Configuration Method

You can configure HTTPS secure acceleration to protect your live resources.

Context

HTTPS has the following advantages over HTTP:
  • HTTPS is a network protocol constructed based on SSL and HTTP for encrypted transmission and identity authentication. It is more secure than HTTP and prevents data from being stolen or changed during transmission, ensuring data integrity.
  • Key user information is encrypted to prevent session IDs or cookies from being captured by attackers.

Prerequisites

  • The ingest domain name and streaming domain name have been added and associated.
  • CNMAE records have been added to your domains' DNS records.

Enabling HTTPS

  1. Log in to the Live console.
  2. In the navigation pane, choose Domains.
  3. Click Settings in the row containing the target streaming domain name.
  4. In the navigation pane, choose Template Settings > HTTPS Certificate.
  5. Click Add. On the page displayed, set HTTPS parameters.

    Figure 1 Configuring the HTTPS certificate
    Open the obtained certificate file and private key file using a text tool, and copy certificate body and private key content to the corresponding text boxes. Certificates issued by different organizations have the following differences:
    • If your certificate is issued by the root CA, the certificate is a complete certificate. Copy the certificate content.
      Figure 2 HTTPS certificate
    • If your certificate is issued by an intermediate CA, the certificate file contains multiple certificates. You need to combine all the certificates into a single certificate. For details, see Certificates Issued by Intermediate CAs.

  6. Click OK.
  7. Verify whether HTTPS secure acceleration has taken effect.

    Use an HTTPS playback URL to play a live video. If the playback is successful, HTTPS secure acceleration has taken effect.

Updating a Certificate

If your certificate is changed, you need to synchronize new certificate content to the HTTPS settings. The procedure to update a certificate is the same as that to enable HTTPS.