39
FLASH
MEDIA
SERVER
4.5
CONFIGURATION
AND
ADMINISTRATION
Configuring the server
Last updated 11/28/2012
var nc:NetConnection = new NetConnection();
nc.proxyType = "best";
nc.connect("rtmps://fmsexamples.adobe.com/vod/instance1");
If you configure any port other than 443 as secure, for example, -1935, the client must specify the port in the URI, for
example, “rtmps://host:1935/app”.
Note:
All server editions support a version of RTMP called RTMPE, which is an 128-bit encrypted protocol. RTMPE is
more lightweight than SSL and is enabled by default. For more information, see the
NetConnection.connect()
entry
in the ActionScript
®
3.0 Language Reference or in the ActionScript 2.0 Language Reference.
Certificates
You can get an SSL certificate from a certificate authority or create a certificate yourself. If a certificate is signed by an
intermediate Certificate Authority (CA), it must include the intermediate certificate as part of the certificate that the
server returns to the client. Your certificate file (if signed by an intermediate CA) should look something like the
following:
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
The first
BEGIN CERTIFICATE/END CERTIFICATE
pair is your certificate. The next
BEGIN CERTIFICATE/END
CERTIFICATE
pair is the intermediate CA that signed your certificate. You can add additional sections as needed.
Secure incoming connections
Specify the location of the SSL certificate and the certificate’s private key, and configure the adaptor to listen on a
secure port.
1
Open the Adaptor.xml file for the adaptor you want to configure and locate the following code:
<Adaptor>
...
<SSL>
<SSLServerCtx>
<SSLCertificateFile></SSLCertificateFile>
<SSLCertificateKeyFile type="PEM"></SSLCertificateKeyFile>
<SSLPassPhrase></SSLPassPhrase>
<SSLCipherSuite>ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH</SSLCipherSuite>
<SSLSessionTimeout>5</SSLSessionTimeout>
</SSLServerCtx>
</SSL>
...
</Adaptor>
2
Edit the following elements.