Arch Linux

tony5429

Member

Registered: 2006-03-28

Posts: 1,017

How to Enable SSL for Icecast

I have an active Icecast server providing unencrypted audio through port 8000. I'd like to switch it to use SSL, but whenever I try it seems to continue streaming only the unencrypted audio.

To create the public and private keys, concatenate them, and store the file in /usr/share/icecast/ I'm running:

openssl req -x509 -newkey rsa:4096 -keyout key.pem -out icecast.pem -nodes -days 365
cat key.pem >> icecast.pem
mv icecast.pem /usr/share/icecast/.

From my /etc/icecast.xml I have the default:

<ssl-certificate>/usr/share/icecast/icecast.pem</ssl-certificate>

And just under the <port>8000</port> I added <ssl>1</ssl>.

Then after the changes I reload the daemon with "systemctl reload icecast".

However, after doing this, the stream is still only available at the http address. The equivalent https URL fails to load... Any ideas?

Last edited by tony5429 (2017-05-28 22:54:23)

tony5429

Member

Registered: 2006-03-28

Posts: 1,017

Re: How to Enable SSL for Icecast

I wonder if the real issue is not with the client I'm using, ezstream. When I specify an https URL in the config file I pass to it, I get this error:

ezstream: Error: Invalid <url>: Not an HTTP address
Must be of the form ``http://server:port/mountpoint''

Last edited by tony5429 (2017-05-29 13:13:47)