I am trying to add SSL to my Icecast2 but I always get the following error:
connection/get_ssl_certificate No SSL capability
This is the installed version:
icecast2:
Installed: 2.4.4-1
Candidate: 2.4.4-1
Version table:
2.4.4-3~bpo10+1 100
100 http://deb.debian.org/debian buster-backports/main amd64 Packages
*** 2.4.4-1 500
500 http://deb.debian.org/debian buster/main amd64 Packages
100 /var/lib/dpkg/status
2.4.4-1 500
500 http://download.opensuse.org/repositories/multimedia:/xiph/Debian_10 ./ Packages
Can someone help me?
Thanks in advance!
2
Answers
The problem was that Debian alway took the official repo instead of the XIPH repo (which supports SSL) - It was solved by changing the position of the XIPH repo over the official repo in the sources.list!
This worked for me, and now I’m streaming with HTTPS:
First: You need to know if your Icecast was compiled with SSL:
You have Icecast with SSL if it returns something like this:
If not, uninstall icecast and install first of all these dependencies, then install icecast again:
Second: (only for testing purposes, the right way is to have a cert from a Certificate Authority) Generate a self-signed certificate with openSSL:
Third: Put your certificate and private key in a single file, as Icecast requires everything in one file:
Fourth: Change the owner of this file to icecast (confirm the icecast user in your /etc/passwd):
Fifth: Paste these lines in your /etc/icecast.xml
Inside "paths" closure:
Finally: Start the service (this is how I start it in Fedora, so it can listen in port 443, don’t know why but with "systemctl start icecast" it listens only in port 8000):
That’s it, I hope it is useful!
These pages have helped me too:
https://www.icecast.org/docs/icecast-trunk/config_file/
Why Icecast2 does not want to give the stream through https?
Icecast 2 and SSL