<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Walter,<div class="">Brilliant. I’ll have to have a look at KH. Too many moving parts being collected in this one.</div><div class="">Nice little shell script will do the concat nicely meantime. I like the idea of just using the one port for both. In which case I’ll stick with the https port. I have content policy etc enabled on that site.</div><div class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 6 Mar 2018, at 14:47, Walter York <<a href="mailto:walteryork@hotmail.com" class="">walteryork@hotmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div id="divtagdefaultwrapper" dir="ltr" style="font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; font-size: 12pt; font-family: Calibri, Helvetica, sans-serif;" class=""><div style="margin-top: 0px; margin-bottom: 0px;" class="">Robert,</div><div style="margin-top: 0px; margin-bottom: 0px;" class=""><br class=""></div><div style="margin-top: 0px; margin-bottom: 0px;" class="">There is a github repo that will create and then another script to renew your Let's Encrypt Certs for Icecast. The commands are well documented to help you customize for your specific implementation.</div><div style="margin-top: 0px; margin-bottom: 0px;" class=""><br class=""></div><div style="margin-top: 0px; margin-bottom: 0px;" class=""><u class="">The Repo is here</u>:</div><div style="margin-top: 0px; margin-bottom: 0px;" class=""><a href="https://github.com/amavarick/letsencrypt_certbot_standalone_icecast" class="OWAAutoLink" id="LPlnk861994" previewremoved="true">https://github.com/amavarick/letsencrypt_certbot_standalone_icecast</a><br class=""><br class=""></div><div style="margin-top: 0px; margin-bottom: 0px;" class=""><u style="font-size: 12pt;" class="">The commands to concatenate the certs are</u><span style="font-size: 12pt;" class="">:</span><br class=""></div><div style="margin-top: 0px; margin-bottom: 0px;" class="">#Replace domain.tld for the name of your domain as setup in Let's Encrypt.</div><p style="margin-top: 0px; margin-bottom: 0px;" class=""></p><div class="">#Append FullChain to Icecast certificate</div><div class="">cat /etc/letsencrypt/live/domain.tld/fullchain.pem > /usr/share/icecast/ssl/domain.tld.pem</div><div class="">#Append privkey to Icecast certificate</div><div class="">cat /etc/letsencrypt/live/domain.tld/privkey.pem >> /usr/share/icecast/ssl/domain.tld.pem</div><br class=""><p style="margin-top: 0px; margin-bottom: 0px;" class=""></p>I ended up moving to Icecast-KH because they don not require combined certificates, it handles encryption much better as you can use the same port for both http and https and other encryption improvements that make it better than icecast.<br class=""><br class=""><div style="" class=""><hr tabindex="-1" style="display: inline-block; width: 627.1875px;" class=""><div id="divRplyFwdMsg" dir="ltr" class=""><font face="Calibri, sans-serif" style="font-size: 11pt;" class=""><b class="">From:</b><span class="Apple-converted-space"> </span>Icecast <<a href="mailto:icecast-bounces@xiph.org" class="">icecast-bounces@xiph.org</a>> on behalf of Robert Chalmers <<a href="mailto:racuk12@gmail.com" class="">racuk12@gmail.com</a>><br class=""><b class="">Sent:</b><span class="Apple-converted-space"> </span>Monday, March 5, 2018 5:58 AM<br class=""><b class="">To:</b><span class="Apple-converted-space"> </span><a href="mailto:icecast@xiph.org" class="">icecast@xiph.org</a><br class=""><b class="">Subject:</b><span class="Apple-converted-space"> </span>[Icecast] How do I combine my ssl certs?</font><div class=""> </div></div><div class="BodyFragment"><font size="2" class=""><span style="font-size: 11pt;" class=""><div class="PlainText"><br class="">I have https/ssl on my site ok, but it uses two certificates from letsencrypt which renew automatically every three months.<br class="">However - Icecase says.<br class=""><br class="">ssl-certificate<br class="">If specified, this points to the location of a file that contains both the X.509 private and public key. This is required for HTTPS support to be enabled. Please note that the user Icecast is running as must be able to read the file. Failing to ensure this will cause a “Invalid cert file” WARN message, just as if the file wasn’t there.<br class=""><br class="">So what is meant here. How do I combine my keys into a file to satisfy this?<br class=""><br class="">Thanks<br class="">Robert<br class="">_______________________________________________<br class="">Icecast mailing list<br class=""><a href="mailto:Icecast@xiph.org" class="">Icecast@xiph.org</a><br class=""><a href="http://lists.xiph.org/mailman/listinfo/icecast" id="LPlnk167163" previewremoved="true" class="">http://lists.xiph.org/mailman/listinfo/icecast</a><div id="LPBorder_GT_15203469179720.7020508395550349" style="margin-bottom: 20px; overflow: auto; width: 640px; text-indent: 0px;" class=""><table id="LPContainer_15203469179690.49976096619139354" role="presentation" cellspacing="0" style="width: 576px; background-color: rgb(255, 255, 255); position: relative; overflow: auto; padding-top: 20px; padding-bottom: 20px; margin-top: 20px; border-top-width: 1px; border-top-style: dotted; border-top-color: rgb(200, 200, 200); border-bottom-width: 1px; border-bottom-style: dotted; border-bottom-color: rgb(200, 200, 200);" class=""><tbody class=""><tr valign="top" style="border-spacing: 0px;" class=""><td id="TextCell_15203469179700.05183151485232762" colspan="2" style="vertical-align: top; position: relative; padding: 0px; display: table-cell;" class=""><div id="LPRemovePreviewContainer_15203469179700.8933357700197573" class=""></div><div id="LPTitle_15203469179700.5946707424430151" style="top: 0px; color: rgb(0, 120, 215); font-weight: 400; font-size: 21px; font-family: wf_segoe-ui_light, "Segoe UI Light", "Segoe WP Light", "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; line-height: 21px;" class=""><a id="LPUrlAnchor_15203469179700.522409118972198" href="http://lists.xiph.org/mailman/listinfo/icecast" target="_blank" style="text-decoration: none;" class="">Icecast Info Page - Xiph.Org Foundation</a></div><div id="LPMetadata_15203469179700.469582500805535" style="margin: 10px 0px 16px; color: rgb(102, 102, 102); font-weight: 400; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; font-size: 14px; line-height: 14px;" class=""><a href="http://lists.xiph.org/" class="">lists.xiph.org</a></div><div id="LPDescription_15203469179710.40966897768039034" style="display: block; color: rgb(102, 102, 102); font-weight: 400; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; font-size: 14px; line-height: 20px; max-height: 100px; overflow: hidden;" class="">While this list and IRC are preferred for user support. There is also a web forum for user support. See<span class="Apple-converted-space"> </span><a href="http://icecast.org/" class="">icecast.org</a><span class="Apple-converted-space"> </span>for links. To see the collection of prior postings ...</div></td></tr></tbody></table></div><br class=""><br class=""></div></span></font></div></div></div><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">_______________________________________________</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Icecast mailing list</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="mailto:Icecast@xiph.org" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">Icecast@xiph.org</a><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="http://lists.xiph.org/mailman/listinfo/icecast" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">http://lists.xiph.org/mailman/listinfo/icecast</a></div></blockquote></div><br class=""><div class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;">Robert Chalmers<br class=""><a href="https://robert-chalmers.uk" class="">https://robert-chalmers.uk</a><br class="">author@robert-chalmers.uk<br class="">@R_A_Chalmers</div></div>
</div>
<br class=""></div></body></html>