question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Allow option for invalid certificates for RTSPS

See original GitHub issue

UniFi protect serves RTSPS streams for cameras from the controller with a certificate valid for IPv4/6 loopbacks. Trying to connect to these feeds fails with log errors similar to:

time="2022-02-05T11:19:31Z" level=info msg="Run stream" call=Run channel=0 func=StreamServerRunStreamDo module=core stream=camera.g4_doorbell_high
time="2022-02-05T11:19:31Z" level=error msg="Stream error restart stream x509: certificate is valid for 127.0.0.1, fe80::1, not <PROTECT_SERVER_IP>" call=Restart

It would be nice to allow the option to ignore the invalid certificate, in a trusted environment. For a little more context, see the discussions here.

Issue Analytics

  • State:open
  • Created 2 years ago
  • Reactions:1
  • Comments:25 (7 by maintainers)

github_iconTop GitHub Comments

1reaction
allenportercommented, Feb 9, 2022

Nice, thanks for adding this. I think we need to “wire up” to test this in the home assistant add-on, unless one of you has a standalone instance of the server to try this out with.

Read more comments on GitHub >

github_iconTop Results From Across the Web

Unifi Protect shouldn't use RTSPS by default if Verify SSL is ...
When configuring the Unifi Protect integration, there is currently an option to “Verify SSL”, which defaults to off (sensible defaults for ...
Read more >
Using trusted certificates on Security Center servers (Advanced)
We recommend using a certificate that is trusted by all client machines. If the Invalid certificate warning is unexpected, ensure that you ...
Read more >
Real-Time Streaming Protocol (RTSP) 2.0 Parameters
Feature-tags; RTSP 2.0 Methods; RTSP 2.0 Status Codes ... thus allowing the user to decided to accept or refuse a certificate. [RFC7826] ...
Read more >
I want to allow invalid SSL certificates with AFNetworking
In AFNetworking 2.0, you can use the following: [AFHTTPRequestOperationManager manager].securityPolicy.allowInvalidCertificates = YES;.
Read more >
aler9/rtsp-simple-server - GitHub
ready-to-use RTSP / RTMP / LL-HLS / WebRTC server and proxy that allows to ... or invalid, you can provide the fingerprint of...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found