Wowza Stream Engine 4.7.8 enable SSL for Wowza Manager with let's encrypt https://certbot.eff.org/

[alexw216]

The following steps shows the procedures to enable SSL for Wowza Manager with let's encrypt https://certbot.eff.org/

To view the content, you need to Sign In or Register.

 

[djgriff]

Great bit of information, thanks for sharing this informative tutorial, hopefully it will help others along the way

 

[Ahkan]

thank you for this sharing

 

[eddyjhoel]

thank you for this sharing

 

[quanghuy1288]

Thank bro for sharing

 

[YACOUTI]

Thank bro for sharing

 

[akr4m]

Thanks bro, for this

 

[jhon73us]

Thank you for your share

 

[Egorka]

help please.
..................
java -jar wowza-letsencrypt-converter-0.2.jar -v /usr/local/WowzaStreamingEngine/conf/ /etc/letsencrypt/live/
Converting certificates: /etc/letsencrypt/live/ => /usr/local/WowzaStreamingEngine/conf/
Reading simple.site
Read error in simple.site:java.security.spec.InvalidKeySpecException: java.security.InvalidKeyException: Invalid RSA private key
.............
"simple.site" this is an example

 

[alexw216]

help please.
..................
java -jar wowza-letsencrypt-converter-0.2.jar -v /usr/local/WowzaStreamingEngine/conf/ /etc/letsencrypt/live/
Converting certificates: /etc/letsencrypt/live/ => /usr/local/WowzaStreamingEngine/conf/
Reading simple.site
Read error in simple.site:java.security.spec.InvalidKeySpecException: java.security.InvalidKeyException: Invalid RSA private key
.............
"simple.site" this is an example

It complains your private key is invalid.
Try to check your private key.
openssl rsa -check -in privkey.pem
You should see the following, if not, your private key may be corrupted or needs to be converted to RSA format.
RSA key ok
writing RSA key


openssl rsa -in privkey.pem -text -noout | grep "Private-Key"
Private-Key: (2048 bit, 2 primes)


If you see your private key is encry
pted like this

-----BEGIN ENCRYPTED PRIVATE KEY-----

you need to decrypt it with the following command where test.pem is the decrypted version :
openssl rsa -in privkey.pem -out test.pem

In any way, just look at why your private key is not valid or compatible.

 

[Egorka]

I tried it. When I type a command: openssl rsa -check -in privkey.pem
Can't open privkey.pem for reading, No such file or directory
140616424346048:error:02001002:system library:fopen:No such file or directory:../crypto/bio/bss_file.c:72:fopen('privkey.pem','r')
140616424346048:error:2006D080:BIO routines:BIO_new_file:no such file:../crypto/bio/bss_file.c:79:
unable to load Private Key

When I type a command: certbot certificates
Saving debug log to /var/log/letsencrypt/letsencrypt.log

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Found the following certs:
Certificate Name: simple.site
Serial Number: 3b460bc6d5751b73a1dd97c01eea--------
Key Type: ECDSA
Domains: simple.site
Expiry Date: 2023-05-30 04:46:04+00:00 (VALID: 88 days)
Certificate Path: /etc/letsencrypt/live/simple.site/fullchain.pem
Private Key Path: /etc/letsencrypt/live/simple.site/privkey.pem
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

I will add: Before that, I updated certbot once every three months without any problems.