<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<div dir="auto">I use Let's Encrypt for SSL with icecast. Here is my rudimentary script on GitHub... It does NOT require Apache or nginx.<br>
<br>
</div>
<div dir="auto"><a href="https://github.com/amavarick/letsencrypt_certbot_standalone_icecast">https://github.com/amavarick/letsencrypt_certbot_standalone_icecast</a><br>
<br>
</div>
<div class="gmail_quote">On Jul 10, 2017, at 9:39 AM, ScanCaster <<a href="mailto:scancaster@scancaster.net" target="_blank">scancaster@scancaster.net</a>> wrote:
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<pre class="blue">On Mon, 10 Jul 2017 09:31:06 +0000, Philipp Schafft wrote:<br><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> Good morning,<br> The <ssl-certificate> belongs in the <paths> section of the config file.<br> (I'm not sure what you mean with 'in same', just wanted to make it<br> clear.)</blockquote><br><br>"in same" = in same file, icecast.xml<br><br><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> The format is the OpenSSL format: key, blank line, cert (chain). echo |<br> cat key.pem - cert.pem > combo.pem<br></blockquote><br>Thats what I needed to verify...<br><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> kill -HUP pidOfIcecast<br></blockquote> <br> As of Icecast2 2.4.x you need to restart Icecast to reload the cert.<br> There is however a fix in 2.5.x (development) which is hopefully<br> released with the next development update.<br></blockquote><br>Unfortunately, for our setup, a change for "security" reasons affects our <br>operations, in that metadata is not accepted from an IP which is not the <br>sources IP. We have server wide metadata that is written to our sources <br>at times. So we have to stick to a version prior to this, 2.4.2 or so or <br>all our scripts break. If there is an option to allow an override of <br>this, we would look to update, but if not, the server wide metadata is <br>more important.<br><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> Sure. Just put it into the webroot (<webroot> in <paths>). Icecast<br> handles files in webroot according to your operating system's mine-type<br> table.<br></blockquote><br>Yeah, I dumped an old test file in there from an old domain, and tried <br>it, worked, fine... a little redir 80 to 8000 and that will suffice.<br><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> Icecast only processes XSLT files as XSLT.<br></blockquote><br>Just like to verify, since I never touched any thing in that server.<br><br><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> To avoid the need to run Icecast as privileged user in oder to bind to<br> low ports (if Comodo really insists in using port 80) you can use your<br> firewall to do a local redirect.<br> <br></blockquote> We can do a redir via some software, but yes, Comodo insists that is <br>either on 80 or 443 if you do their web based verification. The DNS one <br>on 53, I've never ever got to work. I personally think they are too quick <br>to look and then give up on looking at the DNS server for their TXT <br>record and/or don't pull it direct from the DNS server with authority <br>which would show the change immediately. Don't know, except that its been <br>100% failure when trying to use it.<br><br>Thanks.<br><br><hr><br>Icecast mailing list<br>Icecast@xiph.org<br><a href="http://lists.xiph.org/mailman/listinfo/icecast">http://lists.xiph.org/mailman/listinfo/icecast</a><br></pre>
</blockquote>
</div>
</body>
</html>