[Icecast] Stream over SSL and chrome

[Norbert Deleutre]

I made a mistake : I have icecast 2.4.4

My certificate is concat of 

cat /etc/letsencrypt/live/stream.example.com/fullchain.pem /etc/letsencrypt/live/stream1.example.com/privkey.pem > /etc/icecast2/bundle.pem 

--------

Norbert Deleutre   <http://www.lmgc.univ-montp2.fr/perso/norbert-deleutre/>
P 0467149655  UMR CNRS 5508   <http://www.lmgc.univ-montp2.fr/>
A Campus Saint-Priest/Montpellier 

> Le 25 nov. 2020 à 14:17, Steve Matzura <sm at noisynotes.com> a écrit :
> 
> 2.2.4? I didn't think SSL was implemented until version 2.4.3.
> 
> 
> 
> What would be helpful, not to mention useful, is to explain specifically and exactly what goes into the key file. The choices are: your server's private key, your server's public key, your server's certifying authority (CA) key, maybe even the curl CA. I've also seen this in examples of the SSL stanza from icecast.xml:
> 
> 
> 
>     <ssl-certificate>/usr/local/centovacast/etc/ssl/icecast.pem</ssl-certificate>
>     <ssl-allowed-ciphers>ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS</ssl-allowed-ciphers>
> 
> 
> 
> Of course, never mind the CentovaCast bit; it's jut a location.
> 
> 
> 
> Where does this last line come from--i.e., how is it generated?
> 
> 
> 
> The same article also states that creating the PEM file requires concatenation of these three objects:
> 
> 
> 
> 1) Your private key
> 2) Your SSL cert
> 3) CA Bundle
> 
> 
> 
> I know what my private key and CA bundle is--or at least, I think I do--but what's the SSL cert? Is that my server's public key? If so, I've tried this, and it doesn't work.
> 
> 
> 
> On 11/25/2020 7:04 AM, Damien GENESTE wrote:
>> Hello Norbert,
>> 
>> I don't know how i can help you but i'm actually streaming with HTTPS under chrome.
>> My Icecast is available at : https://domainname:8443 <https://domainname:8443/> and my webplayer gets the stream at : https://domainname:8443/stream <https://domainname:8443/stream>
>> 
>> Is your server (Wordpress or other) with HTTPS ?
>> 
>> BR,
>> 
>> Ceelo
>> 
>> On Wed, Nov 25, 2020 at 10:22 AM Norbert Deleutre <norbert.deleutre at umontpellier.fr <mailto:norbert.deleutre at umontpellier.fr>> wrote:
>> Hello All,
>> 
>> I had installed icecast2.2.4 with openSSL.
>> I created a wordpress web site with SSL.
>> If I stream with HTTPS under chrome , the player don’t work.
>> If I stream without yes !
>> 
>> Could you please help me ?
>> 
>> Thanks
>> 
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20201125/0c8c1f72/attachment.htm>