# RTSP Streaming Security

**URL:** <https://community.wowza.com/t/rtsp-streaming-security/40808>\
**Category:** Wowza Streaming Engine\
**Created:** [November 10, 2014, 2:40pm UTC](https://community.wowza.com/t/rtsp-streaming-security/40808 "2014-11-10T14:40:20Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Raghava\_Reddy](https://avatars.discourse-cdn.com/v4/letter/r/5daacb/32.png) [@Raghava\_Reddy](https://community.wowza.com/u/Raghava_Reddy)\
**Post date:** [November 10, 2014, 2:40pm UTC](https://community.wowza.com/t/rtsp-streaming-security/40808/1 "2014-11-10T14:40:20Z")

</div>

Dear Team,

Can you please suggest the model to implement the Streaming Url Security. Now we are trying delivery the VOD url in the below format to end users.

rtsp://ipaddress:1935/vod/mp4:sample.mp4

so user was able to stream this content and Here i need to route the request to proxy or api to validate the user before streaming the content. if i deliver the url as shown above , user can stream the same url anytime based on this requirement. but i need to control the access policy.

Please suggest the model which we need to follow.

1. Token based system not suitable for us as shared in the forums.

Regards,

Raghava Reddy.K

---

<div class="post-metadata">

**Author:** ![sal\_jefferson](https://avatars.discourse-cdn.com/v4/letter/s/6de8d8/32.png) [@sal\_jefferson](https://community.wowza.com/u/sal_jefferson)\
**Post date:** [November 10, 2014, 6:53am UTC](https://community.wowza.com/t/rtsp-streaming-security/40808/2 "2014-11-10T06:53:24Z")

</div>

Hello there,

To the best of my knowledge, there are no methods in Wowza Server to completely secure RTSP/RTP streaming. You can refuse connections in onRTPSessionCreate but that is the only method of security. There is no encryption or DRM option at this time.

Kind regards,

Salvadore

---

<div class="post-metadata">

**Author:** ![sal\_jefferson](https://avatars.discourse-cdn.com/v4/letter/s/6de8d8/32.png) [@sal\_jefferson](https://community.wowza.com/u/sal_jefferson)\
**Post date:** [November 10, 2014, 7:34am UTC](https://community.wowza.com/t/rtsp-streaming-security/40808/3 "2014-11-10T07:34:36Z")

</div>

I had a closer look at the updated SecureToken guide, and there is now support for RTPS streams.

[How to protect streaming using SecureToken in Wowza Streaming Engine](https://www.wowza.com/docs/how-to-protect-streaming-using-securetoken-in-wowza-streaming-engine)

Do you have any other reason why this method will not be suitable for your situation?

Thanks,

Salvadore

---

<div class="post-metadata">

**Author:** ![Raghava\_Reddy](https://avatars.discourse-cdn.com/v4/letter/r/5daacb/32.png) [@Raghava\_Reddy](https://community.wowza.com/u/Raghava_Reddy)\
**Post date:** [November 10, 2014, 6:28pm UTC](https://community.wowza.com/t/rtsp-streaming-security/40808/4 "2014-11-10T18:28:01Z")

</div>

Is there any other method to control user streaming process?

---

<div class="post-metadata">

**Author:** ![Raghava\_Reddy](https://avatars.discourse-cdn.com/v4/letter/r/5daacb/32.png) [@Raghava\_Reddy](https://community.wowza.com/u/Raghava_Reddy)\
**Post date:** [November 10, 2014, 7:39pm UTC](https://community.wowza.com/t/rtsp-streaming-security/40808/5 "2014-11-10T19:39:47Z")

</div>

Hi Salvadore,

Thanks for Quick Support, I think this is having sound information. but the i am using the Version 4.0.6, these features are available on 4.1.0, So let me install the latest one and configure.

Regards,

Raghava Reddy.K

---

<div class="post-metadata">

**Author:** ![Raghava\_Reddy](https://avatars.discourse-cdn.com/v4/letter/r/5daacb/32.png) [@Raghava\_Reddy](https://community.wowza.com/u/Raghava_Reddy)\
**Post date:** [November 11, 2014, 3:39pm UTC](https://community.wowza.com/t/rtsp-streaming-security/40808/6 "2014-11-11T15:39:31Z")

</div>

Hi Salvadore,

Now i have installed the Latest version and i am able to configured the Secure token details as per the given link.(How to protect streaming using SecureToken in Wowza Streaming Engine). and i have generated the Hash value using the SHA-256 Algorithm, but not able to stream the content.

Is there any tool to verify the HASH value which is generated at server end?

I am getting the error like “ModuleCoreSecurity[vod/_definst_] Invalid value for token start time: null” even though if i pass the starttime as “0” please suggest if any configurations are there to activate the stream instantly.

Regards,

Raghava Reddy.K