Skip to main content
M
mmah-umd
Inspiring
September 6, 2013
Question

client authentication of server

  • September 6, 2013
  • 1 reply
  • 1391 views

Is there a supported way for clients to authenticate the identity of an AMS/FMS? Or is it necessary to write a custom challenge response upon connection to do this?

    This topic has been closed for replies.

    1 reply

    Petro_O__Bochan
    Petro_O__Bochan
    Inspiring
    September 7, 2013

    It's hard to guess what you are trying to achieve but Client properties on the server-side will get you started - http://help.adobe.com/en_US/adobemediaserver/ssaslr/WS5b3ccc516d4fbf351e63e3d11a11afc95e-7ec3SSASLR.2.3.html.

    M
    mmah-umdAuthor
    Inspiring
    September 7, 2013

    Assume the client knows in advance which server it wants to connect to. It should have some way of verifying the identity of this server, so that the client knows the server is not an imposter.

    http://en.wikipedia.org/wiki/Challenge%E2%80%93response_authentication

    So is there anything existing in AMS/FMS that helps with this, or is it necessary to write the entire procedure custom?

    S
    Adobe Employee
    SE_0208
    Adobe Employee
    September 9, 2013

    Maybe few of below would work:

    1) Use SWF Verification: If it is fake AMS, ideally it should not have the same SWF with itself and hence SWF verification should fail.

    2) Use Server-side methods to return which client is expecting or use Access or Auth plug-ins.

    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices