[Icecast] Having icecast SSL connection problem

[José Luis Artuch]

Hi John,
El vie, 22-09-2017 a las 16:50 +0000, Zernick, John escribió:
> 
> I have been trying to get icecast 2.4.2 to stream with ssl to https.
> But so far I have had no luck.
>  
> I am running Ubuntu 16.04 and the regular stream is working properly
> over port 80. I want to stream securely over port 443. I need to use
> 443 because of network rules here. I can view the Icecast2 Status
> pages and listen to a stream, but once I add https:// I get 'Secure
> Connection Failed' on Firefox and 'This site can’t be reached' from
> Chrome. Both can view and stream non-ssl content.
>  
> I have tried both a Digicert and a self-signed cert. I have followed
> the pem rules from Digicert. I have set the permissions to the user
> Icecast2 from the group Icecast. I have read almost everything on
> this and I have tried Walter York's instructions to pre-install a
> number of packages that icecast needs to successfully enable ssl. I
> have placed the cert files in the same directory as the icecast.xml
> file. Here are the details regarding the ssl portions of the XML
> config file.
>  
> ...
>     <!-- You may have multiple <listener> elements -->
>     <listen-socket>
>         <port>80</port>
>         <!-- <shoutcast-mount>/stream</shoutcast-mount> -->
>     </listen-socket>
>     
>     <listen-socket>
>         <port>443</port>
>         <ssl>1</ssl>
>     </listen-socket>
> ...
>     <paths>
>        
>         <!-- The certificate file needs to contain both public and
> private part.
>              Both should be PEM encoded. -->
>         <ssl-certificate>/etc/icecast2/icecast2_new.pem</ssl-
> certificate>
> ...
>  
> So, there you have it. The only anomaly with the set up was that when
> the VMWare instance of the site started it was running dhcp and I
> struggled to wrestle control away from it. And I was never able to
> get eth0 to work so I used same interface name that dhcp used
> 'ens160'.
>  
> Any and all suggestions, recommendation, ideas, and solutions would
> be greatly appreciated.
>  
Take a look at /var/log/icecast2/error.log
In my case it says something like:
[2017-09-17  11:40:43] INFO connection/get_ssl_certificate No SSL
capability
Then, I interpret that Icecast2 is not compiled with SSl support.
Regards.
José Luis
> Thanks,  --John
> 
> 
> 
>  
>  John Zernick | Senior Systems Administrator (Web)| D: (216) 916-6472 
> | F: (216) 916-6473 
>  Idea Center | 1375 Euclid | Cleveland OH 44115
>  
>  
>  The mission of ideastream is to strengthen our communities
>  Follow us on Facebook and Twitter
>  Explore what you love, discover even more at ideastream.org
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast