Another Good From Red5 - Built-in Support For RTMPS

I remember when many users were looking for a solution to secure the RTMP stream, then i worked with Stunnel(Secure Your Red5 Applications With Stunnel) to implement the RTMPS functionality which FMS provides. That time i was able to achieve this, but this was kind of hack.
Today morning, i read the post of Paul Gregorie that Red5 has come up with a real RTMPS solution.
Below in this post, i am following him.


RTMPS is RTMPT over SSL. Here are the steps to setup Red5 to support RTMPS-

Create a self-signed certificate

This process is pretty much known to everyone who worked with signed applet kind of stuffs. Here it is-

keytool -genkey -alias red5 -keyalg RSA -keysize 512 -validity 3650 \
-keystore keystore -keypass password -storepass password \
-dname "CN=localhost,OU=Red5,O=Red5,L=Henderson,ST=NV,C=US"

The above command is having the options that can be modified according to your requirement like DName fields: Location (L), State (ST), and Country (C).

The above command generate a file called "keystore". We will use it later.

Get Red5

RTMPS implementation is not the part of Red5 0.7.0, so in order to use RTMPS, you need to take the code from Red5 SVN repository from revision 2819 onwards.

Configuration

Now you have Red5 setup in your machine, copy the "keystore" file we created earlier step into conf directory (overwrite the current keystore file in the directory if prompted). The configuration file containing the parameter for RTMPS is conf/red5-core.xml and you will need to update the RTMPS section if you changed the keystore password. The other configuration file is red5.properties, it contains the port assignments for the supported protocols. Make sure that you have your ports configured correctly.

According to Adobe, the default port for RTMPS is 443, normally reserved for HTTPS. If you change this port to something other than 443 you will need to update your NetConnection urls with the correct port.

For advance options on SSL configuration, this page will help.

Test

Start the server and test your applications. Go to http://localhost:5080/demos/oflaDemo.swf and change the rtmp url to rtmps://localhost/oflaDemo.

You can also enable debugging option, here it is how-

Debugging

To see what is going on with SSL at a really low level you can enable this option in your startup:

-Djavax.net.debug=ssl It will cause additional information to be displayed on the console.

Red5 is getting hot and hot everyday with new features. Waiting to hear support of many new features in near future. Great work Red5 Team.

See Also:
Secure Your Red5 Applications With Stunnel

Reference:-
RTMPS in Red5