Issue with WebRTC Encryption in MediaMTX for WHIP Streaming

[Aqib-Web]

Question

Hi there,

I am currently trying to stream via WebRTC using WHIP (WebRTC-Hybrid Interactivity Protocol) with MediaMTX. The stream works fine over HTTP (http://localhost:8889/mystream/whip), but when I enable WebRTC encryption (webrtcEncryption: yes), I encounter an issue where OBS fails to connect to the server.

Problem:
Without encryption (webrtcEncryption: no), streaming via WHIP works perfectly fine with the URL http://localhost:8889/mystream/whip.
With encryption (webrtcEncryption: yes), I’ve updated the stream URL to https://localhost:8889/mystream/whip, but OBS fails to connect.
Steps Taken:
Enabled webrtcEncryption: yes in the mediamtx.yml configuration.

Generated SSL/TLS certificates using the following commands:

bash
Copy code
openssl genrsa -out server.key 2048
openssl req -new -x509 -sha256 -key server.key -out server.crt -days 3650
Updated the mediamtx.yml file to include the paths to the certificates:

yaml
Copy code
webrtcEncryption: yes
webrtcServerKey: server.key
webrtcServerCert: server.crt
Restarted the MediaMTX server.

Updated OBS stream URL to https://localhost:8889/mystream/whip.

Observed Behavior:
Streaming works fine over HTTP when webrtcEncryption: no.
When enabling encryption (webrtcEncryption: yes), OBS fails to connect using the updated https://localhost:8889/mystream/whip URL.
The MediaMTX server log shows no issues related to the connection, and the webrtcEncryption: yes setting is applied.
What I've Tried:
Checked the certificates to ensure they are correctly placed.
Made sure OBS can trust the self-signed certificate (no errors from the browser).
Verified the mediamtx.yml configuration for any misconfigurations.
Questions:
Are there any additional configurations I need to enable for WebRTC encryption to work correctly with WHIP?
Are there any logs or debugging tips to help pinpoint why the connection fails with HTTPS?
Any help or guidance would be greatly appreciated!

Thanks in advance!

[Munirafridi]

I have issue . when i try to use HTTPS with WHIP url

[Taps7734]

Are you actually connecting to LOCALHOST as the hostname? and is localhost in your certificate?

[Aqib-Web]

Are you actually connecting to LOCALHOST as the hostname? and is localhost in your certificate?

I've tried both below options in OBS:
https://localhost:8889/mystream/whip (while testing locally)
https://aws-public-ip:8889/mystream/whip (since I'm running the MediaMTX server on AWS)

But neither worked when WebRTC encryption is enabled. The issue persists even with the correct URL. I also confirmed that the certificate includes the AWS public IP, but OBS still fails to connect. (but only HTTP works -> http://localhost:8889/mystream/whip)

[Taps7734]

at some point in the past, I added the following line to my config to get it to work outside my network

# List of additional hosts or IPs to send to clients.
webrtcAdditionalHosts: [mediamtx.yourserver.net,100.101.102.103]

Obviously change the hostname and the IP address to match yours.

Without seeing the certificate you are using, I would only suggest you double check that the FQDN you are trying to use are valid in that certificate.

[Aqib-Web]

@Taps7734, I’m using a self-signed certificate for the WebRTC server. My client is hosted on Vercel at https://mediamtx-client.vercel.app/, and the server is running on an AWS t2.micro instance. Below is the configuration I'm using for webtrc:

webrtc: yes
webrtcAddress: :8889
webrtcEncryption: yes
webrtcServerKey: server.key
webrtcServerCert: server.crt
webrtcAllowOrigin: 'https://mediamtx-client.vercel.app'
webrtcTrustedProxies: []
webrtcLocalUDPAddress: :8189
webrtcLocalTCPAddress: ''
webrtcIPsFromInterfaces: yes
webrtcIPsFromInterfacesList: []
webrtcAdditionalHosts:
-- 123.45.6.7 #aws public ip
-- my-amazon-ip4-address-1.amazonaws.com #aws public address
webrtcICEServers2:
-- url: stun:stun.l.google.com:19302
-- url: turn:123.45.6.7:3478 # My TURN server
username: user
password: pass
clientOnly: false # Optional, depending on your TURN configuration
webrtcHandshakeTimeout: 20s
webrtcTrackGatherTimeout: 5s