Icecast - Jul 2016 - ssl-cert's

I am not familiar with the usage of SSL-Certs (in Icecast).
I'd recommend to put them somewhere into a folder the webserver has
access to.
Don't forget to change ownership and mode etc.

check this out about you problem with the files ->
http://stackoverflow.com/questions/991758/how-to-get-an-openssl-pem-file-from-key-and-crt-files

This tech chat between buddylove and others is all going totally over my head.
I just need someone to walk me through it step by step like I'm trying to
land a plane since the directions on the icecast site are Greek to me.
Thanks for Any help!



Sent on my Boost Mobile Samsung Galaxy S® 5


-------- Original message --------
From: buddylove <bluntroller at yandex.com>
Date: 7/11/16 2:56 AM (GMT-05:00)
To: Icecast streaming server user discussions <icecast at xiph.org>
Subject: Re: [Icecast] ssl-cert's

I am not familiar with the usage of SSL-Certs (in Icecast).
I'd recommend to put them somewhere into a folder the webserver has
access to.
Don't forget to change ownership and mode etc.

check this out about you problem with the files ->
http://stackoverflow.com/questions/991758/how-to-get-an-openssl-pem-file-from-key-and-crt-files
_______________________________________________
Icecast mailing list
Icecast at xiph.org
http://lists.xiph.org/mailman/listinfo/icecast
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.xiph.org/pipermail/icecast/attachments/20160711/9d17212f/attachment.html>

Hi Roger

sorry if I bothered you or even mislead you with some former post.
With respect to IT I have totally different topics in my head than the
'Icecast-thing'. It's history for me already quite a while and the
work
I invested in making
it running disgusted me.
Please consider that English is not my mother-language and even if my
English is
good, it's not perfect or without mistakes.

Where you put your certs and stuff isn't really of any importance
because by the correct masking you can hide them - even in a folder
where the webserver has access too. Security comes not by putting files
in some folder or not (even jails), Security comes as a whole but that's
another topic and the deeper I dig into it the
more distant I get from your problem. Also there are always and everywhere
people disagreeing, trying to put their own mustard on the sausage.

Nice bla interlude isn't it.

My recommendation and without crawling in my resources and the ones in
the web
here my advice:

1. check your cert files
2. download and read the suitable manual to your icecast-server
3. check the linkage between the files (icecast.xml <-> cert-files)
4. check the ownership and mode of the files and folders
(icecast:icecast, 740)
5. check the linkage to the pid-file

additionally you can
4.
    . check the webservers configs
    . if the ssl mod is loaded
    . if ssl is enable in the webserver of your choice

Even if the other nerd around mentioned correct that the webserver
usually has
no meaning in that scenario...
Can you set up the webserver (or any other similar application) you use
to use
your certs, are they working?


There should usually not be more to do than that.
I never set up a ssl-connection with my stream (for what?
superfluous...) so I
can't really report out of my experiences.