Results 1 to 2 of 2

Thread: iPhone/iPad Live stream security

  1. #1
    Join Date
    Jan 2013
    Posts
    1

    Default iPhone/iPad Live stream security

    Hello -

    Our company administers a Wowza streaming server to do live streaming of performances. About a year ago, we added support for Apple's iDevices to view the streams using HTTP Live streaming. Example stream URL is:

    http://domain.com:1935/stockbar/memb.../playlist.m3u8

    This has been working well. They recently decided they wanted to secure the stream by requiring authentication to access it (right now, the links to click on for the stream are on an authenticated section of their web site, but if you already have the stream URL, you don't need to authenticate to view it, and they want to change that). So, I did some research of the docs on the Wowza site, and determined that the following document should take care of it:

    http://www.wowza.com/forums/content.php?60

    So, following that document, I generated an AES-128 key to use to encrypt the stream, and set up a web page to use for key retrieval at http://domain.com/members/get_key_memberhigh.php. The members directory on the webserver is password-protected, so only those who have already authenticated will be able to retrieve the key.

    To generate the key, I did the following on the Linux server (Centos 5):

    ./genkey.sh iphone memberhigh http://domain.com/members/get_key_memberhigh.php

    And got the following output:

    cupertinostreaming-aes128-key: {Hidden}
    cupertinostreaming-aes128-url: http://domain.com/members/get_key_memberhigh.php

    Key file generated: memberhigh.key
    Copy file to: [install-dir]/keys

    I then copied the memberhigh.key file to /usr/local/WowzaMediaServer/applications/stockbar/keys/, and set the following in /usr/local/WowzaMediaServer/conf/stockbar/Application.xml <Streams> section:

    <KeyDir>${com.wowza.wms.AppHome}/applications/stockbar/keys</KeyDir>

    Once I made those changes, and restarted Wowza, it seemed like all streaming stopped working right (there's 3 separate streams being published thru this application).

    I'm pretty new to running a Wowza server, and part of the problem is that someone in the past has disabled all the logging in the server, and I haven't yet figured out how to turn that back on. But, can anyone see any obvious mistakes I have made?

    Thank you for any help you might be able to give!

  2. #2
    Join Date
    Dec 2007
    Posts
    22,013

    Default

    AES encrypts the HLS chunks. The AES External interface does provide a way to do authentication, but if you only need to authenticate you can use onHTTPSessionCreate

    http://www.wowza.com/forums/content....josestreaming)

    Richard

Similar Threads

  1. how to start publishing of a live camera stream (rtp-live) from iphone/ipad?
    By bingo_jake in forum Live Streaming and Encoder Discussion
    Replies: 2
    Last Post: 08-06-2012, 12:06 PM
  2. live stream to iphone/ipad
    By zuperhost in forum Live Streaming and Encoder Discussion
    Replies: 2
    Last Post: 04-12-2012, 06:37 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •