Name is required.
Email address is required.
Invalid email address
Answer is required.
Exceeding max length of 5KB

Crossdomain issue - m3u8 through https


Hi JW,

I'm trying to play HLS stream with AES-128 it works fine on iOS, but not on flash. I tested it using hls-tester.

here a stream url: https://svpsecurehdvod-vh.akamaihd.net/i/2015/03/20150331_551a7977d4e2a_vg01/,240_160_64,320_180_250,480_270_500,640_360_800,960_540_1500,1280_720_3500,.mp4.csmil/master.m3u8?hdnea=st%3D1427897695~exp%3D1428502495~acl%3D%2Fi%2F2015%2F03%2F20150331_551a7977d4e2a_vg01%2F%2C240_160_64%2C320_180_250%2C480_270_500%2C640_360_800%2C960_540_1500%2C1280_720_3500%2C.mp4.csmil%2F*~hmac%3Da29d23f40d4ef7cec0752ccbb834febe200dcb7846667ce9e10018e8e12749a4

(with akamai token generated for 1 week) - stream unfortunately is geoblocked - but I can whitelist your IP if you need.


When I'm trying to play it on flash player it gives me an error:

"crossdomain access denied"

The issue is - crossdomain is there:

https://svpsecurehdvod-vh.akamaihd.net/crossdomain.xml
with body:


<?xml version="1.0"?><!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd"><cross-domain-policy><allow-access-from domain="*"/><allow-http-request-headers-from domain="*" headers="*"/></cross-domain-policy>


and I see player is requesting it properly with HTTP 200 response from server:

https://slack-files.com/T0356Q2CJ-F048APEH9-a1c2c8a853

We could use of course Akamai HDCore plugin and play streams through HDS but since JW supports AES-128 from 6.12 version we don't want to add another plug ins if its not necessary.


all normal HLS streams from Akamai through HTTP are working without any issue.

Thanks for help
Konrad Pietrzkiewicz
VGTV

7 Community Answers

jherrieven

User  
0 rated :

Your "crossdomain.xml" is being returned as "text/html" rather than "text/xml" which may have something to do with it...

konrad.pietrzkiewicz

User  
0 rated :

its the same on normal HLS stream without https like:

http://svpvod-vh.akamaihd.net/i/2015/03/20150316_5506c45bd8626_vg01/,240_160_64,320_180_250,480_270_500,640_360_800,960_540_1500,1280_720_3500,.mp4.csmil/master.m3u8

which is working without any issue

jherrieven

User  
0 rated :

Yep. Fair point!

Cooper Reid

JW Player Support Agent  
0 rated :

We’re currently looking into this issue -
Cooper

kevin.ngao

User  
0 rated :

I too am experiencing this issue.

This appears to mainly be an issue on the flash player (Chrome), and not the native player (Safari) as it works fine natively.

konrad.pietrzkiewicz

User  
0 rated :

The issue is flash player needs to have additional attribute in crossdomain.xml file.

When flash is hosted on HTTP domain and requesting HTTPS files you need to add secure="false" to crossdomain.xml file.


from Adobe documentation:

http://help.adobe.com/en_US/AS2LCR/Flash_10.0/help.html?content=00000469.html

so your crossdomain should look like:

<?xml version="1.0"?><!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd"><cross-domain-policy><allow-access-from domain="*" secure="false"/><allow-http-request-headers-from domain="*" headers="*"/></cross-domain-policy>

or swf file should be hosted on HTTPS

Cooper Reid

JW Player Support Agent  
0 rated :

Hi Konrad -
Thanks for the input! very helpful
Cooper

This question has received the maximum number of answers.