Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Encryption Improvements to equal icecast-kh #20

Open
amavarick opened this issue Dec 25, 2017 · 0 comments
Open

Encryption Improvements to equal icecast-kh #20

amavarick opened this issue Dec 25, 2017 · 0 comments

Comments

@amavarick
Copy link

Icecast-kh implemented some wonderful improvements to their encryption. Please consider including them with this version...

  1. Their SSL is now autodetecting so you only have to define one listen-socked and NOT define ssl 1. This is big as I don't have to setup 2 separate ports.

  2. They implemented a variable called ssl-private-key which allows me not to have to combine the fullchain with the private key cert into one file. This allows me just to point to LE fullchain.pem and private.pem from within the icecast.xml file. A big deal as this confuses many of people.

  3. Allow certificate changes without requiring reboot of services. icecast-kh apparently has implemented this feature: service reload / HUP should reload ssl certificate [no downtime] karlheyes/icecast-kh#162

https://karlheyes.github.io/
8/5/2017
--autodetect SSL connections on incoming sockets. No need for in listen-socket now but is still there for compatability. (THIS IS BIG!!! We no longer need to use different ports for encrypted and unencrypted dramatically reducing complexity)
--add in to allow for combined PEM or for separate SSL key/certificate files. (THIS IS BIG TOO! No longer need a separate process after updating let's encrypt to combine your fullchain and private cert into one pem file for icecast to read it!)
--select https/http URL in autogenerated m3u based on incoming request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant