Forum Discussion

biztale's avatar
biztale
Streaming Star
6 years ago
Solved

Kaltura Video Host Error : This certificate has expired impacts Streaming and Sign in

On Feb 10, 2020, the Security Certificate for Kaltura Host has expired. Certificate provided by Let's Encrypt Authority X3.   This is a backup host for my feed https://raw.githubusercontent.com/scr...
Roku Direct Publisher
  • mitchstein's avatar
    mitchstein
    6 years ago

    I have to agree that I see zero reason for https for a video feed...

    No video transport requires any certificates...

    I've been streaming video since 1995, rdp, hls, IIS smooth, etc etc. I run my own windows IIS server and never ever had a certificate on it at all t any time. The only thing that ever happens is if one of th websites requires someone to log in for some reason they are warned that it is not a secured website, but since we do not sell anything nor store any sensitive user data there is zero rason that I need any real security for the users.. The server itself is as protected as is possible nad a certificate will not make one bit of difference..

    Gadget ran an article where they explain the crtificate process is so easy to hack that all it does is provide the illusion of security.. Besides 99% of the fishing websites, have certificates.. lol

biztale's avatar
biztale
Streaming Star
6 years ago

I originally did, but then Kaltura reached out to me on my email and said. hey, that's not our host check with your provider. I dug a little deeper to see this a Kaltura Community Edition by my extended host Primcast. Needless to say, a network ticket has been created and now i'm in a holding pattern for a certificate to be issued. It also answered the other question that i started seeing on ROKU Direct Publisher today "There was a transport-level error - (CERT_HAS_EXPIRED). "

I know this takes time to sort out, just nuts how videos have to be secured as HTTPS. Perhaps I will look how to convert the videos to http to bypass security requirements in the future.

So does RDP allow non secure videos as a HTTP format?

mitchstein's avatar
mitchstein
Roku Guru
6 years ago

I have to agree that I see zero reason for https for a video feed...

No video transport requires any certificates...

I've been streaming video since 1995, rdp, hls, IIS smooth, etc etc. I run my own windows IIS server and never ever had a certificate on it at all t any time. The only thing that ever happens is if one of th websites requires someone to log in for some reason they are warned that it is not a secured website, but since we do not sell anything nor store any sensitive user data there is zero rason that I need any real security for the users.. The server itself is as protected as is possible nad a certificate will not make one bit of difference..

Gadget ran an article where they explain the crtificate process is so easy to hack that all it does is provide the illusion of security.. Besides 99% of the fishing websites, have certificates.. lol

  • biztale's avatar
    biztale
    Streaming Star
    6 years ago

    While I am 100% behind all of you, I did see anytime I uploaded to Kaltura it's converting my videos to SSL mp4 links. As the gatekeeper the website was not letting me sign in, every video was stalled by browser and Roku. But I saw when incognito, it was partially letting me in with warnings about unsafe and expired access. I have until August when my paid subscription for Plotagon software expires If unable to turn a profit I will have to change course and focus on YouTube. I like making the content,but having to backtrack forward and reverse can get exhausting. Last payout $5. Anyone making more than 10? Time will tell. 

    • mitchstein's avatar
      mitchstein
      Roku Guru
      6 years ago

      It appears you are using Kaltura as your media host, as such they have to aquire a certificate in order to use an ssl link. There is no reason other then company policy and laziness that they would not provide a simple http link instead of an https link, or they would get the proper certificate/s.
      If they are linking to a 'sub host" then they are nothing more then an index for that other host, both sites would be required to a have proper certificates and include each other as  cross domains..

      Thats the layans issue of what you are encountering. The solution would be to rent a server and ost it yourself where you have complete control, or going with another hosting company that does things correctly.

      As for youtube, the biggest problem i have with youtube is that you do not own your creation once you uplod it to youtube. yes, you retain 'ownership" but you extended them a forever license to use and profit from your content with zero compensation to it once you uploaded it to them. And if you make money from another media outlet they are entitled to a chunk of that money as well.

      So if you write a movie and put it on Youtube, you just gave them all rights to that movie past futue and present. If a big time hollywood producer picks up your movie and wants to make it into a blockbuster series of movies, you just gave away a percentage of all future earnings related to the movie. Most of the time when this happens 9and it rarely does but has) The big time producer will negotiate a deal with google (youtube) to purchase back the rights in a single large sum dollar amount. But Youtube is under no legal obligation to release their rights.

      I dislike youtube, did snce the day they stole my idea and started thier business.

      Anyway, I average about 100$  month from Roku in ad revenue, not much considering the hosting costs, I get about the same from apple and Amazon, although Amazon is a pain in the arse cause I have to keep sending them proof of rights to use some of the material I publish and have to constently prove some of them are publicc domain. Between the 3 services i do a little more then break even. Maybe if I invested in advertising I'd do much better, but I like it small, lol.. This is just a hobby now as I am retired..