HTTPS + SSL works on all browsers EXCEPT Google Chrome (both desktop/mobile) (ERR_TIMED_OUT)

[Rogier_Tuinte1]

The title is pretty self-explanatory - I’m able to view the stream using the Wowza player on an HTTPS page with Safari and IE. Chrome refuses to work using HTTPS. It happens both using the embedded Wowza player as well as using a Chrome plugin to load the HLS stream directly from the URL. HTTP works fine. The error it prints is just an ERR_TIMED_OUT error.

Certificates are working properly, I’m sure of that.

Any suggestions?

[Jermaine_Hemby]

Hello,

Thanks for contacting the Wowza Community.

The error looks to be the cert does not meet the browser security standards.

Can you try the Wowza provided Streamlock Service as a test? If this works, you will need to improve the security of your current cert.

regards,
Jermaine

[Rogier_Tuinte1]

Hi Jermaine, thanks for the reply.

My SSL certificate is provided by Streamlock.

[Jermaine_Hemby]

Hello,

Thanks for the update and info. can you confirm the Chrome version you are testing with?

thanks,
Jermaine

[Pavel_Frkal]

Hello,

if anyone comes to this thread via google or otherwise, be warned that even with OpenJDK 11 (tested with 8 as well) TLS 1.3 is not fully functional even with Wowza version 4.8. It works in most browsers just fine but with few Chrome versions (namely under W10) it simply keeps timing out from the browser perspective. We were able to capture the SSL handshake - Chrome asks for 1.3 handshake, then downgrades to 1.2 and finally sends TCP FIN regardless (all doe within milliseconds however the browser times out after 10+s). We’ve ended up disabling TLS 1.3 in the java.security to resolve this.

Just to mention older versions of WMS do need this corrections as well if you update your Java as TLS 1.3 gets automatically enabled by the java update however Wowza doesn’t respond about one third of all TLS 1.3 handshakes for any clients we’ve tested.