[Icecast] Still Struggling with Secure Connections
Steve Matzura
sm at noisynotes.com
Mon Feb 6 03:34:40 UTC 2023
I made a special pair of keys just for Icecast with this command:
$ openssl req -newkey rsa:2048 -new -nodes -x509 -days 3650 -keyout
key.pem -out cert.pem
I combined the two files like this:
$ cat cert.pem key.pem > icecast.pem
I placed icecast.pem in /etc/icecast2 and used 'chown icecast2:icecast
icecast.pem' to change owner to icecast2:icecast.
I also changed its protection to 600 with 'chmod 600 icecast.pem' since
it does contain a private key.
The listen socket has SSL enabled:
<ssl>1</ssl>
I check <paths> in icecast.xml:
<ssl-certificate>/etc/icecast2/icecast.pem</ssl-certificate>
I reloaded the configuration:
$ /etc/init.d/icecast2 reload
Tested with:
https://theglobalvoice.info:8443/broadband
Same PR_END_OF_FILE error.
I'm stumped.
More information about the Icecast
mailing list