Hello,
Using Wowza streaming engine on AWS and streaming via regular HTTP is working with a DASH player. need to get it working via HTTPS.
I followed the instructions in the “How to request an SSL certificate from a certificate authority” article, obtained and installed a cert and adjusted the VHost.xml file to uncomment the section. Ensured that our DNS had sentryvidserv.us pointing at our AWS instance.
Test player still works when using HTTP and the old port. Also works if I use http and the domain name:
http://sentryvidserv.us:1935/mps/my-stream-name/manifest.f4m
Also works if I use http and port 443 (which seems odd to me)
http://sentryvidserv.us:443/mps/my-stream-name/manifest.f4m
However, I cannot get any form of httpS to play a stream. I’ve tried 443 and 1935. MPEG-DASH and Adobe HDS. I feel like there must be a configuration step that was missed.
Here are the commands I used:
sudo keytool -genkey -keysize 2048 -alias wowza -keyalg RSA -keystore sentryvidserv.us.jks
(gave it sentryvidserv.us as the first and last name)
sudo keytool -certreq -file sentryvidserv.us.csr -alias wowza -keyalg RSA -keystore sentryvidserv.us.jks
When I received the certs, I installed them:
sudo keytool -import -alias root -trustcacerts -file DigiCertCA.crt -keystore sentryvidserv.us.jks
sudo keytool -import -alias wowza -trustcacerts -file sentryvidserv_us.crt -keystore ssl.mycompany.com.jks
Here is the result of keytool -list -keystore sentryvidserv.us.jks
Enter keystore password:
Keystore type: JKS
Keystore provider: SUN
Your keystore contains 2 entries
root, Oct 10, 2014, trustedCertEntry,
Certificate fingerprint (SHA1): 1F:B8:6B:11:68:........:71:A4:B7:CC:B4
wowza, Oct 10, 2014, PrivateKeyEntry,
Certificate fingerprint (SHA1): 43:AF:E0:BC:26:.......:A8:CB:CA:54:02:2B:AE:70
Here is the section of VHost.xml:
<HostPort>
<Name>Default SSL Streaming</Name>
<Type>Streaming</Type>
<ProcessorCount>${com.wowza.wms.TuningAuto}</ProcessorCount>
<IpAddress>*</IpAddress>
<Port>443</Port>
<HTTPIdent2Response></HTTPIdent2Response>
<SSLConfig>
<KeyStorePath>${com.wowza.wms.context.VHostConfigHome}/conf/sentryvidserv.us.jks</KeyStorePath>
<KeyStorePassword>S3ntryK3ySt0re</KeyStorePassword>
<KeyStoreType>JKS</KeyStoreType>
<SSLProtocol>TLS</SSLProtocol>
<Algorithm>SunX509</Algorithm>
<CipherSuites></CipherSuites>
<Protocols></Protocols>
</SSLConfig>
<SocketConfiguration>
<ReuseAddress>true</ReuseAddress>
<ReceiveBufferSize>65000</ReceiveBufferSize>
<ReadBufferSize>65000</ReadBufferSize>
<SendBufferSize>65000</SendBufferSize>
<KeepAlive>true</KeepAlive>
<AcceptorBackLog>100</AcceptorBackLog>
</SocketConfiguration>
<HTTPStreamerAdapterIDs>cupertinostreaming,smoothstreaming,sanjosestreaming,dvrchunkstreaming,mpegdashstreaming</HTTPStreamerAdapterIDs>
<HTTPProviders>
<HTTPProvider>
<BaseClass>com.wowza.wms.http.HTTPCrossdomain</BaseClass>
<RequestFilters>*crossdomain.xml</RequestFilters>
<AuthenticationMethod>none</AuthenticationMethod>
</HTTPProvider>
<HTTPProvider>
<BaseClass>com.wowza.wms.http.HTTPClientAccessPolicy</BaseClass>
<RequestFilters>*clientaccesspolicy.xml</RequestFilters>
<AuthenticationMethod>none</AuthenticationMethod>
</HTTPProvider>
<HTTPProvider>
<BaseClass>com.wowza.wms.http.HTTPProviderMediaList</BaseClass>
<RequestFilters>*jwplayer.rss|*jwplayer.smil|*medialist.smil|*manifest-rtmp.f4m</RequestFilters>
<AuthenticationMethod>none</AuthenticationMethod>
</HTTPProvider>
<HTTPProvider>
<BaseClass>com.wowza.wms.http.HTTPServerVersion</BaseClass>
<RequestFilters>*</RequestFilters>
<AuthenticationMethod>none</AuthenticationMethod>
</HTTPProvider>
</HTTPProviders>
</HostPort>
What else needs to be done to enable streaming over HTTPS??
Many thanks,
Dave