Ffmpeg Download Encrypted M3u8
Evie Dobbe
If that doesn't work then ffmpeg could need the input for a m3u8 to be served over HTTP. So put your m3u8 file and the key and all your chunks on some web dir and rerun your ffmpeg command using the URL for the m3u8 so it'd be like:
The first line of this file states the URI for the key, which is written into the HLS playlist. The second line of the file points to the key file (may be local or http) against which the media will be encrypted.
First, you should have a good understanding of what Clear Key is and isn't beforeusing it. When you do not want to use an existing DRM service and feelbasic encryption of you media is a viable option, you would use Clear Key. But,keep in mind that this type of encryption does not provide the same level ofsecurity as using one of the DRM services. This is because the key value pair isnot encrypted under another key, unlike encrypted keys which are generated by adecryption key that is stored on a licence server. Additionally, Clear Key sendsthe key value pair as plain text, so while you are encrypting your media the key todecrypt it is not a secret.
This section shows in order commands needed to get from a raw .mov file toencrypted assets packaged for DASH or HLS. For the sake of having a goal toillustrate, we're converting a source file to a bitrate of 8Mbs at a resolutionof 1080p (1920 x 1080). Adjust these values as your needs dictate.
Here $input is input video file. This command will create a list of streamxx.ts files and list.m3u8 file. You can open this m3u8 file in a hls supported player or on a android/ios devices through a web service to confirm segments are working. (Note: segments should be on the same folder as m3u8 file)
Thanks for your great job. Actually I did all the things you mentioned above. The one difference that we have is that I added IV in both encryption command and m3u8.
When I use VLC to play, it shows that
Just to make sure, because I wasn't able to test that yet. Is Channels m3u8 support allows to play streams that are AES encrypted? My cable operator offers online tv in webbrowser the playlist file looks like this inside:
Channels Apple TV, VLC and ffmpeg all support unencrypted streams or #EXT-X-KEY:METHOD=AES-128 streams (assuming the URI references a valid keyfile). None of three application support #EXT-X-KEY:METHOD=SAMPLE-AES streams (which is often associated with Apple fairplay technology).
With #EXT-X-KEY:METHOD=AES-128, the encryption is at the file level allowing for relatively simple decryption (with the key). With #EXT-X-KEY:METHOD=SAMPLE-AES, individual components of the video/audio are encrypted and decryption (with the key) must take place during audio/video decoding. ffmpeg could add support at some point, but it is much more technically challenging to implement.
Open sample.m3u8 with VLC. It won't play. Because VLC tried to retrieve the key file from this URI -b38b-4465-ab47-519c554ae402/enc.key as noted in sample.m3u8. But it failed. Since we don't have this key server ready, yet.
The encryption process requires some kind of secret (key) together with an encryption algorithm. HLS uses AES in cipher block chaining (CBC) mode. This means each block is encrypted using the ciphertext of the preceding block. Learn more
An integer as a "key rotation period" can also be passed to the encryption method (i.e. encryption(save_to, url, 10)) to use a different key for each set of segments, rotating to a new key after this many segments. For example, if 10 segment files have been generated then it will generate a new key. If you set this value to 1, each segment file will be encrypted with a new encryption key. This can improve security and allows for more flexibility.
I created stream files and now what should I pass to a player?You must pass a master playlist(manifest) URL(e.x. "PATH TO STREAM DIRECTORY"/dash-stream.mpd or /PATH_TO_STREAM_DIRECTORY/hls-stream.m3u8 ) to a player.See the demo page of these players for more information(hls.js Demo, dash.js Demo, videojs Demo and etc).
35fe9a5643