RTPS over TLS fails to connect to 3rd camera with self-signed crt -no cert import/trust option

RTPS over TLS fails to connect to 3rd camera with self-signed crt -no cert import/trust option

RTPS over TLS fails to connect to 3rd camera with self-signed crt -no cert import/trust option
RTPS over TLS fails to connect to 3rd camera with self-signed crt -no cert import/trust option
a week ago - last edited Thursday
Model: VIGI NVR1008H  
Hardware Version: V2
Firmware Version: 1.5.1 Build 260317 Rel.24908n

Hi,

I'm trying to add a third-party IP camera (CP Plus, Aditya Infotech) to my VIGI NVR as a manual RTSP camera, and need this to work over RTSPS (RTSP over TLS) specifically for compliance with STQC encrypted-video-transmission requirements.

Setup:
- Camera: CP Plus IP camera, IP 192.168.1.230
- Camera RTSPS is confirmed working and fully verified using ffmpeg/ffplay:
  rtsps://admin:<password>@192.168.1.230:443/video/live?channel=1&subtype=0
  This connects successfully, completes the TLS handshake, and streams valid H.265 video (confirmed via ffplay logs).
- Camera uses a self-signed certificate (Issuer: "General", Subject: 192.168.1.230), active under HTTPS/RTSPOverTLS on the camera.

Issue:
When adding this camera to the VIGI NVR via Settings > Camera > Add Manually > RTSP, using the same RTSPS URL/port 443, the connection fails (camera does not come online / no video). 

I checked the NVR's Settings > Certificate Management page, but this only shows the NVR's own server certificate with an "Export" option - there is no way to import or trust a certificate from a third-party camera.

Plain RTSP (port 554, no TLS) connects successfully with the same credentials and path, confirming the issue is specific to the TLS/certificate trust step, not the stream itself.

Questions:
1. Does the VIGI NVR support importing/trusting third-party self-signed certificates for RTSPS connections to non-VIGI cameras? If so, where is this configured?
2. Is there a different "Transfer Protocol" preset (I see "Custom RTSP Protocol1" in Manage RTSP) that handles third-party TLS certs differently?
3. Does adding the camera via ONVIF (rather than manual RTSP) handle TLS/cert trust differently?
4. Is there a firmware update path planned to support this, given STQC-driven encrypted video requirements are increasingly required for government/PSU deployments in India?

Any guidance would be appreciated, as I need to keep this stream encrypted end-to-end rather than falling back to plain RTSP.

Thanks

  0      
0
#1
Options
1 Accepted Solution
Re: RTPS over TLS fails to connect to 3rd camera with self-signed crt -no cert import/trust option-Solution
Thursday - last edited Thursday

Hi,  @pumba21 

Thank you for posting on our business network forum.

We have reviewed the relevant information and conducted tests in our local laboratory. After verification, we confirm that the VIGI NVR currently does not support importing or trusting third-party self-signed certificates for RTSPS connections. At this time, we do not have any other firmware available that would enable this feature on the NVR. However, we will forward your feature request to the relevant department for review. If it passes the evaluation, our R&D team will consider including it in the development roadmap. Thank you for your patience and for providing your valuable feedback.

 

Recommended Solution
  0  
0
#2
Options
2 Reply
Re: RTPS over TLS fails to connect to 3rd camera with self-signed crt -no cert import/trust option-Solution
Thursday - last edited Thursday

Hi,  @pumba21 

Thank you for posting on our business network forum.

We have reviewed the relevant information and conducted tests in our local laboratory. After verification, we confirm that the VIGI NVR currently does not support importing or trusting third-party self-signed certificates for RTSPS connections. At this time, we do not have any other firmware available that would enable this feature on the NVR. However, we will forward your feature request to the relevant department for review. If it passes the evaluation, our R&D team will consider including it in the development roadmap. Thank you for your patience and for providing your valuable feedback.

 

Recommended Solution
  0  
0
#2
Options
Re: RTPS over TLS fails to connect to 3rd camera with self-signed crt -no cert import/trust option
Monday

  @Nathan-TP 

Hi,

Thanks for confirming and for testing this on your end. Understood that the NVR doesn't currently support importing/trusting third-party self-signed certificates for RTSPS, and that no firmware update is available yet to enable this.

I'd like to follow up on the feature request status: is there a rough timeframe for when the evaluation by the relevant department would be completed, and could you update this thread once a decision is made (whether or not it's added to the roadmap)? Even a general estimate (e.g., next quarter, next major firmware cycle) would help me plan around it.

Appreciate your help, and looking forward to hearing back.

Thanks,
[@pumba21]

  0  
0
#3
Options

Information

Helpful: 0

Views: 200

Replies: 2