhC638E_049BQnAVhcZqIbvQmuUGmf5OQ4sHyYmoQ3px8tJE_ax6bA_nr51KaimO1zZ3fIZVISVPOsQEQSbP7D7aLDRBsT__LTI0P9VXwlfOS9ixFlfjNIBYpT7TjLjMAM1rrBamtLC35dAY9EonuQHzKp88KlkHmAjqDP5F0-Pmb8RNY5DIwotTCqX32GbHTpF1NzKSaCGkCAwEAASjdIkgBEoACvPOk6yz1Ulz9Trh8geCxe2iwjitx24O1cyO3IFfaPKzn-104ufZu7GgRVq6YdrKnw2AXfIy0DULdmq6zMKQyMic4kkX2FE2wpcmnqTGqbPW9Sv3uRjRaDbyoTHoaju6XfEYvhOfmU_O2JiFyZBnr171gKqDz_F_j0oI_nh9u5FklH24ZKzV8Ry7Y4XbMXgtjzgzmkPuqXhtawi3awvcI12VShWta18J_LgF_SUiJH0fotVpHGCN3bq2u8hCCWUbXyGi3da2hhE8VrLJQdO48Wnl1w5Oiaai1QpMjQ0z5WQdlb8cs-MGBb-QtI0uetYH7BwMvqvRO0-osM2Sc29A5uxq0BQquAggBEhAX3Lwn0RNB1JcTVEKhiNqmGI-JgJEFIo4CMIIBCgKCAQEA0hrddUnSdIs0lFJqnD-4bHk3a76MiFb2AbjRBGH3esxzMbEN6_NlEgBWzbVmLSWQe3TxI4Lw9KDKR17qlWKBXGIo9vaYraJ4ediJDyotlqdG3e9TFjAcADUZwqIlA1RnQWn92kHOFNPFK-p6IDhFFQEtWVKziqGeFehWPMeqqBwhIogKo3CmT-ojxT-4OsPbV1MhRzCjSeB_ZL8yvn6tMNAmEq8RC7RPsI4dMIFzsyfvZNQMQWOVQrLRpzyYpmB-xsaDtROlhHBRQQbvh64ee5xpW5OhBN90N7_EFneJdIpD7SCPLB-nEHk8aIiF6ucyqL_fW0I7I9dbiPwK3I-9tQIDAQABKN0iEoADctL7iAmLo7hba0NU4Ddn2-LXckZj-wpiq_dwTqkQ4B8iE0nuFtAVLHaThAUM54UgZowGzP09eJrz62n_FjYVzWCRaf2-LhWgKdNK0mBWJbyBhEydHizgUZA583ma2u-GZB4gsDPcFt8uW5oaKkF7i7O3pNmtGpk2dEhYfaE93gWj7Z1i-kIHiXO0qkAmPXv6I_EHLpTN8yP6RfeECII-VcT0xccjgZz0TObZjlDATsJNk7GquId7kQi5yjkTCOGjZF67Dnysu0C1RRVg7XmUIYc7-1q7kX-mDbnHfLhgavfjFCYm9epA5cuKoInY59apNhk1xCakRQ6ovC5XKQ078KCWKZHSqRt1L8gMPn5OVQM9cclLMlMHpogV8CZEj1aidBzr78GOjBQvX2K_qmeikVF93pgtjNWp3249Opm4BvbWCZE1jFvncRfU8xaPM0jpoEhTn4kvTXgxUseoCVIkqla3jFz3vRqxsXnAwNEePDushMFBoAGRMh46zBckLmg8IgROM9lcEiCjMY4mUAUCWwagIkrNolslGq5M7OfbMZCWWj3NvGkGNQ=="
}

网址：（第二个请求）

https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2iU5mko18DfdwK5611JIjbUhE&signedRequest=CpwBCkwIABJIAAAAAgAAEV2MzJHgSmHCbKbxHuc92bLVn1o1rKpIEmigmQjF4GHijQ2TPYBOBlZDy-E4mfo7_nFJJUAxK3v1hoSOzxuxvyfZEgSCQ7v3GgQIABIAIkBuS1NNa2JGYWZuSUl7Y2xFTXtSS3VCRHpCYVRRZFRVADU4MUFGQ0NCNzhBMjI2MDA1OTUyODIyQ0U0NzQ5QzNBEiDJkhx1Sy6FUJlhFMW0e91yBNb4PuUj21F1NfrSK41dSBgC

客户要求：

POST /certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2iU5mko18DfdwK5611JIjbUhE&signedRequest=CpwBCkwIABJIAAAAAgAAEV2MzJHgSmHCbKbxHuc92bLVn1o1rKpIEmigmQjF4GHijQ2TPYBOBlZDy-E4mfo7_nFJJUAxK3v1hoSOzxuxvyfZEgSCQ7v3GgQIABIAIkBuS1NNa2JGYWZuSUl7Y2xFTXtSS3VCRHpCYVRRZFRVADU4MUFGQ0NCNzhBMjI2MDA1OTUyODIyQ0U0NzQ5QzNBEiDJkhx1Sy6FUJlhFMW0e91yBNb4PuUj21F1NfrSK41dSBgC h2
Host: www.googleapis.com
Content-Length: 0
User-Agent: Widevine CDM v1.0
Content-Type: application/json
Sec-Fetch-Site: none
Sec-Fetch-Mode: no-cors
Accept-Encoding: gzip, deflate, br

服务器响应：

h2 200
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 24 Jan 2020 03:06:40 GMT
Etag: "MDgIQVwyjNj_tJB_4VOgo5Ibzyk/MIjs71ZGR7Sf6e6PC4ex-Uoo--4"
Vary: Origin
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Vary: X-Origin
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Content-Length: 2697

{
 "kind": "certificateprovisioning#certificateProvisioningResponse",
 "signedResponse": "CtsTCtAJfZfNPOFDI03Ga9Jsm49g_z28VrN9bBeQj3pgYzKQ1FtuF189Nkg78b0JcW-u60JAJvhtDInKiKHyzOWp5JQjFkSlMl5YVgXQO_qG6EuzxVJfXPRkhVI7oI8mMtZApEJzFG4uHcNt-oHvT-0rzhEaCCLOgZVahMK2nCroo-abfYqrUiMVpBjjQ4ojavbhTAahdpUJABEHJcrR56Y2oZx1aZNoAa7Do9_Lam5OK_BfzTnH6_zysV1cA2fIRsxRXwAATY80wP1f-ZkrjAoI4UUfd7S0uuO3ru89TxyzuEAc4aSfB0D2auWAXyOlJwkRjSAZ4ZBAGD65Eq-VIYYev-Ifs8RmlrAa44meqGmcLuNxGXp7xLwvaoMmo9Y7tOcWCj-Avivrl1VjZHdLLfpxtLCXTCmPXgvcadxUDHcCDTX0JvxhuENqMkcqOZReyN7g7M5cmA_qoaYBYxEfwzfx27CEUkb2Pbrnn86CKI4VK6oax5pRqzh0CfIlRVymv3toeGkKfIrA1mZjlfWFiWUbMbwHcFPsyLsPucB3vk1CbiSamSQPryv6XoxkCp-0j1sPvHkCcyW9Aya7aA3aMIDnmqlP-IWSGNVNgD5IWu9uy6ntBn_9zIEYZaIKSZ8SUVQEUySpwzVecfF3RTF12nkg4yTAnoNA42W0UiJaszvbQAHnTe2p8lmwFCWT4icM1yZb9KV4ONlfXFWdI1--JfDdEDUEmnLr9zxf6CRzooWxxv-82JZUGy3Kz4c0jmt0P_WI25PGJ3q5OUp2JXNJ-_dNBAaJCez9THqcb4LJeyeqTqG8jUSGMY8DHttSlEeleIJUFMgtUrr20G3R6O_LY90Q4dWPGfp7ITjiuWUDhfFnhdb2MHaqoYce7nvbf7H2CLZrAMXlkCxXsAq4gytupKicSy_gtYwfoAf9P8Dn_gkdbPXsOFq1037Zfop9oCwdo_hXjMBhXuIhFlaeUuZ-JEjgZF-b_Vb5Tq_8kwKWWOtb7t94q9WxbWjt_Cmb6XEsutWmXPDNTePgrQv-JTz7oENNO2k_k8tdc0Q1s5NCnLhkod7XgIutEn06Q0Lm2wGewbw0uKx9U-n0WvBIvFw82CyLdcocgkd0jTCsuDWFOYhC6p3FJSVPqk5i1qYEzbgk9GxAH8L51yMib2ex5U2Yh-Am7tUEpWEaZL9wsD2HXcYWTezpBet6Mewu56IlzRySYlfGyLWhVrC2tz-2JZ6lc1oWbTem9IU2-UcC0aFw_tEyYSwKYBmznw_iTpWfkVw0iSDnylkLbF6pfDS0WXdcDto3vbsrmaVzXIbszBHc2Alf_2MRdwjJGwh_ACtSQkpiDAArvAnMOgHirHsZyUssjx2pBxCLYMtFAItM2ZeIIzB37juT8DyD-RoTVT-8XwLbMGqIy1cTKJeVpW6iQSSeW8kPyMOQHMKbWrNmYI-eQ7XgtP_CF3JcPzRBrrVydSsCmQg00hyf3cBN9zvAqZbwpNVQVse4FJ8DMMhktDgcy-Iy9X3uZJQXmO2_PIKMZG3eWzMLTC2MrbIIwKedKhsaOJk9J1DLS3CCzqv0OHw_3_QEIea-iH1XoaNaOHxgH6bBba5NH0WPvkbWfCDxbUAUzPSgHNhJJKEu8-7merqW-jZM6hWYwikSEOR-EbdzzaizuzJfxUx-lOga7QkKsAIIAhIQEQvYVI73DWtj9EY6aChRgxjAvqnxBSKOAjCCAQoCggEBAKgqImFtwcu2PTiOZdw8cQaGOAzaQUkEBh8kO0PfpdG0w1vQpk_vt4azXE67dtcKY9op0Hn6jROU-j89cYMeYK1dJfFc9X7pNPyZfL9bz0--OS24ncPBWHZmKqUmK4zfxtgl0i_J7vi5EybiiWTPoLbJWTFwH7QMfQtsd9DmGt1MBuaRMWzFQVE9z5QmiDGPptNFDaDX1FZIxVXarHoHpZuMvyuuHq8Vog9i0ijMoIgY5kUmQUuddiodr6vt6MmRw8z5QzrdYXQ_MI54LPBZeZiEc-Ek9L50d7SCa-BhESgGqBeXc_kSl030MWxy79EeUi2J3V5b3wZARG_pDZa-umkCAwEAASjdIkgBEoACQ9d2R-ioPJll4POUNNaT370wt02MX9KKBaxrUJTnANdlcs-Gr2t7_anOsGUZR3T-VVOSUQ7Zl1N9YiAtSNTgG9-Om_nO73AurKSFOWwx_Vh0Z2EooOZyhZjP7ny3FY85K6wsmFza6WJTnlwVSvJpjVUKliLxFKUtTRJBNp1J8TST6Q1HVcHqlSOHR7d9XDr7FlepILiCuLveqJpvN1526Xx3L4Rh-JpqnqYVFopo8G56l8RCeYm2PEeWEMJLrv8AyPk6HvtwBwQDrFtdJ9TfnRHgM-dnjEVl3-tnG47OjThCS3V4aeF82r6zEjME_Ybez7OeCFKfzqcKZbCjV15sRBq0BQquAggBEhAX3Lwn0RNB1JcTVEKhiNqmGI-JgJEFIo4CMIIBCgKCAQEA0hrddUnSdIs0lFJqnD-4bHk3a76MiFb2AbjRBGH3esxzMbEN6_NlEgBWzbVmLSWQe3TxI4Lw9KDKR17qlWKBXGIo9vaYraJ4ediJDyotlqdG3e9TFjAcADUZwqIlA1RnQWn92kHOFNPFK-p6IDhFFQEtWVKziqGeFehWPMeqqBwhIogKo3CmT-ojxT-4OsPbV1MhRzCjSeB_ZL8yvn6tMNAmEq8RC7RPsI4dMIFzsyfvZNQMQWOVQrLRpzyYpmB-xsaDtROlhHBRQQbvh64ee5xpW5OhBN90N7_EFneJdIpD7SCPLB-nEHk8aIiF6ucyqL_fW0I7I9dbiPwK3I-9tQIDAQABKN0iEoADctL7iAmLo7hba0NU4Ddn2-LXckZj-wpiq_dwTqkQ4B8iE0nuFtAVLHaThAUM54UgZowGzP09eJrz62n_FjYVzWCRaf2-LhWgKdNK0mBWJbyBhEydHizgUZA583ma2u-GZB4gsDPcFt8uW5oaKkF7i7O3pNmtGpk2dEhYfaE93gWj7Z1i-kIHiXO0qkAmPXv6I_EHLpTN8yP6RfeECII-VcT0xccjgZz0TObZjlDATsJNk7GquId7kQi5yjkTCOGjZF67Dnysu0C1RRVg7XmUIYc7-1q7kX-mDbnHfLhgavfjFCYm9epA5cuKoInY59apNhk1xCakRQ6ovC5XKQ078KCWKZHSqRt1L8gMPn5OVQM9cclLMlMHpogV8CZEj1aidBzr78GOjBQvX2K_qmeikVF93pgtjNWp3249Opm4BvbWCZE1jFvncRfU8xaPM0jpoEhTn4kvTXgxUseoCVIkqla3jFz3vRqxsXnAwNEePDushMFBoAGRMh46zBckLmg8IgSCQ7v3EiC7RTrCb5y_Y0JhX15RLI6vseYxurbXyd1OICt2LOOPqw=="
}

SnwMds 于 2020-01-24

👍4

干得好@SnwMds！该请求似乎在这里完成： https :

我现在正在对此进行进一步研究。

网络流量注释提供有关此请求，触发器和用途的详细信息：

        semantics {
          sender: "Content Decryption Module"
          description:
            "For a Content Decryption Module (CDM) to obtain origin-specific "
            "identifiers from an individualization or provisioning server. See "
            "https://w3c.github.io/encrypted-media/#direct-individualization."
          trigger:
            "During protected content playback, if the CDM hasn’t been "
            "provisioned yet, it may trigger a provision request which will be "
            "sent to a provisioning server."
          data:
            "Opaque provision request generated by the CDM. It may contain "
            "distinctive identifiers (see "
            "https://w3c.github.io/encrypted-media/#distinctive-identifier) "
            "and/or distinctive permanent identifiers (see "
            "https://w3c.github.io/encrypted-media/#distinctive-permanent-"
            "identifier), which must be encrypted. It does NOT contain origin "
            "information, even in encrypted form."
          destination: OTHER
        }
        policy {
          cookies_allowed: NO
          setting:
            "On Android, users can disable this feature by disabling Protected "
            "Media Identifier permissions."
          policy_exception_justification: "Not implemented."
        })

csagan5 于 2020-01-24

www.googleapis.com不是Chromium / Bromite代码库的一部分，而是来自Android本身；这就解释了为何未对域进行清理。

我感到惊讶的是，即使在播放内容之前，它也开始请求CDM密钥...

csagan5 于 2020-01-24

我在Chromium代码库2中发现了名为MediaDrmPreprovisioning和MediaDrmPreprovisioningAtStartup开关，默认情况下启用（于2019年3月推出）。

默认情况下，我将禁用MediaDrmPreprovisioning ，但是最重要的是，有必要决定一个解决方案以完成修复：

完全淘汰Widevine（过去已经考虑过），以便不提供DRM支持
让它根据需要执行配置，而不是在启动时
（2）并放置一个标志，默认情况下启用
（2）并设置一个标志，默认情况下处于禁用状态（将对关心隐私但不关心此特定侵犯隐私实例DRM的普通用户造成重大破坏）

同时，我将在README中记录Bromite支持Android DRM（这是有意为之，但尚不清楚所有用户对DRM的工作方式如何更好地刷新它）。

@Eloston @ wchen342感谢您的意见，因为我发现在ungoogled-chromium中您进行了合理的设置；据我所知，ungoogled-chromium-android也存在与DRM支持相关的问题/功能。

csagan5 于 2020-01-24

此特定的侵犯隐私事例DRM

准确地说： https: //w3c.github.io/encrypted-media/#direct -individualization解释了如何创建标识符，这是一个好方法。侵犯隐私的内容不包括这些标识符，例如，取决于源IP地址以及在发生用户之前未征得用户同意的事实（另一种默认违规的情况）。

csagan5 于 2020-01-24

已在79.0.3945.139修复。

根据上游https://bugs.chromium.org/p/chromium/issues/detail?id=686430 ，必须已经可以禁用受保护内容的播放。

@sooorajjj @SnwMds是否可以获取最新版本并从站点设置->多媒体->受保护的内容禁用受保护的内容播放，并验证对www.googleapis.com的CDM设置请求没有发生？

csagan5 于 2020-01-26

@ csagan5 ，我测试了版本79.0.3945.139 。对www.googleapis.com的CDM设置请求不再发生。

SnwMds 于 2020-01-28

👍1

感谢@ csagan5 ，此问题已解决，不再需要googleapis调用。

sooorajjj 于 2020-01-28

👍1

@sooorajjj ，它将在第一次播放受保护的内容时发生（除非对所有站点或特定站点禁用了受保护的内容）

csagan5 于 2020-01-29

此页面是否有帮助？

0 / 5 - 0 等级

Bromite: 向googleapis.com的Widevine CDM设置请求

溴化版本

这是有关SystemWebView的错误吗？

该错误可以在最新版本中重现吗？

可以在相应的Chromium版本中复制该错误吗？

该错误是否崩溃？

描述错误

重现该错误的步骤

预期行为

屏幕截图

最有用的评论

所有14条评论

相关问题