Hi there,

Seems this one is an endless struggle for the developer community, based on all the posts I've reviewed online.

I've spent hours and hours trying to find the right combination to allow CloudFront streaming of private video content. I've streamed using RTMP fine when everything was set to public, so I know there has to be some combination I'm missing on the private security side of things. There sure doesn't seem to be any clear step-by-steps on this thing out there.

Before assessing whether I'm correctly generating a signed URL at the code level where I'm ultimately headed, I thought I should be able to simply set up and Object/Embed tag set for JWPlayer in a normal .htm file, based on the URL Cloudberry generates.

But even this gives me the "Stream Not Found" error.

To prepare for the above test, I generated the public/private key pair in the AWS console. I enabled private distribution and streaming on the bucket. I set the canned policy on the bucket using the Generate Web Url dialog for this resource. Then I generated the URL with the RTMP radio button checked in the Generate Web Url dialog.

Here is a sample URL CloudBerry generated for my private resource:

rtmp://s31u8b7i0j4yv.cloudfront.net/cfx/st/video.flv?Expires=1280610244&Signature=S3XtxPuUAZWcEXoWgje3yqYdTVqbpmP5tgHibvmk9pq-zGQ14IW1KLmZWYt52p2VGrEdqeqxAVuunjqMAzwQzOsWM7DXhczB8MuYNSjv-N9LddAFAzJ3svdPrFR8u-f5kc0Gshpoj7jTwhycqx3C92-6x4oll3UR3X9UJg2q6FQ_&Key-Pair-Id=APKAJKYXG5KUS3QWZPBA

Based on this, I created this Object/Embed tag set:

<object classid='clsid:D27CDB6E-AE6D-11cf-96B8-444553540000' width='400'height='429'>
<param name='movie' value='http://tk9977.websitetoolkit.ca.s3.amazonaws.com/player.swf'>
<param name='allowfullscreen' value='true'> <param name='allowscriptaccess' value='always'>
<param name='wmode' value='transparent'>
<param name='flashvars' value='file=video.flv?Expires=1280610244&Signature=S3XtxPuUAZWcEXoWgje3yqYdTVqbpmP5tgHibvmk9pq-zGQ14IW1KLmZWYt52p2VGrEdqeqxAVuunjqMAzwQzOsWM7DXhczB8MuYNSjv-N9LddAFAzJ3svdPrFR8u-f5kc0Gshpoj7jTwhycqx3C92-6x4oll3UR3X9UJg2q6FQ_&Key-Pair-Id=APKAJKYXG5KUS3QWZPBA&streamer=rtmp://s31u8b7i0j4yv.cloudfront.net/cfx/st&provider=rtmp'>
<embed src='http://tk9977.websitetoolkit.ca.s3.amazonaws.com/player.swf' width='400' height='429' bgcolor='#ffffff'
allowscriptaccess='always' allowfullscreen='true'
flashvars='file=video.flv?Expires=1280610244&Signature=S3XtxPuUAZWcEXoWgje3yqYdTVqbpmP5tgHibvmk9pq-zGQ14IW1KLmZWYt52p2VGrEdqeqxAVuunjqMAzwQzOsWM7DXhczB8MuYNSjv-N9LddAFAzJ3svdPrFR8u-f5kc0Gshpoj7jTwhycqx3C92-6x4oll3UR3X9UJg2q6FQ_&Key-Pair-Id=APKAJKYXG5KUS3QWZPBA&streamer=rtmp://s31u8b7i0j4yv.cloudfront.net/cfx/st&provider=rtmp' />
</object>

The JWPlayer shows but when I click to run the file, I get the "Stream Not Found" error.

I've tried with and without the closing forward slash at the end of the streamer parameter, since I've seen it shown both ways in different posts. This made no difference.

Anything obvious I'm doing wrong?

Thanks.

Kel

I did a search and replace on the special characters, but when I ran the page I just saw the striped status bar "spinning" in the middle of where the video should be showing. In other words the video player's window didn't even fully form this time.

I'm not clear what you meant by using "HTML web URL instead of RTMP". We're wanting to stream private media so it does not leave a .flv file in the browser cache. My understanding is this required RTMP. Is that not correct?

Thanks for any further thoughts you can offer.

Kel

I've tried removing the .flv on the flashvars segements, but it still just sits there spinning without the player window completely forming itself.

Here is the latest version of what I'm using:

<object classid='clsid:D27CDB6E-AE6D-11cf-96B8-444553540000' width='400'height='429'>
<param name='movie' value='http://tk9977.websitetoolkit.ca.s3.amazonaws.com/player.swf'>
<param name='allowfullscreen' value='true'> <param name='allowscriptaccess' value='always'>
<param name='wmode' value='transparent'>
<param name='flashvars' value='file=video%3fExpires=1280610244%26Signature=S3XtxPuUAZWcEXoWgje3yqYdTVqbpmP5tgHibvmk9pq-zGQ14IW1KLmZWYt52p2VGrEdqeqxAVuunjqMAzwQzOsWM7DXhczB8MuYNSjv-N9LddAFAzJ3svdPrFR8u-f5kc0Gshpoj7jTwhycqx3C92-6x4oll3UR3X9UJg2q6FQ_%26Key-Pair-Id=APKAJKYXG5KUS3QWZPBA%26streamer=rtmp://s31u8b7i0j4yv.cloudfront.net/cfx/st%26provider=rtmp'>
<embed src='http://tk9977.websitetoolkit.ca.s3.amazonaws.com/player.swf' width='400' height='429' bgcolor='#ffffff'
allowscriptaccess='always' allowfullscreen='true'
flashvars='file=video%3fExpires=1280610244%26Signature=S3XtxPuUAZWcEXoWgje3yqYdTVqbpmP5tgHibvmk9pq-zGQ14IW1KLmZWYt52p2VGrEdqeqxAVuunjqMAzwQzOsWM7DXhczB8MuYNSjv-N9LddAFAzJ3svdPrFR8u-f5kc0Gshpoj7jTwhycqx3C92-6x4oll3UR3X9UJg2q6FQ_%26Key-Pair-Id=APKAJKYXG5KUS3QWZPBA%26streamer=rtmp://s31u8b7i0j4yv.cloudfront.net/cfx/st%26provider=rtmp' />
</object>

Any other thoughts?

BTW, why does the CloudBerry code only provide the embed tag, and not the wrapping object tag?

Kel

Hi Kel!

You shouldn't encode ALL occurrences of these symbols

the flashvars parameter is a sequernce of key-value pairs separated by '&' sign:
'file=<FilePath>&streamer=<StreamerValue>&provider=<ProvideValue>'

But if one of the parameters includes & (or ?,=) it must be incoded. In our case <FilePath> contains special characters, so they must be encoded,
but not the characters that delimits flashvars parameters one from each other.

Your fixed HTML looks like here (and it works for me in IE, FF and Chrome)


Note that separating '&' signs are not encoeded (the same for '=')

In your last post I see that the generated URLs are not private content URLS. because they does not contain Key-Pair-Id parameter, but contain AWSAccessKeyId parameter that is used for normal HTTP distribution. Did you select the Policy on that screen?

You can modify and save the template having the object tag wrapped around embed. It will look like

Note the {0} and {1} are used twice (in <object> and in <embed> tags)
Our default template is minimal and simple so that it help new users to understand how it works.

---

CloudBerry Lab

Another question related to this thread's subject matter.

You pointed out that for one of my examples above I had not associated a policy, with the result being the URL was not a private streaming URL, lacking the Key-Pair-Id parameter, and having the AWSAccessKeyId instead.

My question is, is there ever a case using CloudFront, where you would have this scenario of using RTMP without key pair in the picture?

I notice when I have the distribution set to private, but not the streaming, Cloudberry Explorer suggests a URL that uses the AWSAccessKeyId and a signature that assumably uses that.

Would I ever actually want this? Perhaps it would be helpful to understand the permutations and combinations of private distributions versus streaming scenarios, if they exist.

Thanks.

Kel