i cant listen stream from https sll stream port.

[djcenk]

Hi
I was receive a certificate from letsencrypt free ssl service and make a setting for ini files,

sslCertificateFile=C:\Users\Administrator\Desktop\sc_2_6\sc_serv_32bit_2_6_0_753\certificate.crt
sslCertificateKeyFile=C:\Users\Administrator\Desktop\sc_2_6\sc_serv_32bit_2_6_0_753\private.key

portbase=80
alternateports=443



2019-12-01 20:52:29 INFO *********************************************************************
2019-12-01 20:52:29 INFO ** SHOUTcast Distributed Network Audio Server (DNAS) **
2019-12-01 20:52:29 INFO ** Copyright (C) 2014-2019 Radionomy SA, All Rights Reserved **
2019-12-01 20:52:29 INFO *********************************************************************
2019-12-01 20:52:29 INFO [MAIN] SHOUTcast DNAS/win32 v2.6.0.750 (Dec 7 2018)
2019-12-01 20:52:29 INFO [MAIN] PID: 20432
2019-12-01 20:52:29 INFO [MAIN] Saving log output to `C:\Users\Administrator\Desktop\sc_2_6\sc_serv_32bit_2_6_0_753\Getir68.log'
2019-12-01 20:52:29 INFO [MAIN] Automatic log rotation interval: 1 day
2019-12-01 20:52:29 INFO [MAIN] Loaded config from `C:\Users\Administrator\Desktop\sc_2_6\sc_serv_32bit_2_6_0_753\Getir68.ini'
2019-12-01 20:52:29 INFO [MAIN] Calculated CPU count is 24 -> 10 CPUs specified to be used
2019-12-01 20:52:29 INFO failed to get a static unique number, falling back to random sequence
2019-12-01 20:52:29 DEBUG ident is DIDC93e41c6e20911b9b36bc7ce94edc67-80, DID is 2f4e5f7dbaf25afc1e9d97cf9cdac94909e5ff6e974198068cbd3ef3b7de75f
2019-12-01 20:52:29 INFO [MAIN] SSL keys installed
2019-12-01 20:52:29 INFO [MAIN] Starting 10 network threads
2019-12-01 20:52:29 INFO [BAN] Banned 0 IP's from global ban file
2019-12-01 20:52:29 INFO [MICROSERVER] Listening for source and client connections on port 80
2019-12-01 20:52:29 INFO [MICROSERVER] Listening for legacy source connections on port 81
2019-12-01 20:52:29 INFO [MICROSERVER] Flash policy file server not enabled
2019-12-01 20:52:29 INFO [MICROSERVER] Listening for client connections on alternate port 443
2019-12-01 20:52:30 INFO [SRC 46.20.9.172:1750] SHOUTcast 2 source connection starting.

i can listen stream from

code:
http://domain.radio.net/;stream

, but can't on

code:
https://domain.radio.net/;stream

I was check certificate with

code:
https://www.sslshopper.com/

I need help with that.

thank you

[novasky]

Are you running the shoutcast server locally?

check this:

https://help.shoutcast.com/hc/en-us/...-New-Features-

and make sure:
destip=stream.myserver.com (example; specify officially linked DNS)
publicip=stream.myserver.com

[djcenk]

Originally Posted by novasky

Are you running the shoutcast server locally?

check this:

https://help.shoutcast.com/hc/en-us/...-New-Features-

and make sure:
destip=stream.myserver.com (example; specify officially linked DNS)
publicip=stream.myserver.com

I was try but not working, please check my config file and logs.
My Config file :

;DNAS configuration file
;Getir Shoutcast2 Template

sslCertificateFile=C:\Users\Administrator\Desktop\sc_2_6\sc_serv_32bit_2_6_0_753\certificate.crt
sslCertificateKeyFile=C:\Users\Administrator\Desktop\sc_2_6\sc_serv_32bit_2_6_0_753\private.key

dstip=globerssl.radyotvonline.net
publicip=globerssl.radyotvonline.net

portbase=80
alternateports=443

requirestreamconfigs=1
log=1
screenlog=0
logclients=1
logfile=Getir68.log
w3cenable=0
w3clog=Getir68w3.log
publicserver=never
banfile=Getir68.ban
ripfile=Getir68.rip
riponly=0
savebanlistonexit=0
saveriplistonexit=0
maxuser=10000
listenertime=0
ypaddr=tomcat1.winamp.com
ypport=80

streamid=1
streammaxuser=1000
streampassword=*****
streamadminpassword=*****


Logs :
2019-12-05 20:20:59 INFO *********************************************************************
2019-12-05 20:20:59 INFO ** Shoutcast Distributed Network Audio Server (DNAS) **
2019-12-05 20:20:59 INFO ** Copyright (C) 2014-2019 Radionomy SA, All Rights Reserved **
2019-12-05 20:20:59 INFO *********************************************************************
2019-12-05 20:20:59 INFO [MAIN] Shoutcast DNAS/win64 v2.6.0.753 (Apr 23 2019)
2019-12-05 20:20:59 INFO [MAIN] PID: 25484
2019-12-05 20:20:59 INFO [MAIN] Saving log output to `C:\Users\Administrator\Desktop\sc_2_6\sc_serv_32bit_2_6_0_753\Getir68.log'
2019-12-05 20:20:59 INFO [MAIN] Automatic log rotation interval: 1 day
2019-12-05 20:20:59 INFO [MAIN] Loaded config from `C:\Users\Administrator\Desktop\sc_2_6\sc_serv_32bit_2_6_0_753\Getir68.ini'
2019-12-05 20:20:59 INFO [MAIN] Calculated CPU count is 24 -> 10 CPUs specified to be used
2019-12-05 20:20:59 DEBUG ident is DIDC207412cf-f35c-4b07-97a4-74c543c2ff33-80-globerssl.radyotvonline.net, DID is c2d260135f41157fdf807be2519691ecba9f97a6bf6cd57cba4f632ab82c251
2019-12-05 20:20:59 INFO [MAIN] SSL keys installed
2019-12-05 20:20:59 INFO [MAIN] Starting 10 network threads
2019-12-05 20:20:59 INFO [MICROSERVER] Listening for source and client connections on port 80
2019-12-05 20:20:59 INFO [MICROSERVER] Listening for legacy source connections on port 81
2019-12-05 20:20:59 INFO [MICROSERVER] Flash policy file server not enabled
2019-12-05 20:20:59 INFO [MICROSERVER] Listening for client connections on alternate port 443
2019-12-05 20:21:00 DEBUG detected ssl request, checking further
2019-12-05 20:21:00 DEBUG detected ssl request, checking further
2019-12-05 20:21:28 INFO [SRC 46.20.9.172:3391] Shoutcast 2 source connection starting.
2019-12-05 20:21:31 INFO [SRC 46.20.9.172:3391 sid=1] stream detected MPEG v1 layer 3 stereo
2019-12-05 20:21:36 INFO [SRC 46.20.9.172:3391 sid=1] Title update [AYDIN KURTOGLU - TEK]
2019-12-05 20:21:38 ERROR [DST 46.106.113.184:20783 sid=389] HTTP client connection rejected. Stream not available as there is no source connected. Agent: `ExoplayerDemo'
2019-12-05 20:21:38 ERROR [DST 46.106.113.184:20573 sid=389] Shoutcast 1 client connection rejected. Stream not available as there is no source connected. Agent: `vlc 1.1.0-git-20100330-0003'
2019-12-05 20:21:38 INFO [DST 46.20.11.230:54714 sid=1] HTTP client connection accepted. User-Agent: `Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36', UID: 3, GRID: 3
2019-12-05 20:21:38 ERROR [DST 46.106.113.184:20227 sid=389] HTTP client connection rejected. Stream not available as there is no source connected. Agent: `ExoplayerDemo'
2019-12-05 20:21:39 ERROR [DST 46.106.113.184:20621 sid=389] HTTP client connection rejected. Stream not available as there is no source connected. Agent: `ExoplayerDemo'
2019-12-05 20:21:43 INFO [DST 46.20.11.230:54715 sid=1] HTTP client connection accepted. User-Agent: `Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36', UID: 6, GRID: 6
2019-12-05 20:21:47 DEBUG detected ssl request, checking further
2019-12-05 20:21:47 DEBUG detected ssl request, checking further
2019-12-05 20:21:47 DEBUG detected ssl request, checking further
2019-12-05 20:21:47 DEBUG detected ssl request, checking further
2019-12-05 20:21:47 INFO [DST 46.20.11.230:54714 sid=1] HTTP client connection closed (9 seconds) [Bytes: 247014] Agent: `Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36', UID: 3, GRID: 3
2019-12-05 20:21:53 DEBUG detected ssl request, checking further
2019-12-05 20:21:54 DEBUG detected ssl request, checking further
2019-12-05 20:21:54 DEBUG detected ssl request, checking further
2019-12-05 20:21:57 INFO [DST 46.20.11.230:54715 sid=1] HTTP client connection closed (14 seconds) [Bytes: 271674] Agent: `Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36', UID: 6, GRID: 6

[NJK]

2019-12-05 20:21:38 ERROR [DST 46.106.113.184:20227 sid=389] HTTP client connection rejected. Stream not available as there is no source connected

no source means no input from MP3 files......
are you playing any music and is your soundcard working ? or are the settings wrong?

[djcenk]

Originally Posted by NJK

2019-12-05 20:21:38 ERROR [DST 46.106.113.184:20227 sid=389] HTTP client connection rejected. Stream not available as there is no source connected

no source means no input from MP3 files......
are you playing any music and is your soundcard working ? or are the settings wrong?

yes, its working
you can see but https requests not working

code:
http://globerssl.radyotvonline.net/index.html?sid=1

[djcenk]

unfortunately not working ssl stream yet.
I am using a letsencrypt, may be problem is this.

[Klaas]

I managed to get SSL working with Let's Encrypt. I had to configure the alternative port and it was only working over that alternative port.

[LStratmann]

SSL is generally strange with SHOUTcast, which is why I simply use a proxy for it.

[djcenk]

Originally Posted by Klaas

I managed to get SSL working with Let's Encrypt. I had to configure the alternative port and it was only working over that alternative port.

I did it, ssl seems to be working but the stream does not listening over ssl port

[djcenk]

Originally Posted by LStratmann

SSL is generally strange with SHOUTcast, which is why I simply use a proxy for it.

I agree, yes you right. May be i will setup a simple proxy for this

[djcenk]

2019-12-09 21:15:50 INFO *********************************************************************
2019-12-09 21:15:50 INFO ** SHOUTcast Distributed Network Audio Server (DNAS) **
2019-12-09 21:15:50 INFO ** Copyright (C) 2014-2019 Radionomy SA, All Rights Reserved **
2019-12-09 21:15:50 INFO *********************************************************************
2019-12-09 21:15:50 INFO [MAIN] SHOUTcast DNAS/win32 v2.6.0.750 (Dec 7 2018)
2019-12-09 21:15:50 INFO [MAIN] PID: 7760
2019-12-09 21:15:50 INFO [MAIN] Saving log output to `C:\sc26\Getir68.log'
2019-12-09 21:15:50 INFO [MAIN] Automatic log rotation interval: 1 day
2019-12-09 21:15:50 INFO [MAIN] Loaded config from `C:\sc26\Getir68.ini'
2019-12-09 21:15:50 INFO [MAIN] Calculated CPU count is 4 -> using all available CPUs
2019-12-09 21:15:50 INFO failed to get a static unique number, falling back to random sequence
2019-12-09 21:15:50 DEBUG ident is DIDC93e41c6e20911b9b36bc7ce94edc67-90-globerssl.radyotvonline.net, DID is d615f4d66634a451cf83f8c9aa362bf184d3022be82df8fc7ab77bd0375aed
2019-12-09 21:15:50 INFO [MAIN] SSL keys installed
2019-12-09 21:15:50 INFO [MAIN] Starting 4 network threads
2019-12-09 21:15:50 INFO [MICROSERVER] Listening for source and client connections on port 90
2019-12-09 21:15:50 INFO [MICROSERVER] Listening for legacy source connections on port 91
2019-12-09 21:15:50 INFO [MICROSERVER] Flash policy file server not enabled
2019-12-09 21:15:50 INFO [MICROSERVER] Listening for client connections on alternate port 443



when i want to play stream
https://globerssl.radyotvonline.net/;stream
or
https://globerssl.radyotvonline.net/stream/1/

i see in the log

2019-12-09 21:30:15 DEBUG detected ssl request, checking further
2019-12-09 21:30:15 DEBUG detected ssl request, checking further
2019-12-09 21:30:31 DEBUG detected ssl request, checking further
2019-12-09 21:30:31 DEBUG detected ssl request, checking further

and cannot play stream

[LStratmann]

Alternatively I can offer you to use the proxy "HAProxy".

[Klaas]

Caddy is a good webserver with some reserve proxy functionality. The best thing is it takes care for the certificate renewals using Let's Encrypt.

[djcenk]

Originally Posted by LStratmann

Alternatively I can offer you to use the proxy "HAProxy".

I did with IIS re-write module and reverse proxy. using letsencrypt ssl. Now working. But never run with only shoutcast dnas.

https://globerssl.radyotvonline.net/index.html?sid=1

Originally Posted by Klaas

Caddy is a good webserver with some reserve proxy functionality. The best thing is it takes care for the certificate renewals using Let's Encrypt.

thank you.

[Klaas]

Just to give you an example how to configure Caddy with the Caddyfile:

radio.isn.fm {
log /var/log/caddy/radio.isn.fm.log
proxy / http://<ServerIP>:8003 {
without /
transparent
}

tls {
dns cloudflare
protocols tls1.0 tls1.3
}
}

tls 1.0 is disabled by default. However older wifi radio devices don't support newer TLS versions. If you remove the "dns cloudflare" Caddy will just try to do a http authentication for Let's Encrypt. Of course you can hook other supported providers or custom scripts to caddy.

If you want to hide your plain http stream you can use the following:

http://radio.isn.fm {
log /var/log/caddy/radio.isn.fm.log

proxy / http://<ServerIP>:8003 {
without /
transparent
}
}

[djcenk]

Thank you for your help.
But, why should I install proxy server for this simple thing? That doesn't make sense to me. All streaming softwares support SSL except Shoutcast

Originally Posted by Klaas

Just to give you an example how to configure Caddy with the Caddyfile:



tls 1.0 is disabled by default. However older wifi radio devices don't support newer TLS versions. If you remove the "dns cloudflare" Caddy will just try to do a http authentication for Let's Encrypt. Of course you can hook other supported providers or custom scripts to caddy.

If you want to hide your plain http stream you can use the following:

[Klaas]

SSL was working for me when I was using Shoutcast Premium. With the free Shoutcast 2.6 this would be disabled.

Did you load the complete certificate and keychain for Shoutcast?

[LStratmann]

Right. If you are not using Premium and you are experiencing a YP error, SSL will not work.

[inwu]

Can you tell me how get the ssl certs installed or point me in the right direction as i have been working on the .pem file for a while but it's not working i get this error.

./crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE
(stdin)= d41d8cd98f00b204e9800998ecf8427e

[inwu]

Originally Posted by inwu

Can you tell me how get the ssl certs installed or point me in the right direction as i have been working on the .pem file for a while but it's not working i get this error.

./crypto/pem/pem_lib.c:745:Expecting: TRUSTED CERTIFICATE
(stdin)= d41d8cd98f00b204e9800998ecf8427e

I fixed the error with some crt comparing with private key and public key