From alexandru.ort at gmail.com  Thu Nov  2 13:12:11 2017
From: alexandru.ort at gmail.com (Alexandru Matei)
Date: Thu, 2 Nov 2017 15:12:11 +0200
Subject: [Icecast] both ssl and non-ssl stream on the same socket
Message-ID: <CACg6BWJN92nKQjECWN_BYmk2itrLtQfEGqb8=G2unsXOjohOsA@mail.gmail.com>

Hi.

I configured icecast to serve a stream over ssl and it plays nice in Chrome
and VLC. But on plain http I get *connection reset*. This stream's url is
the same for many years now, and it is included in many radio directories,
TuneIn and other apps. I can't change it or break it.

Is there a way to have a stream that servs the content over ssl and plain
http in the same time, depending on the request?

Thank you.

Alex G.
www.ortodoxradio.ro
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20171102/de18e574/attachment.htm>

From marius at flage.org  Thu Nov  2 13:43:29 2017
From: marius at flage.org (Marius Flage)
Date: Thu, 2 Nov 2017 14:43:29 +0100
Subject: [Icecast] both ssl and non-ssl stream on the same socket
In-Reply-To: <CACg6BWJN92nKQjECWN_BYmk2itrLtQfEGqb8=G2unsXOjohOsA@mail.gmail.com>
References: <CACg6BWJN92nKQjECWN_BYmk2itrLtQfEGqb8=G2unsXOjohOsA@mail.gmail.com>
Message-ID: <dfe363d3-3bb9-ae16-e875-0bdc113ad59f@flage.org>

I guess icecast has to be rewritten to support STARTTLS in that case,
but I guess this is a limitation in the HTTP protocol.

But what you can do is use port redirection if you know that certain
sources or clients will connect over SSL and then redirect them to the
other port based on their source ip..? I don't know if that could be an
option?

--
Marius

Den 02.11.2017 14.12, skrev Alexandru Matei:
> Hi.
>
> I configured icecast to serve a stream over ssl and it plays nice in
> Chrome and VLC. But on plain http I get /connection reset/. This
> stream's url is the same for many years now, and it is included in
> many radio directories, TuneIn and other apps. I can't change it or
> break it.
>
> Is there a way to have a stream that servs the content over ssl and
> plain http in the same time, depending on the request?
>
> Thank you.
>
> Alex G.
> www.ortodoxradio.ro <http://www.ortodoxradio.ro>
>
>
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20171102/525daa03/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20171102/525daa03/attachment.sig>

From kloschi at subsignal.org  Thu Nov  2 14:02:29 2017
From: kloschi at subsignal.org (kloschi)
Date: Thu, 2 Nov 2017 15:02:29 +0100
Subject: [Icecast] both ssl and non-ssl stream on the same socket
In-Reply-To: <CACg6BWJN92nKQjECWN_BYmk2itrLtQfEGqb8=G2unsXOjohOsA@mail.gmail.com>
References: <CACg6BWJN92nKQjECWN_BYmk2itrLtQfEGqb8=G2unsXOjohOsA@mail.gmail.com>
Message-ID: <3a373883-b658-363f-baad-23b5ffed90c3@subsignal.org>

Hi Alexandru,

On 11/02/2017 02:12 PM, Alexandru Matei wrote:
> I configured icecast to serve a stream over ssl and it plays nice in
> Chrome and VLC. But on plain http I get /connection reset/. This
> stream's url is the same for many years now, and it is included in many
> radio directories, TuneIn and other apps. I can't change it or break it.
> 
> Is there a way to have a stream that servs the content over ssl and
> plain http in the same time, depending on the request?

I am using this feature successfully with the icecast-kh branch since ~6
months.

from https://karlheyes.github.io/

since 2.4.0-kh5

8/5/2017
[..]
* autodetect SSL connections on incoming sockets. No need for <ssl> in
listen-socket now but is still there for compatability.
* add <ssl-private-key> in <paths> to allow for combined PEM or for
separate SSL key/certificate files.
* select https/http URL in autogenerated m3u based on incoming request.


hth,
.kloschi
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x88BD7C00.asc
Type: application/pgp-keys
Size: 3128 bytes
Desc: not available
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20171102/e032347f/attachment.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20171102/e032347f/attachment.sig>

From acraigwest at gmail.com  Thu Nov  2 14:10:28 2017
From: acraigwest at gmail.com (A. Craig West)
Date: Thu, 2 Nov 2017 10:10:28 -0400
Subject: [Icecast] both ssl and non-ssl stream on the same socket
In-Reply-To: <dfe363d3-3bb9-ae16-e875-0bdc113ad59f@flage.org>
References: <CACg6BWJN92nKQjECWN_BYmk2itrLtQfEGqb8=G2unsXOjohOsA@mail.gmail.com>
 <dfe363d3-3bb9-ae16-e875-0bdc113ad59f@flage.org>
Message-ID: <CAFbfRkp50ioJktUejLzo+ksXuDyoyQyV9gN9wxBovv3x9zmnBA@mail.gmail.com>

There is a discussion of this problem at:
https://stackoverflow.com/questions/22453782/nodejs-http-and-https-over-same-port
Some of the solutions depend on the clients honouring redirects (301
status code). Essentially, they boil down to running an http and https
server on two separate ports, and a simple service on your original
port which checks the first byte of the connection. If it is 22, it is
an SSL connection, and is redirected to the https port, if it is not
22, it is redirected to the http port. If for some reason a redirect
doesn't work, it would also be possible to forward the connection to
the appropriate port inside this service, but that would have more
system overhead.
The solutions there are generally based on using node.js on the server
to implement the redirector, but it could be done in almost any
language that supports sockets...

On Thu, Nov 2, 2017 at 9:43 AM, Marius Flage <marius at flage.org> wrote:
> I guess icecast has to be rewritten to support STARTTLS in that case, but I
> guess this is a limitation in the HTTP protocol.
>
> But what you can do is use port redirection if you know that certain sources
> or clients will connect over SSL and then redirect them to the other port
> based on their source ip..? I don't know if that could be an option?
>
> --
> Marius
>
> Den 02.11.2017 14.12, skrev Alexandru Matei:
>
> Hi.
>
> I configured icecast to serve a stream over ssl and it plays nice in Chrome
> and VLC. But on plain http I get connection reset. This stream's url is the
> same for many years now, and it is included in many radio directories,
> TuneIn and other apps. I can't change it or break it.
>
> Is there a way to have a stream that servs the content over ssl and plain
> http in the same time, depending on the request?
>
> Thank you.
>
> Alex G.
> www.ortodoxradio.ro
>
>
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast
>
>
>
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast
>


From phschafft at de.loewenfelsen.net  Fri Nov  3 09:21:31 2017
From: phschafft at de.loewenfelsen.net (Philipp Schafft)
Date: Fri, 03 Nov 2017 09:21:31 +0000
Subject: [Icecast] both ssl and non-ssl stream on the same socket
In-Reply-To: <CACg6BWJN92nKQjECWN_BYmk2itrLtQfEGqb8=G2unsXOjohOsA@mail.gmail.com>
References: <CACg6BWJN92nKQjECWN_BYmk2itrLtQfEGqb8=G2unsXOjohOsA@mail.gmail.com>
Message-ID: <1509700891.3397.7.camel@de.loewenfelsen.net>

Good morning,

On Thu, 2017-11-02 at 15:12 +0200, Alexandru Matei wrote:
> Hi.
> 
> I configured icecast to serve a stream over ssl and it plays nice in Chrome
> and VLC. But on plain http I get *connection reset*. This stream's url is
> the same for many years now, and it is included in many radio directories,
> TuneIn and other apps. I can't change it or break it.
> 
> Is there a way to have a stream that servs the content over ssl and plain
> http in the same time, depending on the request?

This is a feature provided by Icecast2 2.5.x which is the current
development version. (Icecast2 2.4.x is in feature-freeze and is only
updated for important and/or security bugs.)

When setting the TLS mode to "auto" Icecast will automagically detect if
a client requests no TLS, TLS via RFC2817, or via RFC2818[0].

Note that the development version is not stable yet, but I think it's
totally worth to have a look at. You can clone the current development
version from git[1].

I would also be happy to hear about your experience.

With best regards,

[0]
https://wiki.xiph.org/Icecast_Server/known_https_restrictions#TLS_Mode_compatibility_charts
[1] https://wiki.xiph.org/Icecast_Server/Git_workflow#Cloning_the_Repo

-- 
Philipp Schafft (CEO/Gesch?ftsf?hrer) 
Telephon: +49.3535 490 17 92

L?wenfelsen UG (haftungsbeschr?nkt)     Registration number:
Bickinger Stra?e 21                     HRB 12308 CB
04916 Herzberg (Elster)                 VATIN/USt-ID:
Germany                                 DE305133015
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: This is a digitally signed message part
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20171103/6b070309/attachment.sig>

From fredg at paravelsystems.com  Mon Nov 13 20:17:17 2017
From: fredg at paravelsystems.com (Fred Gleason)
Date: Mon, 13 Nov 2017 15:17:17 -0500
Subject: [Icecast] Metadata: populating StreamUrl
Message-ID: <4E65B995-7939-4AE3-AF92-3A28DA04F3C8@paravelsystems.com>

Howdy Folks:

Is there a way in v2.4.2 to include a ?StreamUrl=? field in the stream metadata as well as ?StreamTitle=??  It appears that the administrative interface only populates StreamTitle.

For example:

	http://server.example.com:8000/admin/metadata?mount=MyMount&mode=updinfo&song=MySong

will insert only ?StreamTitle=MySong?;.

Googling around has brought up some possible approaches, but they all look dreadfully hack-ish to me.  For example:

	http://wiki.barix.com/index.php?title=How_To_trigger_Relays_using_metadata

	(scroll down about halfway to the screenshot of IceCast?s admin interface).

Is there a correct, supported way to do this?

Cheers!


|----------------------------------------------------------------------|
| Frederick F. Gleason, Jr. |              Chief Developer             |
|                           |              Paravel Systems             |
|----------------------------------------------------------------------|
|          A room without books is like a body without a soul.         |
|                                         -- Cicero                    |
|----------------------------------------------------------------------|

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20171113/fa57a690/attachment.htm>

From epirat07 at gmail.com  Mon Nov 13 20:40:04 2017
From: epirat07 at gmail.com (Marvin Scholz)
Date: Mon, 13 Nov 2017 21:40:04 +0100
Subject: [Icecast] Metadata: populating StreamUrl
In-Reply-To: <4E65B995-7939-4AE3-AF92-3A28DA04F3C8@paravelsystems.com>
References: <4E65B995-7939-4AE3-AF92-3A28DA04F3C8@paravelsystems.com>
Message-ID: <95F3E2A4-CF37-4F6D-ABD4-F4184E6D1894@gmail.com>



On 13 Nov 2017, at 21:17, Fred Gleason wrote:

> Howdy Folks:
>
> Is there a way in v2.4.2 to include a ?StreamUrl=? field in the 
> stream metadata as well as ?StreamTitle=??  It appears that the 
> administrative interface only populates StreamTitle.
>
> For example:
>
> 	http://server.example.com:8000/admin/metadata?mount=MyMount&mode=updinfo&song=MySong
>
> will insert only ?StreamTitle=MySong?;.
>
> Googling around has brought up some possible approaches, but they all 
> look dreadfully hack-ish to me.  For example:
>
> 	http://wiki.barix.com/index.php?title=How_To_trigger_Relays_using_metadata
>
> 	(scroll down about halfway to the screenshot of IceCast?s admin 
> interface).
>
> Is there a correct, supported way to do this?

No. There are currently no plans for it either.

>
> Cheers!
>
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast


From fredg at paravelsystems.com  Mon Nov 13 21:04:36 2017
From: fredg at paravelsystems.com (Fred Gleason)
Date: Mon, 13 Nov 2017 16:04:36 -0500
Subject: [Icecast] Metadata: populating StreamUrl
In-Reply-To: <95F3E2A4-CF37-4F6D-ABD4-F4184E6D1894@gmail.com>
References: <4E65B995-7939-4AE3-AF92-3A28DA04F3C8@paravelsystems.com>
 <95F3E2A4-CF37-4F6D-ABD4-F4184E6D1894@gmail.com>
Message-ID: <5E4A05BC-3F44-4DFB-8AD5-A42091816D8E@paravelsystems.com>

On 13 Nov 2017, at 21:17, Fred Gleason wrote:

> Is there a way in v2.4.2 to include a ?StreamUrl=? field in the stream metadata as well as ?StreamTitle=??  It appears that the administrative interface only populates StreamTitle.
[?]
> Is there a correct, supported way to do this?


On Nov 13, 2017, at 15:40, Marvin Scholz <epirat07 at gmail.com> wrote:

> No. There are currently no plans for it either.

Would a patch that implements such be entertained by upstream?  I?m thinking something along the lines of an additional argument to the existing /admin/metadata interface ?e.g.

	http://server.example.com:8000/admin/metadata?mount=MyMount&mode=updinfo&song=MySong <http://server.example.com:8000/admin/metadata?mount=MyMount&mode=updinfo&song=MySong>&url=http://myurl.example.com/some_node

Everything from ?&url=? onwards (inclusive) would be optional; if absent, the behavior would be precisely as it is now.

Cheers!


|----------------------------------------------------------------------|
| Frederick F. Gleason, Jr. |              Chief Developer             |
|                           |              Paravel Systems             |
|----------------------------------------------------------------------|
|          A room without books is like a body without a soul.         |
|                                         -- Cicero                    |
|----------------------------------------------------------------------|
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20171113/8fdbf769/attachment.htm>

From mark at tafn.org.uk  Tue Nov 14 11:23:55 2017
From: mark at tafn.org.uk (mark)
Date: Tue, 14 Nov 2017 11:23:55 +0000
Subject: [Icecast] centova cast help
In-Reply-To: <5E4A05BC-3F44-4DFB-8AD5-A42091816D8E@paravelsystems.com>
References: <4E65B995-7939-4AE3-AF92-3A28DA04F3C8@paravelsystems.com>
 <95F3E2A4-CF37-4F6D-ABD4-F4184E6D1894@gmail.com>
 <5E4A05BC-3F44-4DFB-8AD5-A42091816D8E@paravelsystems.com>
Message-ID: <20171114112357.4BE9C88086@whitealder.osuosl.org>

Good morning hohpe   this is the right list to ask
we have just switched to centova cast with icecast2 and before when we was streaming from home we could use spl .cue sheets for our repeat shows
how ever with this system cant find any where to do this
many thanks mark.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20171114/951c147e/attachment.htm>

From epirat07 at gmail.com  Tue Nov 14 13:31:49 2017
From: epirat07 at gmail.com (Marvin Scholz)
Date: Tue, 14 Nov 2017 14:31:49 +0100
Subject: [Icecast] centova cast help
In-Reply-To: <20171114112357.4BE9C88086@whitealder.osuosl.org>
References: <4E65B995-7939-4AE3-AF92-3A28DA04F3C8@paravelsystems.com>
 <95F3E2A4-CF37-4F6D-ABD4-F4184E6D1894@gmail.com>
 <5E4A05BC-3F44-4DFB-8AD5-A42091816D8E@paravelsystems.com>
 <20171114112357.4BE9C88086@whitealder.osuosl.org>
Message-ID: <9E1E8008-DBF0-40C8-AE6E-F59FE8881D33@gmail.com>

Please do not highjack this thread. This is horribly annoying.

Send you e-mail without replying to any existing one. That's
how you start a new thread for your problem.

On 14 Nov 2017, at 12:23, mark wrote:

> Good morning hohpe   this is the right list to ask
> we have just switched to centova cast with icecast2 and before when we 
> was streaming from home we could use spl .cue sheets for our repeat 
> shows
> how ever with this system cant find any where to do this
> many thanks mark.
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast