Forum

TLSV 1.2 Certificate

Carlo 2020-06-16 21:54:25 UTC in Nimble Streamer

Hi,
I would like to know if the TLSV 1.2 Certificate is compatible with RTMPS, RTSPS and HLS protocols.
If it is compatible, how can I install TLSV 1.2 Certificate on Nimble Streamer?
If I have an encoder like ffmpeg, I have to install the TLSV 1.2 Certificate only on the Nimble Streamer server or on the encoder too?
I’m new in these kind of things so I need an help, please!
Thank you
Carlo

Alex Pokotilo 2020-06-17 02:47:27 UTC 

Hi,
>I would like to know if the TLSV 1.2 Certificate is compatible with RTMPS, RTSPS and HLS protocols.
I'm not sure what you mean by 'TLSV 1.2 Certificate' but Nimble streamer works via TLS 1.2 on old OSes and works via TLS 1.3 on new OSes like Ubuntu 18.04, 20.04. So I think answer to your question is 'yes'.

>If I have an encoder like ffmpeg, I have to install the TLSV 1.2 Certificate only on the Nimble Streamer server or on the encoder too?
you need to install certificate only on Nimble Streamer.
please find some links for the subject
https://blog.wmspanel.com/2014/12/ssl-hls-mpeg-dash-icecast-https-support.html
https://blog.wmspanel.com/2019/02/rtmps-ssl-rtmp-nimble-streamer.html
https://blog.wmspanel.com/2019/08/using-certbot-letsencrypt-nimble-streamer.html

please also try to find answers first via https://softvelum.com/search/ as most of them, like this one, already answered

carlosgambato19@gmail.com 2020-06-17 14:13:54 UTC 

Thank you for the answer, Alex.
I have a doubt: to get an encrypted transmission i also have to install the certificate on the encoder (ffmpeg)?
How can i protect my streaming using the protocol RTMP or RSTP?
Can i generate the certificates by using OpenSSL?
Thank you
Carlo

Sergei 2020-06-18 01:01:28 UTC 

Hello, Carlos.

If you want to use RTMPS, then you need to install SSL on Nimble only, but you will also need a special build of FFMPEG, that supports RTMPS. Please consult FFMPEG documentation on it.
If you mean protecting publishing to the Nimble streamer, you can use user/password that is set up in Global tab, or set up Publish Control to use a signature, as described in the following page:
https://blog.wmspanel.com/2015/12/rtsp-publish-control-setup.html
If you mean viewing, please use WMSAuth hotlink protection as described in the following page:
https://softvelum.com/paywall/hotlink_protection/

You can generate certificates with OpenSSL, but note, that it will be self-signed.
Thank you

Gastone 2020-06-18 11:25:26 UTC 

Hello, thanks a lot for your answers. I'm working with Carlo at the project and I'm sure we haven't explained our aim completely.
Essentially we would love to "protect" and encrypt the whole streaming chain end to end. We would like to stream RTMPS from our encoders (which should be authenticated and encrypted at the same time) and then transmux those streams into HLS and distribute those with encryption again (probably on an HTML5 page via HTTPS). Since our content is very sensible we really need to have encryption all the way. Also probably we will need DRM (but that's something we'll understand further down the line).
So the questions are:
Is there any way to push RTMPS and RTSPS streams on nimble?
If so, where and what are the options to use them? (we don't seem to find an interface for those)
Do we need to use TLS v1.3 (v stands for version) certificates to stream RTMPS and RTSPS on nimble?
Also, I know this is not a question related to Nimble Streamer but we are quite new to the streaming world, what key are RTMPS and RTSPS using to encrypt the streams?
Are they using the username and password to generate the encryption? Or do we need a kind of certificate on the encoder side to properly encrypt those streams?

Thanks a lot for your help

Yury 2020-06-19 01:06:14 UTC 

Hi Gaston,

Please send these questions to our helpdesk so we could answer there.

Post a reply


Post a new question

Categories:

Tags:

nimbleNimble StreamerFAQHLSDVRRTMPnimble streamerhlsABRcachewmsauthNimbleAPISRTtranscoderffmpegdvrapiVODfailoverrtmpstreamingDASHwmspanelvodudprtsppaywallsubtitlessrtsldpDispersaRTSPyoutubelivelivestreamingmp4WMSAuthMPEG-DASHpay-per-viewgeodashWMSPaneledgestreamervideoabrWindowsencryptionhttpsUDPuser agentwhite labelconfigsmilFFMPEGmulticastsslMPEG-TSaudioCORSre-streamingmpeg-dashchunksraspberry piandroidbandwidthadvertizercorsvlcS3DRMrules.confplaylistadvertisingipv6MPEGTSFastSpringRAMthumbnailFMLEVATcrossdomainupdateRecordingmpegtsSMILaespushakamaiwowzaserverserrorm3u8TranscodeSSLbalancechromecastplaylist_dvrWowzaconfigurationIDreportingbugperformancedomainnimblestreamerLarixIPrepublishingmpeg-tspublish controlcodecmobileloopHttpsVidillionawsAWSdownloadoriginSLDPcloudfrontCDNraspianrouteswms panelchunknimble webcam html5UIbitrateRegistration Issuedirect link32-bit Windowstwitchcache_controlitworkmelive abr support mpeg-dashwmspanelapiresumertmp abrbeirutWWDCdubaideep statsCentOS v6.4hls to multicast udplogcloudIIS Smooth StreamingmediaHot-linking protectionHTTPSAbrHDSvaddioalertsjwplayer websitebaselinewhmcsnginx rtmp nimbleAV BridgeAuthentication in HLSVaddioPI3 Ubuntupriceview timelimitOld logsscreencastinterfacesattaching domainsDVRRecordingloadbalancingmod_rewritemetadataprofileID3 tagsgbpsAxismessageWMSCONFIG_HOMEwmsauthsignhighhds streamrestreamcostlocalcisco.net hotlinkhls restreaminggentoo install server nimbleVLCPublic Iptranscoding using NvidiaPaywall AuthniblerofflinedocumentationNimble streamer upgradedecodertransocding republishingVideo PlayerTrancoderconcurrent-connectionsfileAliaslost trafficServer-sidetasks-controllebanonlocationmanifeststoppedNimble Streamer versionipMP4 not playedspacemainicecast urlruleseekingconnectivitydvr streamunique visitorhot linkingchangeamfpay per viewplayoutPlayReadyamazon web servicelimuxdvr stream twicedvr_archivesmpeg dashhot-linkAXVVGobsTCOopensslSteam stopped workingonblocknvencHLS vod7Expression EncoderanalyticspaywalapplicationbrandingtrialMP4microsoft streamerrorsrocksoftlog traffic statsHLS PlayerDASH Playerdebianprogressive downloadABR DASHFFmpegmultiple originsnimblesessionidlive video on demandbandwithscreen freezecan't registerserverheaderprivate networkLarge DVR fileslog nimble analysertmp playbackvideojsno WMSPanellive videosourceinterleavingadaptiveAV1 codecmac osx installSnapshotsNGINX-RTMPJWPLAYERwotermarkPullvimeohelp errorvideo stopload balance4Kcrossdomain more then 1 domainattachmentvsomcdnlive streamvod no soundconcurrent connectionAWS 3buttmpeg2tsDelayServer-Side-Task-ControlWidevinedisk migrationFairplayfallbackamazonControl APILive streamingTranscoderscreen capturestereo to monoRemote StorageWowza Agentsecuritynot foundCPU Loaddrmpullresourceaes encryptionAS3subscriptionABR HLS Bitrateslive pull settingsWMSPanel settingstwitch larix broadcaster androidDVRSettingsinstall players setup ready to goDelete recordsAppleicecastrtmp for YouTubeudp streamingoutratevideo loopstarttime duration seekpointrebootdvr streamsnimble streamer vod hls transmuxingloggingmonitorautomationnimble streamer web server php script pageNimble Streamer APIlivestreamlearnernimble.confrtmp republishing transcodeIIS Media Servicsapi accessDeep statsNimble CapacityABR DVR probleminsert logoweb playerLive SwitcherAVCaptureMovieFileOutputblock downloadcontent-dispositionnot to stealLive BroadcastPost processingadd_chunk failedfake extensionMPEG DASHUbuntu artful 17.10Transcoder MPEG DASHNimble Serverstatus:errorFFMPEG;RTMP;I/O errortranscodingRTMP republishHotlinking ProtectionStreaming routePIDbroadcasterOSXlarix broadcasterMPEG-Dashpaymentstatspremium featureThumbnailsserver incorrect timereloadLiveLIVEHow to do live stream with multiple audio trackdemandProgressivenimble aliasesrmtpno internetprogressiveHLS Streamingthumbnail dvr-thumbnailLoad-Balancingnimble streamer mpeg-ts multiple inputswmsAuthSignsoundHLS Meta Tag editing.streamsSecureraspberryavoid refreshreportsdelaympeg4transcoder nimbleAndroiduser_agentdvr on wmspanelVideo cant be playedS3 AWSBroadcastcredentialslivestream bitratevbv-maxratetranscodeRepublishingubuntu 18Teradek DecoderVR-360Failoverpublish streamStream Delaytraffichd25Larix BroadcasterAArch64PacketizingABR bitratesbuildcontentRTMP Republishdomain lockoutputUsers limitcloudflareVOD HLS streaming on public IPincoming streamno soundInvalid frame headerHTML5 playerGopDVR Setting limitssaibufferNimbleStreamerav1 codecrtsp push androidartifactscache expiryvideo streamingQuickTime.movalias routestoragedistributionspeedup my videoiOSqataritworkscdnvideo.jsfastspringmp2 audiodata slicesaliasplayer sldptransocderlivestreaminRAM Loaddiskstorage space available3.6.1-1webhookdvr to livedissapointmentpay-per-minuteSO_RCVBUFbuffering videoadvp9latencynimble dvrdurationBandwidthgpuadjustsoftware versionPaywallvideo and audio not matchmanage_dvrhow-toError when installingrulesDVRStreamsaws amazonFallbackhelprestartIOSUDP MulticastMax connectionMPEG2 Videologo in streamcompatibility protocolsa recordwirecasthttp serverSSL requestserver ip21analisyssctenimble on cloudprerollsha265VP9dynamic linksTLSV 1.2 CertificateCSSactionscript 3server ssl errorViewer StatsNDICross DomainSRT protocolabr fallbackNimble connectionsmd5pricingissuecpugoogle cloud storagePORTDVR SettinganalyseStreamID

This website or its third-party tools use cookies, which are necessary to its functioning and required to achieve the purposes illustrated in the Privacy Policy. If you want to know more or withdraw your consent to all or some of the cookies, please refer to the Privacy Policy.
By closing this banner, scrolling this page, clicking a link or continuing to browse otherwise, you agree to the use of cookies.