? RTMPS is RTMPT over SSL

View: New views
19 Messages — Rating Filter:   Alert me  

? RTMPS is RTMPT over SSL

by Andrew Sinning :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Just read this in Paul Gregoire's blog at
http://gregoire.org/2008/05/26/rtmps-in-red5/.

So, this means that it's going to be slow and require tons of band
width, since tunneling works by constantly checking with the server for
updates, right?

_______________________________________________
Red5 mailing list
Red5@...
http://osflash.org/mailman/listinfo/red5_osflash.org

Re: ? RTMPS is RTMPT over SSL

by Thomas-128 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

I think it requires twice as much bandwidth for equal quality.


--
VOD & visioconference - http://www.digiprof.tv

_______________________________________________
Red5 mailing list
Red5@...
http://osflash.org/mailman/listinfo/red5_osflash.org

Re: ? RTMPS is RTMPT over SSL

by David Hogan-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

And if you are publishing, the frame rate seems to be limited by the latency of the connection between the publisher and the server, at least it was last time I tried it.

The flash client can also connect using native SSL (rather than RTMPT over SSL) however red5 doesn't currently support this method. I would expect the performance of native SSL to be similar to that of RTMP as long as the client and server had enough spare CPU cycles for the encryption.

2009/10/29 Thomas <iamkenzo@...>
I think it requires twice as much bandwidth for equal quality.


--
VOD & visioconference - http://www.digiprof.tv

_______________________________________________


_______________________________________________
Red5 mailing list
Red5@...
http://osflash.org/mailman/listinfo/red5_osflash.org

Re: ? RTMPS is RTMPT over SSL

by Thomas-128 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

On Sun, Nov 1, 2009 at 2:33 AM, David Hogan <mr.david.hogan@...> wrote:
> The flash client can also connect using native SSL (rather than RTMPT over
> SSL) however red5 doesn't currently support this method.
Any idea if Wowza supports this method? Any idea when it will be supported?

--
VOD & visioconference - http://www.digiprof.tv

_______________________________________________
Red5 mailing list
Red5@...
http://osflash.org/mailman/listinfo/red5_osflash.org

Re: ? RTMPS is RTMPT over SSL

by Maciej Sawicki :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

On Sun, Nov 1, 2009 at 14:32, Thomas <iamkenzo@...> wrote:
> Any idea if Wowza supports this method? Any idea when it will be supported?
>

How about using stunel?

regards,
Maciek Sawicki

_______________________________________________
Red5 mailing list
Red5@...
http://osflash.org/mailman/listinfo/red5_osflash.org

Re: ? RTMPS is RTMPT over SSL

by Thomas-128 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

I followed Paul Grégoire blog post, and when I try to connect using
rtmps I get the following error:

[ERROR] [http-8443-Acceptor-1] org.apache.tomcat.util.net.NioEndpoint -
java.net.SocketException: Invalid argument
        at sun.nio.ch.Net.setIntOption0(Native Method) [na:1.5.0]
        at sun.nio.ch.Net.setIntOption(Net.java:152) [na:1.5.0]
        at sun.nio.ch.SocketChannelImpl$1.setInt(SocketChannelImpl.java:372)
[na:1.5.0]
        at sun.nio.ch.SocketOptsImpl.setInt(SocketOptsImpl.java:46) [na:1.5.0]
        at sun.nio.ch.SocketOptsImpl$IP.typeOfService(SocketOptsImpl.java:249)
[na:1.5.0]
        at sun.nio.ch.OptionAdaptor.setTrafficClass(OptionAdaptor.java:158)
[na:1.5.0]
        at sun.nio.ch.SocketAdaptor.setTrafficClass(SocketAdaptor.java:330)
[na:1.5.0]
        at org.apache.tomcat.util.net.SocketProperties.setProperties(SocketProperties.java:179)
[tomcat-coyote-6.0.20-patched.jar:na]
        at org.apache.tomcat.util.net.NioEndpoint.setSocketOptions(NioEndpoint.java:1045)
[tomcat-coyote-6.0.20-patched.jar:na]
        at org.apache.tomcat.util.net.NioEndpoint$Acceptor.run(NioEndpoint.java:1272)
[tomcat-coyote-6.0.20-patched.jar:na]
        at java.lang.Thread.run(Thread.java:613) [na:1.5.0]


--
VOD & visioconference - http://www.digiprof.tv

_______________________________________________
Red5 mailing list
Red5@...
http://osflash.org/mailman/listinfo/red5_osflash.org

Re: ? RTMPS is RTMPT over SSL

by Thomas-128 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Using Flash player 9 developer version, is there still a problem
having flash not connecting to self-signed certificates? (that's super
painful for testing)

I applied the trick that solves the error on OSX:
http://osflash.org/pipermail/red5_osflash.org/2008-August/024575.html

so now red5 doesn't raise an error on connection, but then nothing
happens, my flash client doesn't seem to be hitting red5 anymore, and
red5 doesn't receive anything, well nothing gets printed in the log.
Should I at least see the connection attempt? Should the flash player
notice me that the certificate is not acceptable?

Regards,

--
VOD & visioconference - http://www.digiprof.tv

_______________________________________________
Red5 mailing list
Red5@...
http://osflash.org/mailman/listinfo/red5_osflash.org

Re: ? RTMPS is RTMPT over SSL

by Thomas-128 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

For crap sake! Now I'm having the bloody "address already in use"
problem that came back!

--
VOD & visioconference - http://www.digiprof.tv

_______________________________________________
Red5 mailing list
Red5@...
http://osflash.org/mailman/listinfo/red5_osflash.org

Re: ? RTMPS is RTMPT over SSL

by David Hogan-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message


Stunnel does work for rtmpt over ssl, but last I checked, not for rtmp over ssl.

2009/11/2 Maciej Sawicki <viroos.pl@gmail.com>
On Sun, Nov 1, 2009 at 14:32, Thomas <iamkenzo@...> wrote:
> Any idea if Wowza supports this method? Any idea when it will be supported?
>

How about using stunel?

regards,
Maciek Sawicki

_______________________________________________
Red5 mailing list
Red5@...
http://osflash.org/mailman/listinfo/red5_osflash.org


_______________________________________________
Red5 mailing list
Red5@...
http://osflash.org/mailman/listinfo/red5_osflash.org

Re: ? RTMPS is RTMPT over SSL

by Thomas-128 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Still not working, my flash client doesn't even attempt to connect to
red5. Should I be on an https page for the flash client to connect
using rtmps? What could be going wrong? There is absolutely nothing
printed out in red5's console.


On Wed, Nov 4, 2009 at 1:18 AM, David Hogan <mr.david.hogan@...> wrote:
>
> Stunnel does work for rtmpt over ssl, but last I checked, not for rtmp over
> ssl.
I don't want to add a new dependency, so I will not use stunnel.



--
VOD & visioconference - http://www.digiprof.tv

_______________________________________________
Red5 mailing list
Red5@...
http://osflash.org/mailman/listinfo/red5_osflash.org

Re: ? RTMPS is RTMPT over SSL

by Thomas-128 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Wait!

I added -Djavax.net.debug=ssl when starting up red5, and now I have
some interesting stuff getting printed out in the red5 console.

 When Red5 starts up, it initializes the certificates, but it's maybe
not interesting for you to see but here is just the end of it to prove
that initialization completed:

[...]
[INFO] [main] org.apache.coyote.http11.Http11NioProtocol - Starting
Coyote HTTP/1.1 on http-443
Bootstrap complete
_________________________________

and now when my flash client tries to connect, there is some more
stuff being printed out which I previously didn't see:

Using SSLEngineImpl.
http-443-exec-1, READ:  SSL v2, contentType = Handshake, translated length = 103
*** ClientHello, TLSv1
[...]
A lot of blabla in which it seems to use the correct self-signed
certificate with the corresponding domain name, then:
[...]
***
*** ServerHelloDone
http-443-exec-1, WRITE: TLSv1 Handshake, length = 525
http-443-exec-1, called closeOutbound()
http-443-exec-1, closeOutboundInternal()
http-443-exec-1, SEND TLSv1 ALERT:  warning, description = close_notify
http-443-exec-1, WRITE: TLSv1 Alert, length = 2
___________

And my flash client gets a connection failure.

Any idea?


--
VOD & visioconference - http://www.digiprof.tv

_______________________________________________
Red5 mailing list
Red5@...
http://osflash.org/mailman/listinfo/red5_osflash.org

Re: ? RTMPS is RTMPT over SSL

by Donatello :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

I modified my app so that the flash client gets called from an https page, and still red5 rejects me. Now I don't know where to look for. Any clue of what's happening?

Any plans on adding rtmpe for red5?

--
VOD & visioconference - http://www.digiprof.tv

Re: ? RTMPS is RTMPT over SSL

by Thomas-128 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

I changed my app so that the flash client gets loaded inside an https
page, but still red5 rejects the rtmps connection. I don't know where
to look now (except towards wowza...). Any clue on what's happening?

Is it scheduled to add rtmpe in the near future in order to easily
encrypt streams?

--
VOD & visioconference - http://www.digiprof.tv

_______________________________________________
Red5 mailing list
Red5@...
http://osflash.org/mailman/listinfo/red5_osflash.org

Re: ? RTMPS is RTMPT over SSL

by Thomas-128 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Could anyone who has managed to make rtmps work with red5 0.9 and/or
latest trunk, provide some steps and guidelines please?

Do you think I should first try to connect to Red5 through rtmpt just
to see if it works? Because if I can't that means that I should first
look at debugging rtmpt connection before rtmps. Isn't it?

_______________________________________________
Red5 mailing list
Red5@...
http://osflash.org/mailman/listinfo/red5_osflash.org

Re: ? RTMPS is RTMPT over SSL

by Thomas-128 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

I saw a post from Paul Gregoire @red5-devs about settings in web.xml
for my app and to check out oflademo's to see how it's made. And their
are differences! I'm missing plenty stuff actually. So at the end to
have an app that support rtmps what should a working web.xml file look
like?


--
VOD & visioconference - http://www.digiprof.tv

_______________________________________________
Red5 mailing list
Red5@...
http://osflash.org/mailman/listinfo/red5_osflash.org

Re: ? RTMPS is RTMPT over SSL

by Thomas-128 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Argh! Damn it! I tested on my windows box, and rtmps works. I don't
know if it's my Mac Flash Player developer version that's causing
trouble or something else.

I'll report if I can discover the real root of the problem I was experiencing.

--
VOD & visioconference - http://www.digiprof.tv

_______________________________________________
Red5 mailing list
Red5@...
http://osflash.org/mailman/listinfo/red5_osflash.org

Re: ? RTMPS is RTMPT over SSL

by Thomas-128 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Houston, we're having a problem!

It is obvious that Flash Player is the faulty guy. Running red5 on my
Mac box, I can connect to it from a PC, but not from a Mac

When I run red5 on the win box, I can obviously connect using the win
box, but still the Mac won't manage over rtmps (no problem with
regular rtmp).

I also noticed that Firefox on win prompts me to accept an untrusted
certificate, whereas Firefox on Mac never prompts me. Any idea?

--
VOD & visioconference - http://www.digiprof.tv

_______________________________________________
Red5 mailing list
Red5@...
http://osflash.org/mailman/listinfo/red5_osflash.org

Re: ? RTMPS is RTMPT over SSL

by Gavriloaie Eugen-Andrei :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hello,
I confirm that Mac OS X Flash Player is the faulty piece in the  
puzzle. I tested it against openssl tools and it seems that it is  
unable to handshake a correct encryption algorithm.

Flash player says that it can handle encryption A,B,C,etc algorithms  
and the openssl tool is saying that can handle almost all of them  
(lol, obviously). Despite the fact the both openssl and flash player  
have many common algorithms for encryption, they simply fail in  
"handshaking" and choose one of them for future encryption.

Also tested it with my own server in which I took care and made  
absolutely sure that I select ALL encryption algorithms.

The funny part is that not even FMS  accepts the connection :))


Regards,
Andrei


On Nov 7, 2009, at 5:48 PM, Thomas wrote:

> Houston, we're having a problem!
>
> It is obvious that Flash Player is the faulty guy. Running red5 on my
> Mac box, I can connect to it from a PC, but not from a Mac
>
> When I run red5 on the win box, I can obviously connect using the win
> box, but still the Mac won't manage over rtmps (no problem with
> regular rtmp).
>
> I also noticed that Firefox on win prompts me to accept an untrusted
> certificate, whereas Firefox on Mac never prompts me. Any idea?
>
> --
> VOD & visioconference - http://www.digiprof.tv
>
> _______________________________________________
> Red5 mailing list
> Red5@...
> http://osflash.org/mailman/listinfo/red5_osflash.org


_______________________________________________
Red5 mailing list
Red5@...
http://osflash.org/mailman/listinfo/red5_osflash.org

Re: ? RTMPS is RTMPT over SSL

by Thomas-128 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

> The funny part is that not even FMS  accepts the connection :))
That's a good one! Thank you Eugen for your input.

What about GNU/linux? Does the flash player connect?


--
VOD & visioconference - http://www.digiprof.tv

_______________________________________________
Red5 mailing list
Red5@...
http://osflash.org/mailman/listinfo/red5_osflash.org