[Icecast] How do I combine my ssl certs?
walteryork at hotmail.com
Tue Mar 6 14:47:38 UTC 2018
There is a github repo that will create and then another script to renew your Let's Encrypt Certs for Icecast. The commands are well documented to help you customize for your specific implementation.
The Repo is here:
The commands to concatenate the certs are:
#Replace domain.tld for the name of your domain as setup in Let's Encrypt.
#Append FullChain to Icecast certificate
cat /etc/letsencrypt/live/domain.tld/fullchain.pem > /usr/share/icecast/ssl/domain.tld.pem
#Append privkey to Icecast certificate
cat /etc/letsencrypt/live/domain.tld/privkey.pem >> /usr/share/icecast/ssl/domain.tld.pem
I ended up moving to Icecast-KH because they don not require combined certificates, it handles encryption much better as you can use the same port for both http and https and other encryption improvements that make it better than icecast.
From: Icecast <icecast-bounces at xiph.org> on behalf of Robert Chalmers <racuk12 at gmail.com>
Sent: Monday, March 5, 2018 5:58 AM
To: icecast at xiph.org
Subject: [Icecast] How do I combine my ssl certs?
I have https/ssl on my site ok, but it uses two certificates from letsencrypt which renew automatically every three months.
However - Icecase says.
If specified, this points to the location of a file that contains both the X.509 private and public key. This is required for HTTPS support to be enabled. Please note that the user Icecast is running as must be able to read the file. Failing to ensure this will cause a “Invalid cert file” WARN message, just as if the file wasn’t there.
So what is meant here. How do I combine my keys into a file to satisfy this?
Icecast mailing list
Icecast at xiph.org
Icecast Info Page - Xiph.Org Foundation<http://lists.xiph.org/mailman/listinfo/icecast>
While this list and IRC are preferred for user support. There is also a web forum for user support. See icecast.org for links. To see the collection of prior postings ...
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Icecast