Icecast Server/known https restrictions: Difference between revisions
Jump to navigation
Jump to search
(+TLS Mode compatibility charts) |
m (clarification / details on limitations) |
||
Line 1: | Line 1: | ||
This page lists known problems of latest released Icecast when operating with TLS enabled. | This page lists known problems of latest released Icecast when operating with TLS enabled. | ||
* 'listenurl' in the internal XML status representation is not protocol aware and will always use 'http' + first listen-socket. | * 'listenurl' in the internal XML status representation is not protocol aware and will always use 'http' + global hostname (default: "localhost") and port (default: first listen-socket). | ||
* Virtual playlist files don't work | * Virtual playlist files don't work | ||
* Authentication helper doesn't work (needs verification) | * Authentication helper doesn't work (needs verification) | ||
* Certificate reload is not implemented in 2.4.x. Icecast2 2.4.x needs to be restarted to reload the certificate. | * Certificate reload is not implemented in 2.4.x. Icecast2 2.4.x needs to be restarted to reload the certificate. (supported in branch ph3-update-TLS.) | ||
* … | * … | ||
Revision as of 03:54, 22 January 2017
This page lists known problems of latest released Icecast when operating with TLS enabled.
- 'listenurl' in the internal XML status representation is not protocol aware and will always use 'http' + global hostname (default: "localhost") and port (default: first listen-socket).
- Virtual playlist files don't work
- Authentication helper doesn't work (needs verification)
- Certificate reload is not implemented in 2.4.x. Icecast2 2.4.x needs to be restarted to reload the certificate. (supported in branch ph3-update-TLS.)
- …
TLS Mode compatibility charts
The following list Icecast configuration settings (horizontal) versus client settings (vertical). Note: While auto mode may connect using TLS it will not establish a secure connection. auto_no_plain will ensure a secure connection.
Icecast2 2.4.x
0 | 1 | |
---|---|---|
libshout | ||
disabled | Yes | No |
auto | Yes | Yes |
auto_no_plain | No | Yes |
RFC2817 | No | No |
RFC2818 | No | Yes |
Icecast2 2.5.x
Note: for truth values the following keywords can be used in the configuration: 0, false, no, off, 1, true, yes, on
TLS not configured | TLS configured | ||
---|---|---|---|
false | false | true | |
libshout | |||
disabled | Yes | Yes | No |
auto | Yes | Yes | Yes |
auto_no_plain | No | Yes | Yes |
RFC2817 | No | Yes | Yes |
RFC2818 | No | No | Yes |
Icecast2 2.5.x branch ph3-update-TLS
TLS not configured | TLS configured | ||||||
---|---|---|---|---|---|---|---|
disabled | auto, false | disabled | auto, false | auto_no_plain | rfc2817 | rfc2818, true | |
libshout | |||||||
disabled | Yes | Yes | Yes | Yes | No | No | No |
auto | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
auto_no_plain | No | No | No | Yes | Yes | Yes | Yes |
RFC2817 | No | No | No | Yes | Yes | Yes | No |
RFC2818 | No | No | No | Yes | Yes | No | Yes |