Kaltura CE - RTMP live stream over HTTPS?

Is it possible to RTMP live stream over nginx SSL (port 8443)?

My SSL Kaltura installation works for VOD.The browser inspector shows that videos are received from https:/my.domain.za:8443

Live stream, however, only works with http - e.g. http:/my.domain.za:8080/hlsme/TestStream.m3u8

Due to mixed content this means the videos do not play when embedded in https sites, even the KMC Preview cannot display the videos:

Mixed Content: The page at ‘https:/my.domain.za/index.php/extwidget/preview/partner_id/105/uiconf_id/23448182/entry_id/0_f2ujuyb/embed/auto?&flashvars[streamerType]=auto’ was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint ‘http:/my.domain.za:8080/hlsme/TestStream’. This request has been blocked; the content must be served over HTTPS.

The 8080 live stream does play when embedded in non-SSL websites - however the player controls are blocked on Chrome and Firefox (but not on MS Edge):

Access to font at ‘http:/my.domain.za/html5/html5lib/v2.60//skins/kdark/fonts/icomoon.woff?2017-08-10T09:30:00Z’ from origin ‘http://xxx.xxx.xxx.xxx’ has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.
teststream.html:93 GET http:/my.domain.za/html5/html5lib/v2.60//skins/kdark/fonts/icomoon.woff?2017-08-10T09:30:00Z net::ERR_FAILED
Access to font at ‘http:/my.domain.za/html5/html5lib/v2.60//skins/kdark/fonts/icomoon.ttf?2017-08-10T09:30:00Z’ from origin ‘http://xxx.xxx.xxx.xxx’ has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.
teststream.html:1 GET http:/my.domain.za/html5/html5lib/v2.60//skins/kdark/fonts/icomoon.ttf?2017-08-10T09:30:00Z net::ERR_FAILED

Ideally I would like live streaming to work with https:/my.domain.za:8443/hlsme/TestStream.m3u8

However when I do so, the player does not receive the stream - it displays “Currently not broadcasting video will play once broadcasting starts” - this while both vMix and OBS log successful streaming and manifest and segments are created in /var/tmp/hlsme/ …

Is it not possible to live stream on CE using RTMP over HTTPS? Have I missed something obvious?

I would appreciate any advice you may have

Thank you

Heli


Troubleshooting

Ubuntu 16.04, Kaltura 13 (Mercury)

I have worked through this very helpful SSL configuration post


The difference I spotted was that I have the 443 port included for kalapi in nginx.conf:

http {
upstream kalapi {
server my.domain.za:443;
}

When I removed the port and changed it to 8443 - VODs were also blocked.

There has been one consistent and scary looking error on the system since install in 2017:

PHP Fatal error: Uncaught KalturaClientException: Unknown SSL protocol error in connection to my.domain.za:443 in /opt/kaltura/web/content/clientlibs/php5/KalturaClientBase.php:362

Analytics are also not working - although they did briefly on first install.

ii kaltura-base 13.1.0-2+b1 all Kaltura Open Source Video Platform
ii kaltura-batch 13.1.0-1 all Kaltura Open Source Video Platform - batch server
ii kaltura-clipapp 1.3-1+b2 all Kaltura Video Presentations Manager
ii kaltura-db 12.15.0-1+b4 all Kaltura Open Source Video Platform - batch server
ii kaltura-dwh 12.14.0-1+b1 amd64 Kaltura Open Source Video Platform - Analytics
ii kaltura-ffmpeg 3.2-1+b3 amd64
ii kaltura-ffmpeg-aux 2.1.3-1 amd64
ii kaltura-front 13.1.0-1 all Kaltura Open Source Video Platform - frontend server
ii kaltura-html5-studio 2.1.0-1 all Kaltura Open Source Video Platform - frontend server
ii kaltura-html5lib 2.60-1 all Kaltura Open Source Video Platform - HTML5 player
ii kaltura-kclip 1.1.2.1-1 all Kaltura Video Presentations Manager
ii kaltura-kcw 2.2.4-1+b4 all Kalture Contribution Wizard
ii kaltura-kdp 2.7.0-1+b1 all Kaltura Dynamic Player
ii kaltura-kdp3 3.9.9-1+b4 amd64 Kaltura Dynamic Player
ii kaltura-kdp3wrapper 37-1+b3 all KDP3 Wrapper
ii kaltura-kdpwrapper 11-1+b2 all KDP Wrapper
ii kaltura-kmc 5.42.3-1+b1 all Kaltura Management Console
ii kaltura-krecord 1.7-1+b1 all Kaltura kRecord - used for recording from web cam
ii kaltura-kupload 1.2.16-1+b2 all Kaltura kupload widget
ii kaltura-nginx 1.12-4 amd64 Nginx web/proxy server - for Kaltura
ii kaltura-pentaho 4.2.1+b2 amd64 Pentaho Open Source Data Integration Community Edition (CE).
ii kaltura-postinst 1.0.33-3+b1 all Kaltura Open Source Video Platform
ii kaltura-sphinx 2.2.1-4+b1 amd64 Sphinx full-text search server - for Kaltura
ii kaltura-widgets 10.9.0-1+b4 all Kaltura Open Source Video Platform - widgets meta package

Hi @guyk,

See my note here: https://github.com/arut/nginx-rtmp-module/issues/457#issuecomment-250783255

Cheers,

1 Like

Thank you Jess - I’ll work through this now - so prompt! I am blown away :star_struck: