When trying to access signed objects from the new Frankfurt region, I get this:

"The authorization mechanism you have provided is not supported. Please use AWS4-HMAC-SHA256."

From the AWS blog post:
"This new Region supports only Signature Version 4"

The devDependency tape was updated from 4.9.2 to 4.10.0.

🚨 View failing branch.

This version is covered by your current version range and after updating it in your project the build failed.

tape is a devDependency of this project. It might not break your production code or affect downstream projects, but probably breaks your build or test tools, which may prevent deploying or publishing.

Your Greenkeeper Bot 🌴

I'm trying to play back a video hosted on S3, through cloudfront, using a signed URL

I'm using pretty much the exact code from your example.

I send it: rtmp://xxxxxxxxxxxxx.cloudfront.net/cfx/st/vid_test001 and I get back

rtmp://xxxxxxxxxxxxx.cloudfront.net/cfx/st/vid_test001?Signature=SseYBRTNBTBEeQFA15o467er7EegaZwe6OM3w2AZap8Bla1WU~zXJxzUJqigyAECpbMEGHyPIEGmkFdLoU~gKgEoGUufy9TAGCkei-hjiVfMtcw2-iDVDKX~NyFScJc-fMrLD~67nWmkNAlUAZJKJV5WOqV~jgCMlQVgDbUsnLWQ0llST9qWvQp2dOqWVcvnQI1QfYzZOQxdaqZ8FY-gOzPmu8swGL95aeQQkz2VUkRTPI569ktA5rorVWmHyKbXT0jUJSBy1nEgNTDZIZSzEloTPH48RI6RpZ70qm0ahN~TrMzriEJpf4hDE2HR1DboQSxjS4JyYTr5Hdg__&Key-Pair-Id=APKAJSRQXYNPUENHF6HQ&Expires=1386356652

Which seems like an acceptable url.

However, when I try to play it back, I get Failed to play (stream ID:1) from the SMP player.

My permissions for Cloudfront are this:

Restrict Bucket Access : Yes
Grant Read Permissions on Bucket : No, I will Update Permissions
Restrict Viewer Access (Use Signed URLs) : Yes
Trusted Signers : Self
Distribution State: Enabled

The "Grant Read Permissions on Bucket" option might be causing problems, but I can't seem to change this to "Yes" instead of "No". If I change it, save, and come back and view the settings, it changes back to "no"

My bucket policy is

{
    "Version": "2008-10-17",
    "Id": "PolicyForCloudFrontPrivateContent",
    "Statement": [
        {
            "Sid": "1",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity EF5LIV7LW3XE4"
            },
            "Action": "s3:GetObject",
            "Resource": "arn:aws:s3:::ct.recorder/*"
        }
    ]
}

First of all, thank you very much indeed for providing this module.
This module works fine with specific resource.
I try to signing per user like hereinafter:

        var dateLessThan = new Date();
        dateLessThan.setHours(dateLessThan.getHours()+1);

        var urlToSign = 'https://mycf.cloudfront.net/privates/' + userid + '/*';

        if (cloudFrontPrivateKey) {
            var policy = {
                privateKey: cloudFrontPrivateKey,
                keyPairId: cloudFrontKeyPairID,
                dateLessThan: dateLessThan
            };
            var signedUrl = cf.signUrl(urlToSign, policy);
            var signed = signedUrl.replace(urlToSign + '?', '');

            res.json({
                authorization: 'success',
                signed: signed
            });
        }

And then, I make download url in front javascript.

       $('down').html('<a href="https://mycf.cloudfront.net/privates/' + userid + '/test/resource.obj?'+data.signed+'">download</a>');

It doesn't work. Could you give me any advices what is wrong?