• SEARCH
  • DOWNLOADS
  • MY ACCOUNT
  • Buy (0)
  • CONTACT
  • Free Trial
Wowza Logo
  • PRODUCTS
    • Products

      • Wowza ClearCaster
      • Facebook Live appliance
      • Wowza Streaming Cloud
      • Cloud streaming services
      • Wowza Streaming Engine
      • Streaming server software
      • Wowza GoCoder & SDK
      • Mobile capture and encoding app
    • Capabilities

      • CDN
      • Ultra Low Latency
      • SRT
      • Player
      • WebRTC
      • Live Transcoding
      • See All Capabilities
  • DOCS & APIS

      Docs & APIs

      • Getting Started
      • User Guides
      • Technical Articles
      • Video Tutorials
      • API & SDK Docs
  • SOLUTIONS
    • Streaming Types

      • Live Video Streaming
      • Video on Demand
      • Audio-Only Streaming
      • IP Camera Streaming
      • VR and 360° Streaming
      • Chat
    • Industries

      • Broadcast & OTT
      • Education
      • Enterprise
      • Government
      • Live Events
      • Live Sports
      • Religious Organizations
    • Streaming Solutions

      • MediaDS—Integrated Streaming Device
      • Streaming Service Providers
      • Live Mobile Broadcasting
  • PRICING
    • Wowza ClearCaster

      • Facebook Live appliance
      • Starting at $2,995
      • Add to Cart
      • Request a Demo
    • Wowza Streaming Cloud

      • Cloud streaming services
      • Starter Plan: $49/month
      • Add to Cart
      • See All Plans
    • Wowza Streaming Engine

      • Streaming server software
      • Annual Plan: $65/month
      • Add to Cart
      • See All Plans
    • Wowza GoCoder SDK

      • SDK for mobile streaming
      • Talk to a Streaming Expert
      • Contact Us
      • Free Trial
  • RESOURCES

      Resources

      • Blog
      • Case Studies
      • Webinars
      • Videos
      • Podcasts
      • Test Players
      • Developer Tools
  • SUPPORT
    • Support

      • Forums
      • Software Updates
      • Open a Support Ticket
    • Plans & Services

      • Support Plans
      • Advisory Services
      • Live Event Support
  • My Account
  • Buy (0)
  • SEARCH
  • Ask a question
  • Forums
    • Wowza ClearCaster
    • Wowza Streaming Engine
    • Wowza Streaming Cloud
    • Wowza Player
    • Wowza GoCoder SDK
    • Wowza Developer Dojo
    • Topics
    • Questions
    • Users
    • Badges
  • Sign in
  • Community Home /
  • Wowza Streaming Engine /
  • Server Administration /
avatar image
Question by Aaron Todd · Jul 09, 2012 at 06:44 PM · server administration

wildcard SSL certificate usage

I have a wildcard SSL certificate that I'd like to add to my Wowza install. I followed the guide here: http://www.wowza.com/forums/content.php?128, but only the parts about importing certificates and configuring VHOST.xml. I ran the following commands:

keytool -import -alias root -trustcacerts -file intermediate.crt -keystore ssl.mydomain.com.cert
keytool -import -alias wowza -trustcacerts -file mydomain.crt -keystore ssl.mydomain.com.cert


The first to add the CA's certificate, and the second to add the certificate specific to my domain name.

In VHost.xml, I removed the comment tags from the SSL vhost. It was pretty much all ready to go, I just changed the KeyStorePath to reflect the same name I used above, and added my password to KeyStorePassword. I also changed the port from 443 to 4433.

Wowza starts up fine, but when I try to access the sever in the browser to simply return the version number I get nothing. I enabled DEBUG logging and am seeing "SSL handshake failed messages." So something went wrong, I'm guessing in the import part. Can anyone give me any clues here?

Thanks!
Comment

People who like this

0 Show 0
10 |600 characters needed characters left characters exceeded
▼
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Viewable by all users

3 Replies

· Add your reply
  • Sort: 
avatar image

Answer by Richard Lanham · Jul 09, 2012 at 09:12 PM

What browser are you using? There is some problem with Chrome.

Richard
Comment

People who like this

0 Show 2 · Share
10 |600 characters needed characters left characters exceeded
▼
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Viewable by all users
avatar image Aaron Todd · Jul 10, 2012 at 02:34 PM 0
Share
Richard,

I don't think this is a browser problem. I've tried in IE8, FF and used a SSL checker utility found here: https://knowledge.rapidssl.com/support/ssl-certificate-support/index?page=content&id=SO9556

All do not work.

In doing a little more research, I have come across this: http://www.agentbob.info/agentbob/79-AB.html This writeup talks about importing an existing certificate that has already been created into a java keystore. This is the case I'm in. I have a wildcard certificate that was was generated from an openssl csr. If I follow these directions and then use keytool to import the root certificate I no longer get the "SSL handshake failed" message, but for some reason it still doesnt work. Here is what I get in the log:

INFO server comment - Wowza Media Server is started!
DEBUG server comment - open
INFO server comment - handshake0: 103
INFO server comment - handshake0: 110
DEBUG server comment - sessionClosed: send close
DEBUG server comment - sessionClosed: closeConnection: vhost:_defaultVHost_ clientId:1811777746
INFO session disconnect 1811777746 -
DEBUG server comment - ServerHandler.handleSessionIdle: isDidClose


Any other ideas?
avatar image Aaron Todd Aaron Todd · Jul 11, 2012 at 02:32 PM 0
Share
Richard,

I got it work. I talked to RapidSSL about the issue and they directed me here: https://knowledge.rapidssl.com/support/ssl-certificate-support/index?page=content&id=SO17070&actp=search&viewlocale=en_US&searchid=1341956626144

On top of the openssl command, I did have to append the Equifax Secure Certificate Authority Root CA certificate to the bottom the RapidSSL intermediate CA file. I also had to change the SSLConfig/KeyStoreType to PKCS12.
avatar image

Answer by Richard Lanham · Jul 11, 2012 at 03:24 PM

Great! Thanks for the update. This should help others.

Richard
Comment

People who like this

0 Show 1 · Share
10 |600 characters needed characters left characters exceeded
▼
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Viewable by all users
avatar image Justin Davis · Aug 29, 2012 at 01:19 PM 0
Share
How do you enable the debug logging?
avatar image

Answer by Richard Lanham · Aug 30, 2012 at 02:57 AM

Open /conf/log4j.properties file in a text editor, then in the top line, change "INFO" to "DEBUG". This will increase logging about 10 fold and probably create too much noise to see what is important. In some cases it is useful, but more often it is not.

Richard
Comment

People who like this

0 Show 1 · Share
10 |600 characters needed characters left characters exceeded
▼
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Viewable by all users
avatar image Mittle Ott · Apr 16, 2013 at 10:55 PM 0
Share
That's going to be really good. Till I would like to develop some addons...

_________________

GeoTrsut SSL Certificate

Your answer

Hint: You can notify a user about this post by typing @username

Up to 2 attachments (including images) can be used with a maximum of 524.3 kB each and 1.0 MB total.

Follow this Question

Answers Answers and Comments

3 People are following this question.

avatar image avatar image avatar image

Related Questions

Quick JConsole overview 1 Answer

MediaCache, Adaptive Streaming, AWS S3 7 Answers

Is it possible to disable UDP streaming 7 Answers

Block connections in the origin with simple tv 1 Answer

Edge Servers Error with LB 4 3 Answers

Hot Topics
  • AWS Hosting
  • Mobile SDK
  • Deployment Options
  • Load Balancing
  • Content Security
Product Sign-in
  • Wowza Streaming Cloud
  • Wowza Player
Under the Hood
  • Developer Tools
  • Wowza System Status
  • Test Players
  • Developer IDE
Resellers
  • Find a Reseller
  • Reseller Portal
  • Become a Reseller
Company
  • About Us
  • Blog
  • News
  • Events
  • Careers
  • Customers
  • Partners
  • Contact Us
Stay Connected
Get Monthly Newsletter
Select a Language
  • English
    • English
    • Español
    • 日本語
    • 한국어
    • हिन्दी भाषा
    • 中文
    • русский язык

© 2005–2018 Wowza Media Systems, LLC. All rights reserved.   Terms | Privacy | Trademarks | Legal


Enterprise
Social Q&A

  • Anonymous
  • Sign in
  • Create
  • Ask a question
  • Create an article
  • Forums
  • Wowza ClearCaster
  • Wowza Streaming Engine
  • Wowza Streaming Cloud
  • Wowza Player
  • Wowza GoCoder SDK
  • Wowza Developer Dojo
  • Explore
  • Topics
  • Questions
  • Users
  • Badges