Wowza Secure HTTPS Streaming

In by Matthew Lear

Table of Contents

Requirements

  • MediaCP 2.2.0.5 or newer
  • IP Address with port 443 available
  • Valid Wowza Streaming Engine license

Install Free Stream Lock SSL Certificate

Request and download a StreamLock certificate

  1. Login to your Wowza Streaming Engine ‘My Account‘ page.
  2. Click on the ‘StreamLock‘ tab
  3. Fill in your License KeyIP Address and enter any password to secure your certificate.
  4. Click ‘Apply for SSL Certificate‘.
  5. Download your new certificate
  6. Upload the file to your server in the following path:
    /usr/local/WowzaStreamingEngine/conf/

Configure Wowza Streaming Engine to use your StreamLock certificate

  1. Login to Wowza Streaming Engine Manager at http://your-domain:8088/engine-manager/
  2. Click on the Server tab then select Virtual Host Setup.

  3. Click on the Edit button under the Virtual Host Setup Basic tab.
  4. Scroll down and select Add Host Port

  5. Fill out the form as illustrated below, replacing the Keystore path with the appropriate file name and Keystore Password with your previously configured password then press Add.
    Keystore path should be ${com.wowza.wms.context.VHostConfigHome}/conf/[your-id].streamlock.net.jks

  6. Click the Save button under Host Ports
  7. Restart Wowza Streaming Engine as prompted at the top of the screen

Configure MediaCP to use your new secure StreamLock address

  1. Login to the MediaCP as an administrator.
  2. Navigate to System Config from the side menu
  3. Select the Plugins tab
  4. Enter your Stream Lock ID in the provided field
  5. Scroll to the bottom of the page and Save Configuration

Test Stream Lock

  1. Navigate to Media Services and select or create a Wowza Ondemand Service
  2. Open the Media Player tab and confirm the embed code includes your stream lock address
  3. Press play on them media player to start your ondemand stream.

Install SSL certificate from a certificate authority

  1. Request and download your SSL certificate
  2. Configure Wowza Streaming Engine to use your SSL certificate
  3. Configure MediaCP to use port 443 instead of 1935 for Wowza Streaming