Hi Nanda,

We are running Icecast on SSL, check out the attached config file.

And better choose the Karl Heyes branch:
https://github.com/karlheyes/icecast-kh

Just download, compile and install the latest comit.
No extra config parameters need to be set, ssl is enabled by default.

Like Nolan said, a crucial part is to get the content ssl-certificate file right:
/etc/ssl/private/domain.ext/domain_ext.pem

Good luck!

Best regards,

Sven

Op 11-4-2018 om 13:47 schreef Nanda Kishor:
Hi there,

I'm working with Sandeep on this issue. Everything is working fine without SSL enabled, not sure what we're missing here.

Does anybody have SSL enabled and would be willing to share his or her Icecast config? We should probably also post this on the Icecast mailing list 😬

Best,
NKd

On 06.04.18 10:12, sandeep krishna wrote:

i recompiled icecast2 with the open ssl and curl


also enabled ssl on port 8000 and given the ssl cert (inclding cert privatekey and bundle in a single file) under path directive

these are the main section in icecast2 config file
++

<listen-socket>
<port>8000</port>
<ssl>1</ssl>

</listen-socket>

<paths>

<basedir>/c</basedir>
<ssl-certificate>/usr/share/icecast2/icecast.pem</ssl-certificate>
<logdir>/var/log/icecast2</logdir>
<webroot>/usr/share/icecast2/web</webroot>
<adminroot>/usr/share/icecast2/admin</adminroot></paths>

++++

I get a green padlock on domain:8000/radio

But it says file not found, the error log says icecast is looking on the location "/usr/share/icecast2/web" and file is not found there. (I even tried removing the base dire and webroot but still not working )


can you guys shed some lights on this.


~thanks



--
sandeep



------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot



_______________________________________________
Savonet-users mailing list
Savonet-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/savonet-users

<?xml version="1.0"?>
<icecast>
    <limits>
        <clients>500</clients>
        <sources>50</sources>
        <!-- Set larger than burst-size to prevent client disconnection, default 512k - was 1048576 -->
        <queue-size>1048576</queue-size>
        <!-- Be specific on how much to burst - default 64k - Applies to all mountpoints, was 943718 -->
        <burst-size>943718</burst-size>
        <client-timeout>30</client-timeout>
        <header-timeout>15</header-timeout>
        <source-timeout>10</source-timeout>
    </limits>
    <authentication>
        <!-- Sources log in with username 'source' -->
        <source-password>xxxxxxxxxx</source-password>
        <!-- Relays log in username 'relay' -->
        <relay-password>yyyyyyyyyy</relay-password>
        <!-- Admin logs in with the username given below -->
        <admin-user>admin</admin-user>
        <admin-password>hackme</admin-password>
    </authentication>
    <!-- Hostname affects mainly the urls generated by Icecast for playlists and yp listings. -->
    <location>World</location>
    <admin>u...@domain.com</admin>
    <fileserve>1</fileserve>
    <paths>
        <basedir>/usr/local/share/icecast</basedir>
        <logdir>/var/log/icecast</logdir>
        <webroot>/usr/local/share/icecast/web</webroot>
        <adminroot>/usr/local/share/icecast/admin</adminroot>
        <alias source="/admin/" dest="/admin/stats.xsl"/>
        <ssl-certificate>/etc/ssl/private/domain.ext/domain_ext.pem</ssl-certificate>
    </paths>
    <security>
        <chroot>0</chroot>
        <changeowner>
            <user>icecast2</user>
            <group>icecast</group>
        </changeowner>
    </security>
    <mount>
        <mount-name>/myname.mp3</mount-name>
        <password>xxxxxxxxxx</password>
    </mount>
    <hostname>myhost.com</hostname>
    <listen-socket>
        <port>80</port>
        <bind-address>1.222.333.444</bind-address>
    </listen-socket>
    <listen-socket>
        <port>8000</port>
        <bind-address>1.222.333.444</bind-address>
    </listen-socket>
    <listen-socket>
        <port>443</port>
        <bind-address>1.222.333.444</bind-address>
        <ssl>1</ssl>
    </listen-socket>
    <directory>
        <yp-url-timeout>15</yp-url-timeout>
        <yp-url>http://dir.xiph.org/cgi-bin/yp-cgi</yp-url>
    </directory>
    <logging>
        <accesslog>access.log</accesslog>
        <errorlog>error.log</errorlog>
        <playlistlog>playlist.log</playlistlog>
        <loglevel>2</loglevel>
        <logsize>10000</logsize>
    </logging>
</icecast>
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Savonet-users mailing list
Savonet-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/savonet-users

Reply via email to