0 Replies Latest reply on Oct 15, 2015 1:01 AM by Manel.pi.ferrer

    Problem with SSL Certificate in AMS

    Manel.pi.ferrer Level 1

      Hello,

      I have an AMS installed in my server with an SSL certificate configured just like follows:

           My C:\Program Files\Adobe\Adobe Media Server 5\conf\ams.ini file has

                 ADAPTOR.HOSTPORT = :1935,-443,80

           My C:\Program Files\Adobe\Adobe Media Server 5\conf\_defaultRoot_\Adaptor.xml file has

                <SSLCertificateFile>C:\Program Files\Adobe\Adobe Media Server 5\conf\_defaultRoot_\cert.pem</SSLCertificateFile>

                <SSLCertificateKeyFile type="PEM">C:\Program Files\Adobe\Adobe Media Server 5\conf\_defaultRoot_\key.pem</SSLCertificateKeyFile>

                <SSLPassPhrase>MyPassPhraseWhenIConvertMyPFXFileToPEM</SSLPassPhrase>

           My cert.pem looks like:

                Bag Attributes

                    localKeyID: 01 00 00 00

                    1.3.6.1.4.1.311.17.3.92: 00 08 00 00

                    1.3.6.1.4.1.311.17.3.89: 52 00 53 00 41 00 2F 00 53 00 48 00 41 00 31 00 00 00

                    1.3.6.1.4.1.311.17.3.20: C4 92 4E 40 BC 0D 2D 96 D1 09 53 3C 31 75 37 52 7F E5 85 5C

                    friendlyName: *.sureact.com

                    1.3.6.1.4.1.311.17.3.75: 46 00 43 00 44 00 32 00 43 00 43 00 33 00 34 00 35 00 31 00 45 00 46 00 35 00 46 00 33 00 44 00 42 00 38 00 44 00 34 00 42 00 37 00 44 00 44 00 35 00 31 00 31 00 42 00 32 00 46 00 37 00 37 00 5F 00 00 00

                    1.3.6.1.4.1.311.17.3.71: 43 00 41 00 44 00 41 00 43 00 2D 00 57 00 53 00 30 00 30 00 32 00 56 00 2E 00 63 00 6D 00 73 00 2E 00 65 00 73 00 2E 00 63 00 6F 00 6C 00 74 00 2D 00 69 00 73 00 63 00 2E 00 6C 00 6F 00 63 00 61 00 6C 00 00 00

                subject=/C=ES/ST=Barcelona/L=Barcelona/O=C\xC3\xA1lculos Digitales, SRL/CN=*.sureact.com

                issuer=/C=US/O=GeoTrust Inc./CN=GeoTrust SSL CA - G2

                -----BEGIN CERTIFICATE-----

                     XXXXXXXXXXXXXXXXX

                -----END CERTIFICATE-----

           My key.pem looks like:

                Bag Attributes

                    Microsoft Local Key set: <No Values>

                    localKeyID: 01 00 00 00

                    friendlyName: le-a7d853f3-f3ca-43aa-83dc-10e9bdf4932b

                    Microsoft CSP Name: Microsoft RSA SChannel Cryptographic Provider

                Key Attributes

                    X509v3 Key Usage: 10

                -----BEGIN ENCRYPTED PRIVATE KEY-----

                     XXXXXXXXXXXXXXXXX

                -----END ENCRYPTED PRIVATE KEY-----

      My certificate is valid and it's now working on my webpage.

      And If I try to connect to the server usinf a SWF file I get the error

                NetConnection.Connect.CertificateExpired

      Can someone help me to fix this problem? I don't undertand why I obtain this error message if my certificate expires on 14/02/2016.


      Best regards