[Icecast] Still Struggling with Secure Connections

Steve Matzura sm at noisynotes.com
Mon Feb 6 03:34:40 UTC 2023


I made a special pair of keys just for Icecast with this command:

$ openssl req -newkey rsa:2048 -new -nodes -x509 -days 3650 -keyout 
key.pem -out cert.pem

I combined the two files like this:

$ cat cert.pem key.pem > icecast.pem

I placed icecast.pem in /etc/icecast2 and used 'chown icecast2:icecast 
icecast.pem' to change owner to icecast2:icecast.

I also changed its protection to 600 with 'chmod 600 icecast.pem' since 
it does contain a private key.


The listen socket has SSL enabled:


<ssl>1</ssl>


I check <paths> in icecast.xml:

<ssl-certificate>/etc/icecast2/icecast.pem</ssl-certificate>

I reloaded the configuration:

$ /etc/init.d/icecast2 reload

Tested with:

https://theglobalvoice.info:8443/broadband


Same PR_END_OF_FILE error.


I'm stumped.



More information about the Icecast mailing list