# wildcard SSL certificate usage
**URL:** https://community.wowza.com/t/wildcard-ssl-certificate-usage/368
**Category:** Wowza Streaming Engine
**Tags:** server-administration
**Created:** [July 9, 2012, 6:44pm UTC](https://community.wowza.com/t/wildcard-ssl-certificate-usage/368 "2012-07-09T18:44:50Z")
**Posts on this page:** 8
**Page:** 1
### Author:  [@system](https://community.wowza.com/u/system)
#### Post date: [July 9, 2012, 6:44pm UTC](https://community.wowza.com/t/wildcard-ssl-certificate-usage/368/1 "2012-07-09T18:44:50Z")
I have a wildcard SSL certificate that I’d like to add to my Wowza install. I followed the guide here: [https://www.wowza.com/docs/how-to-request-an-ssl-certificate-from-a-certificate-authority](https://www.wowza.com/docs/how-to-request-an-ssl-certificate-from-a-certificate-authority), but only the parts about importing certificates and configuring VHOST.xml. I ran the following commands:
```auto
keytool -import -alias root -trustcacerts -file intermediate.crt -keystore ssl.mydomain.com.cert
keytool -import -alias wowza -trustcacerts -file mydomain.crt -keystore ssl.mydomain.com.cert
```
The first to add the CA’s certificate, and the second to add the certificate specific to my domain name.
In VHost.xml, I removed the comment tags from the SSL vhost. It was pretty much all ready to go, I just changed the KeyStorePath to reflect the same name I used above, and added my password to KeyStorePassword. I also changed the port from 443 to 4433.
Wowza starts up fine, but when I try to access the sever in the browser to simply return the version number I get nothing. I enabled DEBUG logging and am seeing “SSL handshake failed messages.” So something went wrong, I’m guessing in the import part. Can anyone give me any clues here?
Thanks!
---
### Author:  [@Richard\_Lanham](https://community.wowza.com/u/Richard_Lanham)
#### Post date: [July 9, 2012, 9:12pm UTC](https://community.wowza.com/t/wildcard-ssl-certificate-usage/368/2 "2012-07-09T21:12:56Z")
What browser are you using? There is some problem with Chrome.
Richard
---
### Author:  [@Richard\_Lanham](https://community.wowza.com/u/Richard_Lanham)
#### Post date: [July 11, 2012, 3:24pm UTC](https://community.wowza.com/t/wildcard-ssl-certificate-usage/368/3 "2012-07-11T15:24:29Z")
Great! Thanks for the update. This should help others.
Richard
---
### Author:  [@Richard\_Lanham](https://community.wowza.com/u/Richard_Lanham)
#### Post date: [August 30, 2012, 2:57am UTC](https://community.wowza.com/t/wildcard-ssl-certificate-usage/368/4 "2012-08-30T02:57:00Z")
Open /conf/log4j.properties file in a text editor, then in the top line, change “INFO” to “DEBUG”. This will increase logging about 10 fold and probably create too much noise to see what is important. In some cases it is useful, but more often it is not.
Richard
---
### Author:  [@Aaron\_Todd](https://community.wowza.com/u/Aaron_Todd)
#### Post date: [July 10, 2012, 2:34pm UTC](https://community.wowza.com/t/wildcard-ssl-certificate-usage/368/5 "2012-07-10T14:34:21Z")
Richard,
I don’t think this is a browser problem. I’ve tried in IE8, FF and used a SSL checker utility found here: [https://knowledge.rapidssl.com/support/ssl-certificate-support/index?page=content&id=SO9556](https://knowledge.rapidssl.com/support/ssl-certificate-support/index?page=content&id=SO9556)
All do not work.
In doing a little more research, I have come across this: [http://www.agentbob.info/agentbob/79-AB.html](http://www.agentbob.info/agentbob/79-AB.html) This writeup talks about importing an existing certificate that has already been created into a java keystore. This is the case I’m in. I have a wildcard certificate that was was generated from an openssl csr. If I follow these directions and then use keytool to import the root certificate I no longer get the “SSL handshake failed” message, but for some reason it still doesnt work. Here is what I get in the log:
```auto
INFO server comment - Wowza Media Server is started!
DEBUG server comment - open
INFO server comment - handshake0: 103
INFO server comment - handshake0: 110
DEBUG server comment - sessionClosed: send close
DEBUG server comment - sessionClosed: closeConnection: vhost:_defaultVHost_ clientId:1811777746
INFO session disconnect 1811777746 -
DEBUG server comment - ServerHandler.handleSessionIdle: isDidClose
```
Any other ideas?
---
### Author:  [@Aaron\_Todd](https://community.wowza.com/u/Aaron_Todd)
#### Post date: [July 11, 2012, 2:32pm UTC](https://community.wowza.com/t/wildcard-ssl-certificate-usage/368/6 "2012-07-11T14:32:31Z")
Richard,
I got it work. I talked to RapidSSL about the issue and they directed me here: [https://knowledge.rapidssl.com/support/ssl-certificate-support/index?page=content&id=SO17070&actp=search&viewlocale=en\_US&searchid=1341956626144](https://knowledge.rapidssl.com/support/ssl-certificate-support/index?page=content&id=SO17070&actp=search&viewlocale=en_US&searchid=1341956626144)
On top of the openssl command, I did have to append the Equifax Secure Certificate Authority Root CA certificate to the bottom the RapidSSL intermediate CA file. I also had to change the SSLConfig/KeyStoreType to PKCS12.
---
### Author:  [@Justin\_Davis](https://community.wowza.com/u/Justin_Davis)
#### Post date: [August 29, 2012, 1:19pm UTC](https://community.wowza.com/t/wildcard-ssl-certificate-usage/368/7 "2012-08-29T13:19:15Z")
How do you enable the debug logging?
---
### Author:  [@Mittle\_Ott](https://community.wowza.com/u/Mittle_Ott)
#### Post date: [April 16, 2013, 10:55pm UTC](https://community.wowza.com/t/wildcard-ssl-certificate-usage/368/8 "2013-04-16T22:55:51Z")
That’s going to be really good. Till I would like to develop some addons…
* * *
[GeoTrsut SSL Certificate](http://www.sslvendor.com/geotrust)