SWF Verification and Dynamic Plugins

If your Strobe Player is using SWF Verification, does anyone know if adding additional dynamic plugins will cause your SWF to fail SWF verification?

Hi,
As of now, you cannot use SWFVerification to protect HTTP Streaming, as HTTP Streaming does not require connection with core process of FMS, but request is handled by f4f module in apache. The current way to ensure protection of HTTP streams is to use Flash Access for encryption of fragments. You can find more about Flash Access here at http://www.adobe.com/products/flashaccess/
Thanks,
Abhishek

Similar Messages

SWF Verification and HTTP Streaming from FMS 4.0.1

Is it possible to do SWF Verification with HTTP Streaming? (If calling the box directly)
My gut says No, and I haven't seen any examples or mentions of this in the forums, and I was hoping I could get a clear cut answer from someone that has either tried it or from Adobe.
Thanks.
-Will

Hi,
As of now, you cannot use SWFVerification to protect HTTP Streaming, as HTTP Streaming does not require connection with core process of FMS, but request is handled by f4f module in apache. The current way to ensure protection of HTTP streams is to use Flash Access for encryption of fragments. You can find more about Flash Access here at http://www.adobe.com/products/flashaccess/
Thanks,
Abhishek

SWF Verification on interactive applications

Hi all,
is it possible to activate SWF verification also without streaming any video or audio?
I'm just interested to use FMS to secure my flash application but I don't need to stream any media files.
Thank you!

Yes very much. You just need to follow proper steps in order to activate SWF Verification and you should be able to use it. There is no link of streaming and SWF Verification per se.

Tip: Loading dynamic plugins locally

One of the questions we've heard on a number of occasions is "why can't I load a dynamic plugin locally?" For a while I assumed this was related to Flash Player security, but I finally got around to looking into this yesterday, and realized that this was due to a bug in our code. So if you sync to the latest in public trunk, then it should be possible to run a player app locally, and have that app load a dynamic plugin locally, provided that the plugin is specified with a "file:" prefix. For example, if you run the AkamaiPluginSample, you can paste the following URL into the "URL" box (assuming that this is the path to the compiled plugin on your system):
file:///C:/Dev/osmf/public/trunk/plugins/SMILPlugin/bin-debug/SMILPlugin.swf
This should make plugin development/debugging a bit easier, as you won't have to post the plugin to a server after every change (or run from localhost).

Great. I think it would be flexible to be able to specify the application domain that the player wants to load the plugin into. Similar to the way you can specify whether or not to use the current security domain. We have a swc-swf model where the player has a small api swc integrated and all the logic is loaded at runtime from the swf. Loading into the same application domain allows us to share typed class instances between the player, swc and swf rather than passing them around as raw objects.

FAQ: SWF's and loading external files in Flash Catalyst

How do I make the images in my Flash Catalyst project external to the published SWF?
You can choose whether images are embedded in your Flash Catalyst SWF, or loaded dynamically; this can help to keep your SWF's small. Simply right-click an image and chose "Externalize Image".
Answered by: Adam Cath.
See entire discussion.
How do I make the SWF I imported to Flash Catalyst load external files?
When importing a SWF, Flash Catalyst only pulls the SWF asset into your project. Many SWF's, such as slideshows and media players, rely on external data files, such as configuration files or media assets. If you would like to use such a SWF in Catalyst, then you will have to place these external resources into your Catalyst project as well as importing the SWF.
Let's assume you have a SWF source folder that contains your SWF file and all of the external files it needs. You can open the SWF file from this folder and it works fine. But, if you import the SWF into Catalyst, the Catalyst project doesn't display it correctly because it can't load the external files. Here's what you do:
1. Open your swf source folder, and copy all of the files/folders there except the SWF you imported.
2. In Catalyst, Run/Preview your project (Ctl/Cmd-Enter)
2. Note the file path to Main.html in your browser
3. In your OS, open the folder that contains /bin-debug/Main.html from above
4. Open the "src" folder
5. Paste all of the files from step 1 into the src folder.
6. Catalyst won't pick up that your project changed, so tweak it a bit (add a Rectangle), and save it.
7. Run your project. If it doesn't work, try closing and reopening your project and running again.
For an example, check out: Using an XML-driven SWF in Catalyst to create a slideshow.
See entire discussion.
Answered by: Bear Travis

You can make you swf a custom component with 2 states.
The first state will be empty and rename it "OFF" the second state will have your swf file and name it ON.
Then go back to your artboard/project, add your 2 buttons ON & OFF.
For the ON button add interaction "play transition to custom component ON"
For the OFF button add interaction "play transition to custom component OFF"
Here is an example swf_control

Unable to stream SMIL files unless the html page, swf file and the smil ffile are on the FMS server.

When I place the .swf, smil and http files on the FMS server the SMIL stream test sample works fine
But When I move the files to my web server I get Connection error.
This is the same issue discussed in http://forums.adobe.com/thread/554107
I added a ‘base’ variable but it did not work for me.
The SMIL file has the correct path to the sample files and FMS server
<meta base="rtmp://200.200.200.23/vod/" />
I am able to stream files from my html file on my webserver not the FMS server by pointing to the FMS server at rtmp://200.200.200.23/vod/mp4:sample1_1500kbps.f4v
Is this a domain security setting? If so, where do I change it?
If not How do I get FMS to stream SMIL files without installing a webserver with FMS?
Thanks,

Hi,
I think there is bug with that videoPlayer.swf which is used by index.html of webroot folder of FMS to play media files, its not able to parse smil file correctly. I used some other player and used the smil file and kept it on http server other than fms server so it was able to dynamically stream videos. So I would suggest you to create your own player which uses smil file. You can take help from the below link to create player:
http://www.adobe.com/devnet/flashmediaserver/articles/dynstream_advanced_pt1_05.html
Regards,
Amit

Error using a Array of Loaders with externals SWFs, Camera and Gyroscope ANE

Hi all. Unfortunately I have no idea where could be problem.
I am developing an AR mobile game, currently only for Android, since I can not make the Gyroscope ANE to work in IOS 6.1.3, where no data is returned from the gyroscope (this may be other future post).
The game combines camera, gyroscope and dynamically add to the stage external SWFs. Each SWFs is loaded in a "Stuff" class that extends from Loader. I control its content from the main game class. And the Stuff class that extends from Loader has another objects properties as MovieClips, another Loader, and some TextFields and Sounds.
The game dinamically creates new Stuffs, add them to an Array, and when the player "beat" the Stuff, the Stuff is removed from the stage, each Stuff object is set to null, the Stuff is spliced from the Array and finally, System.gc() is used to recover all the memory. The maximum of Stuffs in the array (and in the stage) is 3. When the level is finished, all the objects are set to null (including the gyroscope and camera), the array is spliced and set to null too, garbage collector forced and when a new level is started all the variables/objects are set again.
The problem is this: independently of the level, sometime between 32 and 37 times that I add a new Stuff to the Array and to the stage, the game stops working. A "back" button on stage does not respond, and any action in the game is ignored. In that moment, the memory (measured with System.totalMemory/1024 and displayed on screen) leaks from a 4500/6500 to 11000, the camera keeps working as the background image and the only way to exit the app is killing it from a task manager.
Another strange thing is that every time I recreate the gyroscope object the it becomes "more sensitive", like the setInterval(100) only the first time is called sets that interval, and from the second that time it seems to be lower.
Any help will be very appreciated.
Thanks in advance.

Could you please open a new bug report on this over at bugbase.adobe.com? When adding the bug, please include sample code or an application so we can quickly test this out internally. If you'd like to keep this private, feel free to email the attachment to me directly ([email protected]).
Once added, please post back with the URL so that others affected can add their comments and votes.
Thanks,
Chris

Support for SWF Verification in the reference implementation server

The Server for Protected Streaming provides a way to configure a whitelist of allowed SWF hashes. However, from what I can tell, the reference implementation server does not have this capability. Any suggestions on how to implement SWF Verification in the reference implementation server ?

To use SWF whitelists with the Reference Implementation, set the SWF whitelist in a policy, and use that policy when packaging the content. When issuing a license, the Reference Implementation will use whatever restrictions were specified in the policy at packaging time. Alternatively, since the Reference Implementation ships with source code, you can modify the server so you can specify the SWF whitelist information at the time the license is generated.

SWF Verification works differently with FAXS vs FMS

Here's the setup: loader.swf loads up player.swf and player.swf then connects to the server to play the stream. In FMS-based SWF Verification, it'
s the player.swf that gets verified. However, if we change the above scenario where the player.swf obtains the license from FAXS and the license server sends a list of valid SWF hashes, it appears that verification is done on the loader.swf. That looks like a bug. Any suggestions ?
Eli

In FMS-based SWF verification, player.swf would be present on the FMS server, in order to perform the SWF verification.
In Flash Access-based SWF verification, the Flash Access license specifies the SWF hash of the authorized SWF (loader.swf in this example). In order to play the content, the client will verify that the hash of the current SWF matches the SWF hash specified in the license. There are two ways to set the SWF whitelist in the license: 1) Specify the whitelist at the time you create the policy, or 2) The license server fills in the SWF whitelist at the time it issues the license. With Flash Access, there is an additional packaging step (to apply the policy and encrypt the content), and a license server must be deployed in order for the client to obtain a license. However, aside from disabling FMS SWF verification, no other changes on the CDN should be required to deliver the encrypted content through the CDN.

SWF Verification with chat login?

HI All,
I am having a problem/confusion, please clear out the issue.
When i apply SWF Verification on a chat application (which has video and audio streaming as well) everything is fine, video and audio streaming works when same file exists in SWF folder and all that, shared objects only works when swf files match etc. But user cannot connect to a chat session.
We can see the list of rooms available to join(because they come through shared object) but when we try to join a room FMS rejects user.
In FMS Admin console it throws exception when FMS rejects login. When we provide that exception(FlashCom/3.0.4 or FlashCom/3.0.1 depending upon which version we'r using) in the <UserAgentExceptions> tag the login works fine and chat session is created, but then FMS is not secure anymore, we can connect from any other swf file also which donot exist in SWFs folder.
On the Adobe SWF Verrification help page it says
Note: SWF files connecting to Flash Media Administration Server cannot be verified.
Is this note related to my problem? I think it is, if it is then what is the solution?
Anyone know what exception should be provided to only allow chat session verification to pass or something like that.

No, this is specific that you're having FMS connect back to FMS itself, and it's not capable of being s SWF Verification client. So, you'll need to open that hole in SWF Verification like you wanted. However, you should patch that hole in another way. For instance, when a client connects to chat you should make sure that its IP is from the local IP - that way you can be sure it's the local FMS connecting. You can do this via script or you can configure a special connection path for it if needed.
Asa

[svn:osmf:] 10579: Removed the src folder for the AkamaiBasicStreamingPlugin, this folder structure made it impossible to load the swf as a static plugin .

Revision: 10579
Author:   [email protected]
Date:     2009-09-24 16:40:08 -0700 (Thu, 24 Sep 2009)
Log Message:
Removed the src folder for the AkamaiBasicStreamingPlugin, this folder structure made it impossible to load the swf as a static plugin.
Modified Paths:
    osmf/trunk/apps/samples/plugins/AkamaiPluginSample/src/AkamaiPluginSample.mxml
Added Paths:
    osmf/trunk/plugins/akamai/AkamaiBasicStreamingPlugin/com/
    osmf/trunk/plugins/akamai/AkamaiBasicStreamingPlugin/com/akamai/
    osmf/trunk/plugins/akamai/AkamaiBasicStreamingPlugin/com/akamai/osmf/
    osmf/trunk/plugins/akamai/AkamaiBasicStreamingPlugin/com/akamai/osmf/AkamaiBasicStreaming PluginInfo.as
    osmf/trunk/plugins/akamai/AkamaiBasicStreamingPlugin/com/akamai/osmf/events/
    osmf/trunk/plugins/akamai/AkamaiBasicStreamingPlugin/com/akamai/osmf/events/AkamaiMediaEr ror.as
    osmf/trunk/plugins/akamai/AkamaiBasicStreamingPlugin/com/akamai/osmf/events/AkamaiMediaEr rorCodes.as
    osmf/trunk/plugins/akamai/AkamaiBasicStreamingPlugin/com/akamai/osmf/net/
    osmf/trunk/plugins/akamai/AkamaiBasicStreamingPlugin/com/akamai/osmf/net/AkamaiNetConnect ion.as
    osmf/trunk/plugins/akamai/AkamaiBasicStreamingPlugin/com/akamai/osmf/net/AkamaiNetConnect ionFactory.as
    osmf/trunk/plugins/akamai/AkamaiBasicStreamingPlugin/com/akamai/osmf/net/AkamaiNetLoader. as
    osmf/trunk/plugins/akamai/AkamaiBasicStreamingPlugin/com/akamai/osmf/net/AkamaiNetNegotia tor.as
    osmf/trunk/plugins/akamai/AkamaiBasicStreamingPlugin/com/akamai/osmf/net/AkamaiNetStream. as
Removed Paths:
    osmf/trunk/plugins/akamai/AkamaiBasicStreamingPlugin/src/

Hello
On my flash, I already have those parameters in place.
I don't think there would be any security issues however, since I have used a player .swf which loads from the media site and plays the videos without a problem.
http://www.iongeo.com/channelguide_test_dev/
click on the four images at the bottom of the screen to see how it works.
Now, I am pretty much doing the same thing, but this time embedding the other swf to load the videos. As I mentioned, I was able to do this when everything was on our server, but now there is an issue for some reason when I try to load the .flv into the .swf from the other media server.

LoadFromXML(XMLstream) from a dynamic plugin

I am trying to get an xml file to load from a .jar file. The complication is the following code is run inside a plugin that is called from the source program. I have tried this code in a stand alone program and it seems to work fine, however when I port it back over to the plugin source It doesn't work. I may be off but I think the issue has something to do with being called as a plugin and how that works with the .getResourceAsStream() method call.
Note: IJ.error just pulls up an error box window with some data. I am using NB 6.5 and haven't figured out how to get stops to work in dynamic plugins so I use the error messages as a crutch.
try{
InputStream XMLstream = getClass().getResourceAsStream("config/ABConfig.xml");
if (XMLstream == null) {
IJ.error("File not found");
//not sure after this point------------------->
properties.loadFromXML(XMLstream);
//XMLstream.close();
//the folloing IJ.errror call doesn't run------------------->
IJ.error("you passed the loadFromXML statement"); //-sh debug
catch (IOException exception){}and my XML file:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE properties SYSTEM "http://java.sun.com/dtd/properties.dtd">
<ActionBarConfig>
<button>
    <label>automatic</label>
    <icon>auto.GIF</icon>
    <action></action>
    <arg></arg>
</button>
<button>
    <label>manual</label>
    <icon>manu.GIF</icon>
    <action></action>
    <arg></arg>
</button>
</ActionBarConfig>Any help is greatly appreciated.
Seth

It seems the error had nothing to do with dynamic plugins and more to do with the syntax requriements for properties.loadfromxml(). I changed my xml document to:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE properties SYSTEM "http://java.sun.com/dtd/properties.dtd">
<properties>
<entry key="button"></entry>
<entry key="label">auto</entry>
<entry key="icon">auto.gif</entry>
<entry key="macro"></entry>
<entry key="arg"></entry>
</properties>and it worked beautifully.

SWF verification fails when connected from Edge

Hi
I have couple of files for SWF verification.
I have created a SWFs folder in the application directory on my core server
I have enabled SWFverification to "true" in Application.xml in Core server
My Swf are Created in Flash Player 10.1.135
I have 5 edge servers connected to my core
When i connect to a stream thro an edge , and if i get a connection then subsequent connections through different swfs are not validated .
Any issue in Edge Core connection
Or Should i put the SWfs in Edge Locations also?
PS

Hi Subhankar,
I have tried a connecting two profilers concurrently to a MobiLink server and have not been able to reproduce errors like this. There should not be a connection limit that would prevent this - if ti couldn't connect at all, you wouldn't see the request coming in.
Which exact version of SQL Anywhere/MobiLink are you using? Are you just using SQL Anywhere clients or do you also have UltraLite clients? Are the server and clients using the same software version?
Thanks,
Jeff Albion
SAP Active Global Support

OSMF SWF verification issues...

Hi,
I am having some sporadic issues with OSMF implementation of DRM / SWF verification.
Under some (as yet murky, but semi-replicable...) circumstances, it is possible to get the licence download to stall in a way that crashes the licence process and so blocks play of _all_ protected content. This block remains in place after browser restart etc. and can occasionally require manual "Deauthorize this computer" and browser cache clearance etc. to resume. The closest I have come to a reliable way to replicate the issue is to place a manual block on the licence request to delay it by a second or two which can reliably crash playback of protected content... but it only works on selected PCs.
As we haven't yet managed to isolate the cause enough to get Adobe's assistance, I am asking for any potential avenues for detecting / debugging / diagnosing the issue?
I have tried adding listeners to all available events on the OSMF DRMTrait but all this will tell me is either uninitialized, authenticationError or authenticationComplete. (Seemingly, the other DRMState values are either unused or unreported.) Equally, the changes for these seem to happen too quickly to display them on screen.
G

Hi,
As of now, you cannot use SWFVerification to protect HTTP Streaming, as HTTP Streaming does not require connection with core process of FMS, but request is handled by f4f module in apache. The current way to ensure protection of HTTP streams is to use Flash Access for encryption of fragments. You can find more about Flash Access here at http://www.adobe.com/products/flashaccess/
Thanks,
Abhishek

Air on Android - swf verification

We use swf verification for our rtmp streams, which is working.
For our air and on android application to access these rtmp streams, do I upload the SWF used to create the apk? Or, do I have to do something with the apk?

I don't think there is any difference in swf verification process for air android (apk). Are you facing some problems in it?
for reference this page gives information about swf verification: http://livedocs.adobe.com/flashmediaserver/3.0/docs/help.html?content=03_configtasks_22.ht ml

SWF Verification and Dynamic Plugins

Similar Messages

Maybe you are looking for