<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<!-- Template generated by Exclaimer Mail Disclaimers on 12:50:50 Friday, 22 September 2017 -->
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css">P.ac408a51-68c5-463b-9cc9-a8deac39e82d {
MARGIN: 0cm 0cm 0pt
}
LI.ac408a51-68c5-463b-9cc9-a8deac39e82d {
MARGIN: 0cm 0cm 0pt
}
DIV.ac408a51-68c5-463b-9cc9-a8deac39e82d {
MARGIN: 0cm 0cm 0pt
}
TABLE.ac408a51-68c5-463b-9cc9-a8deac39e82dTable {
MARGIN: 0cm 0cm 0pt
}
DIV.Section1 {
page: Section1
}
</style>
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<p class="ac408a51-68c5-463b-9cc9-a8deac39e82d"></p>
<div class="WordSection1">
<p class="MsoNormal">I have been trying to get icecast 2.4.2 to stream with ssl to https. But so far I have had no luck.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I am running Ubuntu 16.04 and the regular stream is working properly over port 80. I want to stream securely over port 443. I need to use 443 because of network rules here. I can view the Icecast2 Status pages and listen to a stream, but
once I add https:// I get 'Secure Connection Failed' on Firefox and 'This site can’t be reached' from Chrome. Both can view and stream non-ssl content.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have tried both a Digicert and a self-signed cert. I have followed the pem rules from Digicert. I have set the permissions to the user Icecast2 from the group Icecast. I have read almost everything on this and I have tried Walter York's
instructions to pre-install a number of packages that icecast needs to successfully enable ssl. I have placed the cert files in the same directory as the icecast.xml file. Here are the details regarding the ssl portions of the XML config file.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">...<o:p></o:p></p>
<p class="MsoNormal"> <!-- You may have multiple <listener> elements --><o:p></o:p></p>
<p class="MsoNormal"> <listen-socket><o:p></o:p></p>
<p class="MsoNormal"> <port>80</port><o:p></o:p></p>
<p class="MsoNormal"> <!-- <shoutcast-mount>/stream</shoutcast-mount> --><o:p></o:p></p>
<p class="MsoNormal"> </listen-socket><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"> <listen-socket><o:p></o:p></p>
<p class="MsoNormal"> <port>443</port><o:p></o:p></p>
<p class="MsoNormal"> <ssl>1</ssl><o:p></o:p></p>
<p class="MsoNormal"> </listen-socket><o:p></o:p></p>
<p class="MsoNormal">...<o:p></o:p></p>
<p class="MsoNormal"> <paths><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"> <!-- The certificate file needs to contain both public and private part.<o:p></o:p></p>
<p class="MsoNormal"> Both should be PEM encoded. --><o:p></o:p></p>
<p class="MsoNormal"> <ssl-certificate>/etc/icecast2/icecast2_new.pem</ssl-certificate><o:p></o:p></p>
<p class="MsoNormal">...<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">So, there you have it. The only anomaly with the set up was that when the VMWare instance of the site started it was running dhcp and I struggled to wrestle control away from it. And I was never able to get eth0 to work so I used same interface
name that dhcp used 'ens160'.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Any and all suggestions, recommendation, ideas, and solutions would be greatly appreciated.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks, --John<o:p></o:p></p>
</div>
<p></p>
<p class="ac408a51-68c5-463b-9cc9-a8deac39e82d" style="FONT-SIZE: 11pt; FONT-FAMILY: 'Arial Narrow'">
<font face="Calibri"></font> </p>
<p class="ac408a51-68c5-463b-9cc9-a8deac39e82d" style="FONT-SIZE: 11pt; FONT-FAMILY: 'Arial Narrow'">
<span style="font-family:Calibri; font-size:11pt; font-weight: bold; ">John</span><font face="Calibri"> </font><span style="font-family:Calibri; font-size:11pt; font-weight: bold; ">Zernick</span><span style="font-family:Calibri; font-size:11pt; font-weight: bold; "></span><font face="Calibri"> |
</font><span style="font-family:Calibri; font-size:11pt; ">Senior Systems Administrator (Web)</span><font face="Calibri">| <span style="font-family:Calibri; font-size:11pt; font-style: normal; ">D: (216) 916-6472</span></font><font face="Calibri">
</font><span style="font-family:Calibri; font-size:11pt; "></span><span style="font-family:Calibri; font-size:11pt; ">| F: (216) 916-6473</span><a href="http://www.ideastream.org"><font face="Calibri"></font></a><font face="Calibri"> </font></p>
<p class="ac408a51-68c5-463b-9cc9-a8deac39e82d" style="FONT-SIZE: 11pt; FONT-FAMILY: 'Arial Narrow'">
<font face="Calibri"> Idea Center | 1375 Euclid | Cleveland OH 44115</font></p>
<p class="ac408a51-68c5-463b-9cc9-a8deac39e82d" style="FONT-SIZE: 11pt; FONT-FAMILY: 'Arial Narrow'">
<font face="Calibri"></font> </p>
<p class="ac408a51-68c5-463b-9cc9-a8deac39e82d" style="FONT-SIZE: 11pt; FONT-FAMILY: 'Arial Narrow'">
<strong><font face="Calibri"> <img style="BORDER-TOP: 0px; BORDER-RIGHT: 0px; BORDER-BOTTOM: 0px; BORDER-LEFT: 0px" border="0" alt="ideastream" src="http://ideastream-production.s3.amazonaws.com/images/icons/ideastream.png" height="20"></font></strong></p>
<p class="ac408a51-68c5-463b-9cc9-a8deac39e82d" style="FONT-SIZE: 11pt; FONT-FAMILY: 'Arial Narrow'">
<strong><font face="Calibri"> The mission of ideastream is to strengthen our communities</font></strong></p>
<p class="ac408a51-68c5-463b-9cc9-a8deac39e82d" style="FONT-SIZE: 11pt; FONT-FAMILY: Calibri">
Follow us on <a href="http://www.ideastream.org/engage/facebook">Facebook</a> and
<a href="http://www.ideastream.org/engage/twitter">Twitter</a></p>
<p class="ac408a51-68c5-463b-9cc9-a8deac39e82d" style="FONT-SIZE: 11pt; FONT-FAMILY: 'Arial Narrow'">
<font face="Calibri"> Explore what you love, discover even more at <a href="http://www.ideastream.org">
ideastream.org</a></font></p>
<p class="ac408a51-68c5-463b-9cc9-a8deac39e82d"></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
<p></p>
</body>
</html>