# SSL problem **URL:** \ **Category:** Wowza Streaming Engine\ **Created:** [August 7, 2012, 3:18am UTC](https://community.wowza.com/t/ssl-problem/34700 "2012-08-07T03:18:26Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![Shay\_Cohen](https://avatars.discourse-cdn.com/v4/letter/s/eb8c5e/32.png) [@Shay\_Cohen](https://community.wowza.com/u/Shay_Cohen)\ **Post date:** [August 7, 2012, 3:18am UTC](https://community.wowza.com/t/ssl-problem/34700/1 "2012-08-07T03:18:26Z")
Hi, I am using VLC to play HLS stream from our Wowza servers, all works great until I try to pass the key over SSL, when I try to get the key over https i get an erorr from gnutls (VLC SSL’s plugin) saying: “The Diffie Hellman prime sent by the server is not acceptable (not long enough).” now I have 2 options: 1. Patch the gnutls code with whoknowswhat. 2. Ask you guys if u know what the issue is and if there is a way to thell Wowza to send a longer prime? thanks Shay. ---
**Author:** ![Richard\_Lanham](https://avatars.discourse-cdn.com/v4/letter/r/c68b51/32.png) [@Richard\_Lanham](https://community.wowza.com/u/Richard_Lanham)\ **Post date:** [August 8, 2012, 1:03am UTC](https://community.wowza.com/t/ssl-problem/34700/2 "2012-08-08T01:03:45Z")
Shay, I’m not sure it will help, but take a look at this post on recent SSL improvments > [@SSL configuration improvements in Wowza media server](http://community.wowza.com/t/-/102): > > This article describes how to configure SSL-related properties, including the SSLConfig/CipherSuites and SSLConfig/Protocols filters, used by Wowza Streaming Engine™ media server software: [How to improve SSL configuration](https://www.wowza.com/docs/how-to-improve-ssl-configuration) And there is a recent add to this article re setting key length: > **[Request an SSL certificate from certificate authority](https://www.wowza.com/docs/how-to-request-an-ssl-certificate-from-a-certificate-authority)** > > Request and Install an SSL certificate from a third-party authority in Wowza Streaming Engine. Richard ---
**Author:** ![Shay\_Cohen](https://avatars.discourse-cdn.com/v4/letter/s/eb8c5e/32.png) [@Shay\_Cohen](https://community.wowza.com/u/Shay_Cohen)\ **Post date:** [August 8, 2012, 3:32am UTC](https://community.wowza.com/t/ssl-problem/34700/3 "2012-08-08T03:32:02Z")
Thank you Richard, sadly a deepper look into the VLC for Android found many problems (its an early beta after all) so we ditched this path, do you know any other HLS implementation for Android by any chance? ---
**Author:** ![Randall\_Auriemma](https://avatars.discourse-cdn.com/v4/letter/r/85e7bf/32.png) [@Randall\_Auriemma](https://community.wowza.com/u/Randall_Auriemma)\ **Post date:** [August 8, 2012, 3:09am UTC](https://community.wowza.com/t/ssl-problem/34700/4 "2012-08-08T03:09:28Z")
Shay, Have you tried putting the HLS (Cupertino) stream URL as a standard webpage hyperlink? Many Android devices support Cupertino natively in the player now. You can also type the URL into the browser bar, or the Android video player(s). ---
**Author:** ![Bill\_Turner](https://avatars.discourse-cdn.com/v4/letter/b/848f3c/32.png) [@Bill\_Turner](https://community.wowza.com/u/Bill_Turner)\ **Post date:** [December 21, 2012, 12:12pm UTC](https://community.wowza.com/t/ssl-problem/34700/5 "2012-12-21T12:12:07Z")
> Shay, > > Have you tried putting the HLS (Cupertino) stream URL as a standard webpage hyperlink? Many Android devices support Cupertino natively in the player now. You can also type the URL into the browser bar, or the Android video player(s). Randal, I’m running into a similar problem. I can play HLS videos over HTTPS on Android from other sources ([https://developer.apple.com/resources/http-streaming/examples/basic-stream.html](https://developer.apple.com/resources/http-streaming/examples/basic-stream.html)), but trying to play the video from Wowza gives me an error (CromiumHTTPDataSourceSupport: Request failed with status 4 and os\_error -104) The HTTPS Wowza URL plays fine in MacOS and iOS, just Android has problems. I’m suspecting it’s the same problem as with VLC, where gnutls doesn’t like the shorter Diffie-Hellman prime, but I’m just guessing there… If this IS the problem, is there any way to configure Wowza (currently running 3.5.0) to change the SSL handshaking parameters? [I’ve also posted a similar request for help on the Android side.]