Re: Problem with SSL
Ervin Bizjak <[email protected]> Sun, 12 Jan 2025 20:49:44 +0100
| Newsgroups | gmane.comp.audio.icecast.general |
|---|---|
| Message-ID | <CABDatASHzh2zen6C=aDCVU=DfzkbKUoKw1GY_Q42q1yCCXa=vQ@mail.gmail.com> |
--===============8081660998198413371== Content-Type: multipart/alternative; boundary="000000000000ccccc9062b87a1c7" --000000000000ccccc9062b87a1c7 Content-Type: text/plain; charset="UTF-8" I don't need SSL in localhost. Icecast runs on my computer, without a website or domain. The stream is accessible to the public via IP address. Why SSL? Because Chrome no longer supports http connections. I don't mean two different radios, but one, which is now accessible on 8080, and from now on it would only be on 8443. Is there perhaps another solution? Ervin V V ned., 12. jan. 2025 ob 20:18 je oseba Thomas Schmidt < [email protected]> napisala: > Hi Ervin! > > > The problem is that it shows the same number of listeners on both > connections. > > > My configuration is: > > <!-- You may have multiple <listener> elements --> > > <listen-socket> > > <port>8080</port> > > <!-- <bind-address>127.0.0.1</bind-address> --> > > <!-- <shoutcast-mount>/stream</shoutcast-mount> --> > > </listen-socket> > > > > <listen-socket> > > <port>8443</port> > > <ssl>1</ssl> > > </listen-socket> > > This configuration simply opens two ports for the exact same server. > If you need independent radio stations and listeners on both ports, > you have to start Icecast twice. > > Why do you need SSL on a local Icecast? Keep in mind the SSL > implementation of Icecast is very buggy. For example, some connections > never close, keeping them locked forever. > https://gitlab.xiph.org/xiph/icecast-server/-/issues/2445 > You should use Icecast without SSL and usually for security reasons > only on machines like localhost. > > Thomas > _______________________________________________ > Icecast mailing list > [email protected] > http://lists.xiph.org/mailman/listinfo/icecast > --000000000000ccccc9062b87a1c7 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-size:large">I d= on't need SSL in localhost. Icecast runs on my computer, without a webs= ite or domain. The stream is accessible to the public via IP address.<br><b= r>Why SSL? Because Chrome no longer supports http connections.<br><br>I don= 't mean two different radios, but one, which is now accessible on 8080,= and from now on it would only be on 8443.</div><div class=3D"gmail_default= " style=3D"font-size:large"><br></div><div class=3D"gmail_default" style=3D= "font-size:large"> <span class=3D"gmail-HwtZe" lang=3D"en"><span class=3D"gmail-jCAhz gmail-Ch= Mk0b"><span class=3D"gmail-ryNqvb">Is there perhaps another solution?</span= ></span></span></div><div class=3D"gmail_default" style=3D"font-size:large"= ><span class=3D"gmail-HwtZe" lang=3D"en"><span class=3D"gmail-jCAhz gmail-C= hMk0b"><span class=3D"gmail-ryNqvb"><br></span></span></span></div><div cla= ss=3D"gmail_default" style=3D"font-size:large"><span class=3D"gmail-HwtZe" = lang=3D"en"><span class=3D"gmail-jCAhz gmail-ChMk0b"><span class=3D"gmail-r= yNqvb">Ervin<br></span></span></span> </div></div><br><div class=3D"gmail_quote gmail_quote_container"><div dir= =3D"ltr" class=3D"gmail_attr">V V ned., 12. jan. 2025 ob 20:18 je oseba Tho= mas Schmidt <<a href=3D"mailto:[email protected]">[email protected]= e</a>> napisala:<br></div><blockquote class=3D"gmail_quote" style=3D"mar= gin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1= ex">Hi Ervin!<br> <br> > The problem is that it shows the same number of listeners on both conn= ections.<br> <br> > My configuration is:<br> >=C2=A0 =C2=A0 <!-- You may have multiple <listener> elements -= -><br> >=C2=A0 =C2=A0 =C2=A0<listen-socket><br> >=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<port>8080</port><br> >=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<!-- <bind-address>127.0.0.1= </bind-address> --><br> >=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<!-- <shoutcast-mount>/strea= m</shoutcast-mount> --><br> >=C2=A0 =C2=A0 =C2=A0</listen-socket><br> ><br> >=C2=A0 =C2=A0 =C2=A0<listen-socket><br> >=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<port>8443</port><br> >=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<ssl>1</ssl><br> >=C2=A0 =C2=A0 =C2=A0</listen-socket><br> <br> This configuration simply opens two ports for the exact same server.<br> If you need independent radio stations and listeners on both ports,<br> you have to start Icecast twice.<br> <br> Why do you need SSL on a local Icecast? Keep in mind the SSL<br> implementation of Icecast is very buggy. For example, some connections<br> never close, keeping them locked forever.<br> <a href=3D"https://gitlab.xiph.org/xiph/icecast-server/-/issues/2445" rel= =3D"noreferrer" target=3D"_blank">https://gitlab.xiph.org/xiph/icecast-serv= er/-/issues/2445</a><br> You should use Icecast without SSL and usually for security reasons<br> only on machines like localhost.<br> <br> Thomas<br> _______________________________________________<br> Icecast mailing list<br> <a href=3D"mailto:[email protected]" target=3D"_blank">[email protected]</a><= br> <a href=3D"http://lists.xiph.org/mailman/listinfo/icecast" rel=3D"noreferre= r" target=3D"_blank">http://lists.xiph.org/mailman/listinfo/icecast</a><br> </blockquote></div> --000000000000ccccc9062b87a1c7-- --===============8081660998198413371== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Icecast mailing list [email protected] http://lists.xiph.org/mailman/listinfo/icecast --===============8081660998198413371==--