Using SSL

To use SSL in your applications, you need to configure both your applications and Flash Media Server settings. The following list is a checklist of the steps you need to take to use SSL.

Use RTMPS to connect to the server. RTMPS adheres to SSL standards for secure network connections. It offers basic connectivity through a TCP socket on a secure port. Data passed over a secure connection is encrypted to avoid eavesdropping by unauthorized third parties. Because secure connections require extra processing power and might affect the server's performance, use RTMPS only for applications that require a higher level of security or that handle sensitive or critical data.

To use RTMPS, see the NetConnection.connect entries in the Client-Side ActionScript Language Reference for Flash Media Server 2 and Server-Side ActionScript Language Reference. If, in your NetConnection.connect call, you don't specify a port number, Flash Player connects on the default secure port, port 443. Be sure that either port 443 or another designated port number is specified as secure using the secure attribute in the <HostPort> tag of the Adaptor.xml file.

TIP

You cannot use RTMPS to establish a connection from one server running Flash Media Server to another if the server being connected to is behind a firewall that is rejecting RTMP data. A workaround is to cluster all servers running Flash Media Server behind the same firewall.

Configure the adaptor to listen on a secure port. If you need a secure connection, configure the adaptor for the application to listen on a secure port by setting the secure attribute to true in the HostPort tag in the Adaptor.xml file. Be aware that you can assign only one virtual host to an adaptor that listens on a secure port, and you must specify the IP address of that virtual host in Adaptor.xml.

TIP

If a secure connection is not required, you can use assign more than one virtual host to a single adaptor; that is, you can have multiple virtual hosts on a single IP address.

Configure adaptors globally or individually. The SSL section in the Server.xml file contains required information for using SSL and configures all adaptors to use the same settings. However, you might want to use a different certificate for each virtual host. For example, if you are an Internet service provider, you might want different websites that you host to send different digital certificate information to clients. In this case, you would configure your adaptors individually to override the settings in the Server.xml file.

To use different certificates for each adaptor, copy the SSL section in the Server.xml file to the Adaptor.xml file and enter the new values. You don't need to copy the SSLRandomSeek tag, as this tag is a server-level setting that cannot be overridden in Adaptor.xml.

Send me an e-mail when comments are added to this page | Comment Report

Current page: http://livedocs.adobe.com/fms/2/docs/00000517.html