Serving Verto HTML from a different server
I’ve gotten fairly comfortable with the setup offered in the Confluence wiki for the new Verto video features. I’m curious to know if I can expect any gotchas if I serve the Verto web stuff from a different server than the FreeSWITCH instance is running on.
From what I can tell, as long as I make sure to use the same server certs on both servers, it *should* work.
Is there anything I’m not taking into consideration? Any better way to approach the problem besides certificate sharing across servers? Thanks, Chad
Chad, I was able to get this to work under windows environment. I set up a secure server www.xxxx.com to serve the html and then pointed fs.xxxx.com at my FreeSwitch server. My certificates were "domain validated" so I had two certificates, one for each domain/server . You could probably get a wildcard certificate and use the same certificate on both servers. The main reason I used "domain validated" was I was able to purchase them for $5 a year each. Jack On 7/18/2015 7:33 PM, Chad Phillips wrote:
I’ve gotten fairly comfortable with the setup offered in the Confluence wiki for the new Verto video features.
I’m curious to know if I can expect any gotchas if I serve the Verto web stuff from a different server than the FreeSWITCH instance is running on. From what I can tell, as long as I make sure to use the same server certs on both servers, it *should* work.
Is there anything I’m not taking into consideration? Any better way to approach the problem besides certificate sharing across servers?
Thanks,
Chad
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
No virus found in this message. Checked by AVG - www.avg.com <http://www.avg.com> Version: 2014.0.4821 / Virus Database: 4365/10262 - Release Date: 07/18/15
The only requirement is that the cert on FS is trusted. The html can come from anywhere. If its not a trusted cert the wss connection will silently fail. This is because there is no dialog asking you to trust the cert on wss connections so they just PUNT and don't even log an error. I opened a bug a year ago mentioning ot and they said thats working as designed. So the only way to make untrusted certs work is to make an https request to the wss port one time and agree to manually trust it. Therefore, serving that same cert for the html serves the same perpose of manually trusting the cert before making the wss connection. With trusted certs, html and wss can be entirelly different. On Saturday, July 18, 2015, Chad Phillips <chad@apartmentlines.com> wrote:
I’ve gotten fairly comfortable with the setup offered in the Confluence wiki for the new Verto video features.
I’m curious to know if I can expect any gotchas if I serve the Verto web stuff from a different server than the FreeSWITCH instance is running on. From what I can tell, as long as I make sure to use the same server certs on both servers, it *should* work.
Is there anything I’m not taking into consideration? Any better way to approach the problem besides certificate sharing across servers?
Thanks,
Chad
-- Anthony Minessale II ♬ @anthmfs ♬ @FreeSWITCH ♬ ☞ http://freeswitch.org/ ☞ http://cluecon.com/ ☞ http://twitter.com/FreeSWITCH ☞ irc.freenode.net #freeswitch ☞ *http://freeswitch.org/g+ <http://freeswitch.org/g+>* ClueCon Weekly Development Call ☎ sip:888@conference.freeswitch.org ☎ +19193869900 https://www.youtube.com/watch?v=9XXgW34t40s https://www.youtube.com/watch?v=NLaDpGQuZDA
Thanks for the help, guys. I’m making a note to integrate this information into the wiki page for the 1.6 video installation. Chad On Mon, Jul 20, 2015 at 5:55 AM, Anthony Minessale < anthony.minessale@gmail.com> wrote:
The only requirement is that the cert on FS is trusted. The html can come from anywhere.
If its not a trusted cert the wss connection will silently fail. This is because there is no dialog asking you to trust the cert on wss connections so they just PUNT and don't even log an error. I opened a bug a year ago mentioning ot and they said thats working as designed.
So the only way to make untrusted certs work is to make an https request to the wss port one time and agree to manually trust it. Therefore, serving that same cert for the html serves the same perpose of manually trusting the cert before making the wss connection. With trusted certs, html and wss can be entirelly different.
On Saturday, July 18, 2015, Chad Phillips <chad@apartmentlines.com> wrote:
I’ve gotten fairly comfortable with the setup offered in the Confluence wiki for the new Verto video features.
I’m curious to know if I can expect any gotchas if I serve the Verto web stuff from a different server than the FreeSWITCH instance is running on. From what I can tell, as long as I make sure to use the same server certs on both servers, it *should* work.
Is there anything I’m not taking into consideration? Any better way to approach the problem besides certificate sharing across servers?
Thanks,
Chad
-- Anthony Minessale II ♬ @anthmfs ♬ @FreeSWITCH ♬
☞ http://freeswitch.org/ ☞ http://cluecon.com/ ☞ http://twitter.com/FreeSWITCH ☞ irc.freenode.net #freeswitch ☞ *http://freeswitch.org/g+ <http://freeswitch.org/g+>*
ClueCon Weekly Development Call ☎ sip:888@conference.freeswitch.org ☎ +19193869900
https://www.youtube.com/watch?v=9XXgW34t40s https://www.youtube.com/watch?v=NLaDpGQuZDA
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (3)
-
Anthony Minessale
-
Chad Phillips
-
Jack