Month: March 2011

Categories
User Guides Documentation exacqVision Mobile Categories Products

Accessing exacqVision from Tablets and Phones using the Exacq Mobile 3 App

NOTE: This article is a reference for Legacy Exacq Mobile 3 users. Users capable of upgrading their exacqVision Server to version 24.09 and higher should refer to the article: Accessing exacqVision from Tablets and Phones using the exacqVision Mobile App on using the exacqVision Mobile app.

Exacq Mobile 3 receives live and recorded video from the exacqVision Web Service that is connected to the exacqVision recording application.

<br>

The Exacq Mobile 3 app allows you to use Apple or Android tablets and smartphones to view live video from an exacqVision server, search for recorded video, and more. To access your exacqVision server over the internet from Exacq Mobile 3, additional configuration is required. The exacqVision Web Service must be installed and configured, and the web server must be accessible through the internet.

<br>

The following steps provide an overview of the process required to deploy Exacq Mobile 3 in your environment:

  1. The web service can be installed on the Exacq NVR server or on a separate server. See the exacqVision Web Service User Manual for more details on installation and configuration.
  2. By default, the exacqVision Web Service listens on port 80. This can be modified as needed. 
    NOTE: A static IP address or DNS name resolution for the web server is recommended to ensure clients can consistently connect from the Internet.
  3. Install and configure the Exacq Mobile 3 application on your device. Compatible devices and configuration steps are described in the Exacq Mobile 3 User Manual.

<br>

If you have completed these steps but you cannot see video from Exacq Mobile 3, perform the following troubleshooting steps until the issue is resolved:

  • On the web server, open a browser and go to the address 127.0.0.1. (If you have changed the port from the default of 80, add a colon and the port number, such as 127.0.0.1:81.) If the exacqVision Web & Mobile Solutions login page does not load, the exacqVision Web Service is not running or is not properly configured on the server.
  • If the page does load, open the web browser on your mobile device using the cellular data connection instead of WiFi. Load the externally accessible web address of the web server. If the exacqVision Web & Mobile Solutions login page does not load, the name resolution or internet connectivity of the web server is not properly configured on the server.
  • If the page does load, open the Exacq Mobile 3 app and confirm the address and port settings for your server.
  • If these steps to not resolve the problem, contact Exacq Technical Support.

<br>

See also:
Exacq Software/Service Connections Diagram
Example Network Diagram for Dual NIC Systems

<br>

Categories
Knowledge Support Highlighted Support exacqVision Webservice Categories Products

Using SSL with exacqVision Web Service (Linux)

Version 8.4 and Higher

Follow the instructions in Article 1002 to configure HTTPS support in the Web Service.

<br>

Version 8.2 and Lower

SSL, a security system combining authentication and encryption, is used to protect communication between a web server and client. Enabling SSL on a web server allow all clients connecting to that server two key protections:

  1. The client is able to identify the server. There is no way for a fake server to misrepresent itself to a client.
  2. The communication between the client and server is encrypted, preventing a third-party from seeing what data is sent. This ensures the safety of private communication such as usernames and passwords, video data, and more.

NOTES:

  1. This article assumes that exacqVision Web Service version 3.10 or later has been installed with default settings. If you are running version 3.0 to 3.8, see the attached legacy PDF.
  2. A self-signed certificate allows you to use a web browser, but it does not work with mobile devices. Only trusted third-party certificates work with mobile devices.

To use SSL with exacqVision Web Server in Linux, complete the following steps:

  1. Stop exacqVision Web Server by typing sudo /usr/local/exacq/webservice/service.sh stop in a Terminal window.
  2. Open the Web Server Apache Configuration file by typing sudo gedit /etc/evapache/httpd.conf in a Terminal window.
    Find the following lines:

    #Include /etc/evapache/extra/httpd-ssl.conf
    #LoadModule socache_shmcb_module modules/mod_socache_shmcb.so
    #LoadModule ssl_module modules/mod_ssl.so
  3. Delete the pound signs (#) at the beginning of each line.
  4. Save and close the file.
  5. It is recommended, but not required, that you disable the access log for SSL, as this file can grow very large. To do this, open the Apache SSL Configuration file by typing sudo gedit /etc/evapache/extra/httpd-ssl.conf in a Terminal window.
    Find the line with the following text:

    TransferLog “${SRVROOT}/logs/access.log”
    Change it to:#TransferLog “${SRVROOT}/logs/access.log”When finished, save and close the file.
  6. Open the Web Service configuration file by typing sudo gedit /etc/webservice.conf
    Add the following lines to the end of the document:

    [Broker]
    ssl_private_key = /etc/evapache/server.key
    ssl_certificate = /etc/evapache/server.crt

    When finished, save and close the file.
  7. If you were issued certificates, rename them to server.crt and server.key and save them to the /etc/evapache directory and then skip to Step 10. Otherwise, continue with the following steps.
  8. Run cd /etc/evapache in a Terminal window.
  9. To create a self-signed certificate, type sudo openssl req -new -x509 -sha256 -days 365 -nodes -out /etc/evapache/server.crt -keyout /etc/evapache/server.key and answer the questions.

    NOTE:     COMMON NAME should be the IP address or FQDN that you use for access to your exacqVision Web Service.
  10. Re-start exacqVision Web Server by typing sudo /usr/local/exacq/webservice/service.sh restart.

    NOTE: To connect to exacqVision Web Server using SSL, you must use HTTPS instead of HTTP.

Troubleshooting

If exacqVision Web Service does not start after configuring it for SSL, complete the following steps:

  1. Open the Apache error logs, found by default at /user/local/exacq/webservice/evapache/logs/error_log.
  2. Look for an entry similar to the following:

    [Wed Mar 04 09:08:54.512004 2015] [ssl:emerg] [pid 19116] AH02565: Certificate and private key www.example.com:443:0 from CERTIFCATE_FILE_NAME.crt and KEYFILE_NAME.key do not match AH00016: Configuration Failed
  3. If you see this entry, complete the following steps:

    a.) Run the following commands, replacing the values in all caps with your values:

    openssl.exe x509 -noout -modulus -in PATH_TO_CRT | openssl md5
    openssl.exe rsa -noout -modulus -in PATH_TO_KEY | openssl md5
    openssl.exe req -noout -modulus -in PATH_TO_CSR | openssl md5

    For example:

    openssl.exe x509 -noout -modulus -in ..\conf\certificate.crt | openssl md5
    openssl.exe rsa -noout -modulus -in ..\conf\privateKey.key | openssl md5
    openssl.exe req -noout -modulus -in ..\conf\csr.csr | openssl md5

    b.) Compare the result values from all of the calls. Each resulting string should be identical. If the values do not match, confer with the certificate authority that issued the certificate.


NOTE: Web Sockets communication will not work using SSL encryption for Web Service versions 7.2.0 – 7.2.6.

Workaround

Disable web sockets in the client configuration page of the browser Client.

Resolution

Update to exacqVision Web Service version 8.4 or later.

<br>