Skip to main content
September 25, 2008
Question

Connect Pro and SSL in incrusted enviroment

  • September 25, 2008
  • 1 reply
  • 682 views
I have trouble to understand what certified need Adobe Connect Pro para activar SSL, and the doc are confused because don't match manual instructions and Adaptor.xml file in the c:\breeze directory.

I Have the files by GLOBALSIGN: ¿Have to include something in Adobe Connect Pro 7, for to Know about GlobalSign?
ca.crt
root.crt
server.crt
server.csr
server.key
server.key_cifer
server.pem

In de Adaptor.xml file I have put, as say in the Chapter 4. of the Manual of 7Pro. this
<Edge name="applicationserver">
<SSLServerCtx>
<SSLCertificateFile>c:\breeze\server.pem</SSLCertificateFile>
<SSLCertificateKeyFile type="PEM">c:\breeze\server.key</SSLCertificateKeyFile>
<SSLPassPhrase></SSLPassPhrase>
<SSLCipherSuite>ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH</SSLCipherSuite>
<SSLSessionTimeout>5</SSLSessionTimeout>
</SSLServerCtx>
</Edge>

And add in the HostPort directive

<HostPort name="applicationserver" ctl_channel=":19351">xxx.xxx.xxx.xxx:-443</HostPort>

¿The SSCertificateFile is the certificate file to send to client and has to begin something as -----BEGIN CERTIFICATE-----?

And ¿the SSLCertificateKeyFile is in format PEM and has to begin something as -----BEGIN RSA PRIVATE KEY-----?

I've read in somewere that have to put 2key's continuos in the some file.

Any help would be apreciated. Thanks and regards
    This topic has been closed for replies.

    1 reply

    Adobe Employee
    September 27, 2008
    All you need is the public certificate in pem format and your private key file.

    So it seems you already have all you need and the adaptor.xml config looks correct for application server ssl.
    Just do not forget to add this to the custom.ini:

    ADMIN_PROTOCOL=https://
    SSL_ONLY=yes
    HTTPS_PORT=8443
    September 28, 2008
    Hello,

    I'think now have ssl. with server.crt and server.key files and only secure the aplicationserver, because I've an incrusted database instalation, with the same ip for two services HTTP and RTMP and read in the doc that cannot secure two.

    But the problem now is the browser ( Mozilla firefox 3) and/or (Iexplorer) that say the first time to join the server that there is a problem with the certificated :

    "Do not rely on the certificate because the certificate issuer is unknown"
    and sec_error_unknown_issuer

    The next one to join a server is ok. May I put something about the CA in adobe config files?
    Thank's and regards.