[Icecast] Icecast Over ssl

["Thomas B. Rücker"]

On 12/18/2014 09:43 PM, Xabier Oneca -- xOneca wrote:
>
> Hi Thomas,
>
> El 18/12/2014 22:25, Thomas B. Rücker <thomas at ruecker.fi
> <mailto:thomas at ruecker.fi>> escribió:
> >
> > On 12/18/2014 08:54 PM, Xabier Oneca -- xOneca wrote:
> >>
> >> Hello, Thomas,
> >>
> >> El 18/12/2014 21:35, Thomas B. Rücker <thomas at ruecker.fi
> <mailto:thomas at ruecker.fi>> escribió:
> >> >
> >> > On 12/18/2014 08:29 PM, Xabier Oneca -- xOneca wrote:
> >> > >
> >> > > Hello Daelynn,
> >> > >
> >> > > Icecast doesn't have SSL support, but you can try with stunnel. I
> >> > > haven't tried it with Icecast, but it should work. I have stunnel
> >> > > working with other services, though, and works like a charm!
> >> > >
> >> > That's bull...
> >> > see my other reply.
> >>
> >> Sorry! I wanted to say I didn't know it it had support. I don't
> know why I've written that! :S
> >>
> >> That's what happens by replying with my mind in other things, I
> suppose...
> >
> >
> > No worries, now you know. :-)
> >
> >
> >
> >> > TBR
> >> > >
> >> > > HTH,
> >> > >
> >> > > Xabier Oneca_,,_
> >> > >
> >> > > El 18/12/2014 21:15, "Daelynn Baudais" <daelynn.baudais at shaw.ca
> <mailto:daelynn.baudais at shaw.ca>
> >> > > <mailto:daelynn.baudais at shaw.ca
> <mailto:daelynn.baudais at shaw.ca>>> escribió:
> >> > >
> >> > >     Hi,
> >> > >
> >> > >
> >> > >
> >> > >     Can the Icecast stream be served over an ssl (https)
> connection?
> >> > >
> >> > >     If so, can you please tell me how to accomplish this?
> >> > >
> >> > >
> >> > >
> >> > >     Thanks,
> >> > >
> >> > >     Daelynn.
> >>
> >> Sorry again and cheers!
> >>
> >> Xabier Oneca_,,_
> >
> >
> > Don't sweat it, just wanted to be sure people don't pick up the
> stunnel idea as it's a rather problematic workaround.
>
> So, Icecast + stunnel is not a good idea?
>

For starters you lose the ability to see the IP of your clients in Icecast.
Also all dynamic content likely will generate for something different
(although the same problem might currently exist with Icecast, it would
be reasonable to fix as Icecast is aware of a connection on a SSL socket
as opposed to plain TCP).

> I prefer using 'native' SSL support, but when there isn't, I am very
> happy using stunnel.
>
Yes, it is OK as a work-around. It comes at certain inconveniences that
need to be weighed.


Cheers

Thomas