[Icecast] Still Struggling with Secure Connections

[Yahav Shasha]

 > openssl req -newkey rsa:2048 -new -nodes -x509 -days 3650 -keyout
key.pem -out cert.pem
This will produce a csr file, not an actual certificate, you use this csr
file to generate an actual certificate which you can use with Icecast.
If you're interested in ssl certificate just for testing you can generate a
self signed cert:
https://devopscube.com/create-self-signed-certificates-openssl/
For production you'll need to acquire a certificate from a trusted CA
though.



On Mon, Feb 6, 2023 at 10:24 AM _zer0_ gravity <zer0___ at hotmail.com> wrote:

> Which version of Icecast are you running and from which repo did you
> install it?
> I always used the xiph repo:
> http://download.opensuse.org/repositories/multimedia:/xiph/
> as for example on at least older Debian versions the one on the official
> repos were NOT compiled with ssl support.
>
> Cheers, Paul
>
> -----Oorspronkelijk bericht-----
> Van: Icecast <icecast-bounces at xiph.org> Namens Steve Matzura
> Verzonden: Monday, 6 February 2023 04:35
> Aan: Icecast streaming server user discussions <icecast at xiph.org>
> Onderwerp: [Icecast] Still Struggling with Secure Connections
>
> I made a special pair of keys just for Icecast with this command:
>
> $ openssl req -newkey rsa:2048 -new -nodes -x509 -days 3650 -keyout
> key.pem -out cert.pem
>
> I combined the two files like this:
>
> $ cat cert.pem key.pem > icecast.pem
>
> I placed icecast.pem in /etc/icecast2 and used 'chown icecast2:icecast
> icecast.pem' to change owner to icecast2:icecast.
>
> I also changed its protection to 600 with 'chmod 600 icecast.pem' since it
> does contain a private key.
>
>
> The listen socket has SSL enabled:
>
>
> <ssl>1</ssl>
>
>
> I check <paths> in icecast.xml:
>
> <ssl-certificate>/etc/icecast2/icecast.pem</ssl-certificate>
>
> I reloaded the configuration:
>
> $ /etc/init.d/icecast2 reload
>
> Tested with:
>
> https://theglobalvoice.info:8443/broadband
>
>
> Same PR_END_OF_FILE error.
>
>
> I'm stumped.
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast
>


-- 
Yahav Shasha,
Web Developer
+972-(0)549214421
http://www.linkedin.com/in/yahavs
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20230206/2bf6b759/attachment.htm>