SRS how enable HTTPS for HLS stream?

Question

I use Ubuntu 16 server with apache and let's encrypt certificates. I have compiled SRS today directly from Git, so I have the latest version. I'm trying to enable HTTPS on all site, I have a player which load HSL stream passed by RTMP. How can I enable SSL? Now I receive the connection closed error. I've tried to move the path of HLS stream to one folder covered by certificate with no results.

This is the link for SRS: https://github.com/ossrs/srs

If someone needs more detail I can reply.

score 0 · Answer 1 · edited Apr 24 '22 at 04:34

If you use NGINX or CaddyServer, you could set HTTPS proxy for SRS, please read #2881, it works like this:

OBS --> SRS --HTTP--> NGINX --HTTPS--> Viewers

Note: It's a HTTPS reverse proxy, if you need a HLS cluster, please read this.

However, ossrs/srs has support for https but they don't enable it by default. So do this to enable https

I install ossrs/srs by using docker, default config uses port 8088 for https so remember to expose that port for docker

 docker run -d -p 1935:1935 -p 1985:1985 -p 8080:8080 -p 8088:8088 \
     ossrs/srs:v4 ./objs/srs -c conf/srs.conf

Change http_server part in config file '/usr/local/srs/conf/srs.conf'

Change from

 http_server {
     enabled         on;
     listen          8080;
     dir             ./objs/nginx/html;
 }

To

 http_server {
     enabled         on;
     listen          8080;
     dir             ./objs/nginx/html;
     https {
         # Whether enable HTTPS Streaming.
         # default: off
         enabled on;
         # The listen endpoint for HTTPS Streaming.
         # default: 8088
         listen 8088;
         # The SSL private key file, generated by:
         #       openssl genrsa -out server.key 2048
         # default: ./conf/server.key
         key ./conf/server.key;
         # The SSL public cert file, generated by:
         #       openssl req -new -x509 -key server.key -out server.crt -days 3650 -subj "/C=CN/ST=Beijing/L=Beijing/O=Me/OU=Me/CN=ossrs.net"
         # default: ./conf/server.crt
         cert ./conf/server.crt;
     }
 }

Remember to upload your server.key and server.crt to conf folder (you can generated self signed certificate by comment guidelines above)
Restart docker to complete

SRS how enable HTTPS for HLS stream?

1 Answers1