does icecast force ssl if enabled?

In the documentation for icecast 2.4.2 I see the following about ssl.

ssl If set to 1 will enable HTTPS on this listen-socket. Icecast must
have been compiled against openSSL to be able to do so.

However this wording is unclear to me whether or not the ssl is forced for this port or not? I am wondering this because we are running into an issue where safari is forcing ssl redirect and we want to keep the server listening on both ssl and non-ssl on the same port ( if thats possible )

Another thing is that it says it must be compiled against openSSL but we are installing it from apt in xenial. Does this mean its default to ssl?

apt

xenial

Thanks~!

2 Answers
2

However this wording is unclear to me whether or not the ssl is forced for this port or not?

On that particular socket, it is. A server bound to that socket cannot support HTTPS and non-HTTPS at the same time. Usually, you'll use port 80 for HTTP and port 443 for HTTPS.

80

443

Note that you can have multiple sockets bound to Icecast, simply by putting in multiple <listen-socket> sections. It's common to serve both HTTP and HTTPS this way.

<listen-socket>

I am wondering this because we are running into an issue where safari is forcing ssl redirect

Your server configuration is irrelevant here. Icecast will not redirect HTTP requests to HTTPS. It's possible that you hit the stream on HTTPS once and that Safari cached this. It's also possible that you turned on HSTS or something for your domain. You would have to debug this with a tool like Fiddler.

and we want to keep the server listening on both ssl and non-ssl on the same port

You say "keep the server listening"... that's not possible. If it appears you're set up this way today, that's not accurate.

In a sense it does. Icecast if you are using it as its own server will not resolve the enabled ssl port unless its https://.

https://

You also cannot use the same port for both ssl and non-ssl.

Finally the xenial ubuntu package also is not compiled for ssl.

Thanks for contributing an answer to Stack Overflow!

But avoid …

To learn more, see our tips on writing great answers.

Required, but never shown

Required, but never shown

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy