Jump to content
  • 0

[AMS 2.2 EE] Let's Encrypt Certificate Problem


Daniel Biagi
 Share

Question

Hello guys, how are you?


Just deployed AMS 2.2 from AWS Marketplace, did the setup (disabled IP filter) and although the dashboard is working securely, I can't call any REST endpoints because of a certificate error.

My application can't connect to it and even Postman returns me an error:

unable to verify the first certificate

Checking the generated certificate also don't appear to be right:
EmbeddedImages-82/0.jpg

Can you help me, please?


Thanks,

Daniel.
Link to comment
Share on other sites

  • Answers 11
  • Created
  • Last Reply

Top Posters For This Question

11 answers to this question

Recommended Posts

  • 0
Yes, I can login and operate everything normally from the management panel but all REST API invocations fail because of the certificate issue.
I can disable SSL verification but then there would be no reason to use HTTPS at all and could lead to future problems in production environment.


Daniel Biagi


Link to comment
Share on other sites

  • 0

There is a simple solution for now. But we are working on a better one. For now you can use the ready one.

Copy chain.pem to conf. 
sudo cp /etc/letsencrypt/live/your_domain/chain.pem /usr/local/antmedia/conf

Add this line
http.ssl_certificate_chain_file=conf/chain.pem

after

http.ssl_certificate_file=conf/fullchain.pem

Add this line
<entry key="SSLCertificateChainFile" value="${http.ssl_certificate_chain_file}" />
after

<entry key="SSLCertificateFile" value="${http.ssl_certificate_file}" /> 
Link to comment
Share on other sites

  • 0
Copy chain.pem to conf. 
sudo cp /etc/letsencrypt/live/your_domain/chain.pem /usr/local/antmedia/conf

Add this line
http.ssl_certificate_chain_file=conf/chain.pem
after
http.ssl_certificate_file=conf/fullchain.pem
in
/usr/local/antmedia/conf/red5.properties file.
Add this line
<entry key="SSLCertificateChainFile" value="${http.ssl_certificate_chain_file}" />
after
<entry key="SSLCertificateFile" value="${http.ssl_certificate_file}" /> 
in
/usr/local/antmedia/conf/jee-container.xml

Link to comment
Share on other sites

  • 0
Hi Orana,
​The process I told in my last main will be done automatically in the next release. But you need to do that manually for the current version. 

Give star to Ant Media Server on Github and get a chance to win an AMS Enterprise License.

Regards,
Burak Kekec
On Thu, 21 Jan at 9:54 PM , Orana Wildlife Park <oranawildlifepark1@gmail.com> wrote:
burak has this issue been fixed yet?

--
You received this message because you are subscribed to the Google Groups "Ant Media Server" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ant-media-server+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ant-media-server/3903eeb7-efed-4d9a-a83b-a23970fe0857n%40googlegroups.com.
38191:1264838
Link to comment
Share on other sites

  • 0
Hi Orana,
We are planning to release it in two weeks.
Give star to Ant Media Server on Github and get a chance to win an AMS Enterprise License.

Regards,
Burak Kekec
On Sat, 23 Jan at 4:42 AM , Orana Wildlife Park <oranawildlifepark1@gmail.com> wrote:
I tried that and for whatever reason it didn't work so rolled back to 2.1. Do you have an ETA on the next release? Thanks

On Saturday, January 23, 2021 at 10:45:48 AM UTC+13 support wrote:
Hi Orana,
​The process I told in my last main will be done automatically in the next release. But you need to do that manually for the current version. 

Give star to Ant Media Server on Github and get a chance to win an AMS Enterprise License.

Regards,
Burak Kekec
On Thu, 21 Jan at 9:54 PM

burak has this issue been fixed yet?


--

You received this message because you are subscribed to the Google Groups "Ant Media Server" group.

To unsubscribe from this group and stop receiving emails from it, send an email to ant-media-serv...@googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "Ant Media Server" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ant-media-server+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ant-media-server/6871d316-6fdd-4899-9e9b-1ddbb424d55bn%40googlegroups.com.
38191:1264838
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Answer this question...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...