PDA

View Full Version : SSL and other things..



Richard Goodwin
2005-01-19, 20:52
I might be blind, but is there a way to do either of the following:

1. Use SSL between clients and Slimserver
2. Rename stream.mp3 - I saw some comments on the mail list but didn't pan
out (HTTP.pm).

Also, in the release notes it says you should be able to use
http://server:9000/stream (w/o the .mp3) but doesn't seem to work in any of
the players I tried.

Basic premise is I'd like to keep the traffic nice and mum on my shared
network :-)

I can't say enough thanks to you guys for making this code available, it
seriously blew my mind!

Richard

kdf
2005-01-19, 21:34
Quoting Richard Goodwin <richardg (AT) richardgoodwin (DOT) com>:

> I might be blind, but is there a way to do either of the following:
>
> 1. Use SSL between clients and Slimserver

not SSL, but if you use Softsqueeze (comes with the server, link found in help
section) it does do built-in ssh.

> 2. Rename stream.mp3 - I saw some comments on the mail list but didn't pan
> out (HTTP.pm).

stream.mp3 is the name that the server recognises for external HTTP clients.
renaming it by altering the server code is possible, but you have to be careful
to catch all occurences and tests as it is not really designed as a variable.

Using softsqueeze, it would connect as it it were a hardware player, so no more
worries about stream names for url.

>
> Also, in the release notes it says you should be able to use
> http://server:9000/stream (w/o the .mp3) but doesn't seem to work in any of
> the players I tried.

This is correct as to intent. however, there was a bug in the release of 5.4.0
caused by adding the ability to reference skins without a trailing slash. This
is fixed in the 5.4.1 pre-release builds found here:
http://www.slimdevices.com/downloads/nightly/latest/5.4.1/

>
> Basic premise is I'd like to keep the traffic nice and mum on my shared
> network :-)
>
> I can't say enough thanks to you guys for making this code available, it
> seriously blew my mind!

better clean that mess up ;)

cheers,
kdf

Jim
2005-01-22, 14:43
Richard Goodwin wrote:
> I might be blind, but is there a way to do either of the following:
>
> 1. Use SSL between clients and Slimserver

None of the clients support SSL directly, though as you've discovered
Softsqueeze will play through SSH port forwards.

There's a program called stunnel that will let you set up port forwards
between two endpoints running the software. The communication is wrapped
in SSL encryption. With Softsqueeze, you can tell it to talk to a port
on localhost, which could then be forwarded to your slimserver system.

You might also look at OpenVPN, which is SSL at its heart, but on
steriods. Since Squeezeboxes discover their server via a broadcast,
you'll need to bridge. I'm not aware of any other VPN software that can
bridge, but there's possibly another package.
Be warned, configuration is not trivial.