<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p style="margin-top:0;margin-bottom:0">Robert,</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">There is a github repo that will create and then another script to renew your Let's Encrypt Certs for Icecast. The commands are well documented to help you customize for your specific implementation.</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0"><u>The Repo is here</u>:</p>
<p style="margin-top:0;margin-bottom:0"><a href="https://github.com/amavarick/letsencrypt_certbot_standalone_icecast" class="OWAAutoLink" id="LPlnk861994" previewremoved="true">https://github.com/amavarick/letsencrypt_certbot_standalone_icecast</a><br>
<br>
</p>
<p style="margin-top:0;margin-bottom:0"><u style="font-size: 12pt;">The commands to concatenate the certs are</u><span style="font-size: 12pt;">:</span><br>
</p>
<p style="margin-top:0;margin-bottom:0">#Replace domain.tld for the name of your domain as setup in Let's Encrypt.</p>
<p style="margin-top:0;margin-bottom:0"></p>
<div>#Append FullChain to Icecast certificate</div>
<div>cat /etc/letsencrypt/live/domain.tld/fullchain.pem > /usr/share/icecast/ssl/domain.tld.pem</div>
<div>#Append privkey to Icecast certificate</div>
<div>cat /etc/letsencrypt/live/domain.tld/privkey.pem >> /usr/share/icecast/ssl/domain.tld.pem</div>
<br>
<p></p>
I ended up moving to Icecast-KH because they don not require combined certificates, it handles encryption much better as you can use the same port for both http and https and other encryption improvements that make it better than icecast.<br>
<br>
<div style="color: rgb(0, 0, 0);">
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Icecast <icecast-bounces@xiph.org> on behalf of Robert Chalmers <racuk12@gmail.com><br>
<b>Sent:</b> Monday, March 5, 2018 5:58 AM<br>
<b>To:</b> icecast@xiph.org<br>
<b>Subject:</b> [Icecast] How do I combine my ssl certs?</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText"><br>
I have https/ssl on my site ok, but it uses two certificates from letsencrypt which renew automatically every three months.<br>
However - Icecase says.<br>
<br>
ssl-certificate<br>
If specified, this points to the location of a file that contains both the X.509 private and public key. This is required for HTTPS support to be enabled. Please note that the user Icecast is running as must be able to read the file. Failing to ensure this
will cause a “Invalid cert file” WARN message, just as if the file wasn’t there.<br>
<br>
So what is meant here. How do I combine my keys into a file to satisfy this?<br>
<br>
Thanks<br>
Robert<br>
_______________________________________________<br>
Icecast mailing list<br>
Icecast@xiph.org<br>
<a href="http://lists.xiph.org/mailman/listinfo/icecast" id="LPlnk167163" previewremoved="true">http://lists.xiph.org/mailman/listinfo/icecast</a>
<div id="LPBorder_GT_15203469179720.7020508395550349" style="margin-bottom: 20px; overflow: auto; width: 100%; text-indent: 0px;">
<table id="LPContainer_15203469179690.49976096619139354" role="presentation" cellspacing="0" style="width: 90%; background-color: rgb(255, 255, 255); position: relative; overflow: auto; padding-top: 20px; padding-bottom: 20px; margin-top: 20px; border-top: 1px dotted rgb(200, 200, 200); border-bottom: 1px dotted rgb(200, 200, 200);">
<tbody>
<tr valign="top" style="border-spacing: 0px;">
<td id="TextCell_15203469179700.05183151485232762" colspan="2" style="vertical-align: top; position: relative; padding: 0px; display: table-cell;">
<div id="LPRemovePreviewContainer_15203469179700.8933357700197573"></div>
<div id="LPTitle_15203469179700.5946707424430151" style="top: 0px; color: rgb(0, 120, 215); font-weight: 400; font-size: 21px; font-family: wf_segoe-ui_light, "Segoe UI Light", "Segoe WP Light", "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; line-height: 21px;">
<a id="LPUrlAnchor_15203469179700.522409118972198" href="http://lists.xiph.org/mailman/listinfo/icecast" target="_blank" style="text-decoration: none;">Icecast Info Page - Xiph.Org Foundation</a></div>
<div id="LPMetadata_15203469179700.469582500805535" style="margin: 10px 0px 16px; color: rgb(102, 102, 102); font-weight: 400; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; font-size: 14px; line-height: 14px;">
lists.xiph.org</div>
<div id="LPDescription_15203469179710.40966897768039034" style="display: block; color: rgb(102, 102, 102); font-weight: 400; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; font-size: 14px; line-height: 20px; max-height: 100px; overflow: hidden;">
While this list and IRC are preferred for user support. There is also a web forum for user support. See icecast.org for links. To see the collection of prior postings ...</div>
</td>
</tr>
</tbody>
</table>
</div>
<br>
<br>
</div>
</span></font></div>
</div>
</div>
</body>
</html>