[AMS 2.2 EE] Let's Encrypt Certificate Problem

[Daniel Biagi]

Hello guys, how are you?

Just deployed AMS 2.2 from AWS Marketplace, did the setup (disabled IP filter) and although the dashboard is working securely, I can't call any REST endpoints because of a certificate error.

My application can't connect to it and even Postman returns me an error:

unable to verify the first certificate

Checking the generated certificate also don't appear to be right:

EmbeddedImages-82/0.jpg

Can you help me, please?

Thanks,

Daniel.

[Burak]

Can you login to management panel?

 

 

[Daniel Biagi]

Yes, I can login and operate everything normally from the management panel but all REST API invocations fail because of the certificate issue.

I can disable SSL verification but then there would be no reason to use HTTPS at all and could lead to future problems in production environment.

Daniel Biagi

[Jake Withecombe]

We have exactly the same issue using the community edition: https://www.sslshopper.com/ssl-checker.html#hostname=https://ant.onvp.io:5443

 

 

[Jake Withecombe]

https://github.com/ant-media/Ant-Media-Server/issues/2675

 

 

[Burak]

Hi Friends,

I have tried and confirmed the issue also brought the the Jake's GitHub issue to the top of the list.

 

[Burak]

There is a simple solution for now. But we are working on a better one. For now you can use the ready one.

Copy chain.pem to conf. 

sudo cp /etc/letsencrypt/live/your_domain/chain.pem /usr/local/antmedia/conf

Add this line

http.ssl_certificate_chain_file=conf/chain.pem

after

http.ssl_certificate_file=conf/fullchain.pem

​

Add this line

<entry key="SSLCertificateChainFile" value="${http.ssl_certificate_chain_file}" />

after

<entry key="SSLCertificateFile" value="${http.ssl_certificate_file}" /> 

[Burak]

Copy chain.pem to conf. 

sudo cp /etc/letsencrypt/live/your_domain/chain.pem /usr/local/antmedia/conf

Add this line

http.ssl_certificate_chain_file=conf/chain.pem
after
http.ssl_certificate_file=conf/fullchain.pem

in

/usr/local/antmedia/conf/red5.properties file.

​

Add this line

<entry key="SSLCertificateChainFile" value="${http.ssl_certificate_chain_file}" />

after

<entry key="SSLCertificateFile" value="${http.ssl_certificate_file}" /> 

in

/usr/local/antmedia/conf/jee-container.xml

[Orana Wildlife Park]

burak has this issue been fixed yet?

 

 

[Ant Media Support]

Hi Orana,
​The process I told in my last main will be done automatically in the next release. But you need to do that manually for the current version. 

Give star to Ant Media Server on Github and get a chance to win an AMS Enterprise License.

Regards,

Burak Kekec

On Thu, 21 Jan at 9:54 PM , Orana Wildlife Park <oranawildlifepark1@gmail.com> wrote:

burak has this issue been fixed yet?

--
You received this message because you are subscribed to the Google Groups "Ant Media Server" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ant-media-server+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ant-media-server/3903eeb7-efed-4d9a-a83b-a23970fe0857n%40googlegroups.com.

38191:1264838

[Orana Wildlife Park]

I tried that and for whatever reason it didn't work so rolled back to 2.1. Do you have an ETA on the next release? Thanks

 

 

[Ant Media Support]

Hi Orana,
We are planning to release it in two weeks.

Give star to Ant Media Server on Github and get a chance to win an AMS Enterprise License.

Regards,

Burak Kekec

On Sat, 23 Jan at 4:42 AM , Orana Wildlife Park <oranawildlifepark1@gmail.com> wrote:

I tried that and for whatever reason it didn't work so rolled back to 2.1. Do you have an ETA on the next release? Thanks

On Saturday, January 23, 2021 at 10:45:48 AM UTC+13 support wrote:

Hi Orana,
​The process I told in my last main will be done automatically in the next release. But you need to do that manually for the current version. 

Give star to Ant Media Server on Github and get a chance to win an AMS Enterprise License.

Regards,

Burak Kekec

On Thu, 21 Jan at 9:54 PM

burak has this issue been fixed yet?

--

You received this message because you are subscribed to the Google Groups "Ant Media Server" group.

To unsubscribe from this group and stop receiving emails from it, send an email to ant-media-serv...@googlegroups.com.

To view this discussion on the web visit

https://groups.google.com/d/msgid/ant-media-server/3903eeb7-efed-4d9a-a83b-a23970fe0857n%40googlegroups.com

.

--
You received this message because you are subscribed to the Google Groups "Ant Media Server" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ant-media-server+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ant-media-server/6871d316-6fdd-4899-9e9b-1ddbb424d55bn%40googlegroups.com.

38191:1264838