# Using Stunnel to add ssl to shoutcast in OVH VPS \[help\] **URL:** \ **Category:** Help\ **Created:** [May 31, 2017, 2:19pm UTC](https://community.letsencrypt.org/t/using-stunnel-to-add-ssl-to-shoutcast-in-ovh-vps-help/35266 "2017-05-31T14:19:33Z")\ **Posts on this page:** 16\ **Page:** 1
**Author:** ![juanam](https://avatars.discourse-cdn.com/v4/letter/j/e274bd/32.png) [@juanam](https://community.letsencrypt.org/u/juanam)\ **Post date:** [May 31, 2017, 2:19pm UTC](https://community.letsencrypt.org/t/using-stunnel-to-add-ssl-to-shoutcast-in-ovh-vps-help/35266/1 "2017-05-31T14:19:33Z")
I found this [post](https://www.interserver.net/forum/threads/using-stunnel-to-add-ssl-to-shoutcast.7268/) where they explain how to get SSL on Shoutcast. In one part , they say that the stunnel.pem format is: ``` rsa key first certificate second cabundle/intermediate third ``` The problem is that my OVH VPS can not get CA bundle certificates for what is exposed in this [thread](https://community.letsencrypt.org/t/too-many-certificates-already-issued-for-ovh-net/35231/5). Any ideas for solving the stunnel.pem? ---
**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\ **Post date:** [May 31, 2017, 4:51pm UTC](https://community.letsencrypt.org/t/using-stunnel-to-add-ssl-to-shoutcast-in-ovh-vps-help/35266/2 "2017-05-31T16:51:41Z")
Hi @juanam, I’m glad that you found an approach that may help with your Shoutcast problem. I think that the discussion in the other thread has also provided a good solution for this. If you create a subdomain of your own domain, you can get certificates for that subdomain instead of for the [ovh.net](http://ovh.net) domain. The certificate for your subdomain should work fine with stunnel once you have it. ---
**Author:** ![juanam](https://avatars.discourse-cdn.com/v4/letter/j/e274bd/32.png) [@juanam](https://community.letsencrypt.org/u/juanam)\ **Post date:** [May 31, 2017, 7:12pm UTC](https://community.letsencrypt.org/t/using-stunnel-to-add-ssl-to-shoutcast-in-ovh-vps-help/35266/3 "2017-05-31T19:12:14Z")
Hi @schoen, I already got the certificates! 🙂 I have: `cert.pem chain.pem fullchain.pem privkey.pem` Now I need to create the stunnel.pem It must have this format: ``` rsa key first certificate second cabundle/intermediate third ``` What would be the commands to create and/or concatenate those 3 certificates to achieve stunnel.pem? Remember that I am a newbie, therefore these questions may be obvious to you. 😊 ---
**Author:** ![sahsanu](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/sahsanu/32/89984_2.png) [@sahsanu](https://community.letsencrypt.org/u/sahsanu)\ **Post date:** [May 31, 2017, 7:51pm UTC](https://community.letsencrypt.org/t/using-stunnel-to-add-ssl-to-shoutcast-in-ovh-vps-help/35266/4 "2017-05-31T19:51:03Z")
@juanam, this is the command tha you should use `cat privkey.pem fullchain.pem > stunnel.pem` The above command should be executed from the dir that contains the pem files and will leave stunnel.pem in the same dir. Cheers, sahsanu ---
**Author:** ![juanam](https://avatars.discourse-cdn.com/v4/letter/j/e274bd/32.png) [@juanam](https://community.letsencrypt.org/u/juanam)\ **Post date:** [May 31, 2017, 8:10pm UTC](https://community.letsencrypt.org/t/using-stunnel-to-add-ssl-to-shoutcast-in-ovh-vps-help/35266/5 "2017-05-31T20:10:57Z")
Hi @sahsanu, That way it does not work. ---
**Author:** ![sahsanu](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/sahsanu/32/89984_2.png) [@sahsanu](https://community.letsencrypt.org/u/sahsanu)\ **Post date:** [May 31, 2017, 8:29pm UTC](https://community.letsencrypt.org/t/using-stunnel-to-add-ssl-to-shoutcast-in-ovh-vps-help/35266/6 "2017-05-31T20:29:46Z")
@juanam, you have the shoutcast server listening in that ip and port so it is not using stunnel. I don’t know how or where you configured stunnel. Also, I’ve been using stunnel for a long time to cover several services and I always used two directives for stunnel, cert that points to fullchain.pem and key that points to privkey.pem Something like this: ``` [shoutcast] accept = 1234 connect = 1.2.3.4:8820 cert = /etc/letsencrypt/live/radio.domain.tld/fullchain.pem key = /etc/letsencrypt/live/radio.domain.tld/privkey.pem ``` This configuration start stunnel on port 1234 using the certificates for radio.domain.tld and redirect the connection to your shoutcast server.1.2.3.4 on port 8820. If you access to one of my domains on port 1234 [https://27a.net:1234](https://27a.net:1234) (this link will be deactivated in 24 hours) you will see how it works. Note: Keep in mind that you can’t start stunnel in the same machine and port that uses the shoutcast server, if you are configuring stunnel in the machine where the shoutcast server is installed, use another port as in my example (1234) or use 8820 but start the shoutcast server on a different port… port 9921 for example. ---
**Author:** ![juanam](https://avatars.discourse-cdn.com/v4/letter/j/e274bd/32.png) [@juanam](https://community.letsencrypt.org/u/juanam)\ **Post date:** [June 1, 2017, 12:59am UTC](https://community.letsencrypt.org/t/using-stunnel-to-add-ssl-to-shoutcast-in-ovh-vps-help/35266/7 "2017-06-01T00:59:16Z")
[Here](http://forums.winamp.com/showthread.php?t=399635) is a radio that did it! I hope someone with experience here can help me to achieve it, is the last thing I need for the green lock. ---
**Author:** ![ahaw021](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/ahaw021/32/14882_2.png) [@ahaw021](https://community.letsencrypt.org/u/ahaw021)\ **Post date:** [June 1, 2017, 11:18am UTC](https://community.letsencrypt.org/t/using-stunnel-to-add-ssl-to-shoutcast-in-ovh-vps-help/35266/8 "2017-06-01T11:18:04Z")
@juanam @sahsanu is someone with experience who is trying to help you achieve it 😃 He has even done a proof for you so not sure why you are ignoring his assistance A) What is the website of your Station B) What is the IP of your streaming server C) Are you using shoutcast to stream (i.e. pushing one stream to [shoutcast.com](http://shoutcast.com)) D) Are you using windows or linux? Andrei ---
**Author:** ![sahsanu](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/sahsanu/32/89984_2.png) [@sahsanu](https://community.letsencrypt.org/u/sahsanu)\ **Post date:** [June 1, 2017, 11:38am UTC](https://community.letsencrypt.org/t/using-stunnel-to-add-ssl-to-shoutcast-in-ovh-vps-help/35266/9 "2017-06-01T11:38:26Z")
@ahaw021, as @juanam has some problems to speak in English I’m already helping him by private messages. If he doesn’t give up I’ll post a resume here. ---
**Author:** ![ahaw021](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/ahaw021/32/14882_2.png) [@ahaw021](https://community.letsencrypt.org/u/ahaw021)\ **Post date:** [June 1, 2017, 11:52am UTC](https://community.letsencrypt.org/t/using-stunnel-to-add-ssl-to-shoutcast-in-ovh-vps-help/35266/10 "2017-06-01T11:52:01Z")
ah ok 😃 if its a windows box let me know if you need help 😃 Andrei ---
**Author:** ![juanam](https://avatars.discourse-cdn.com/v4/letter/j/e274bd/32.png) [@juanam](https://community.letsencrypt.org/u/juanam)\ **Post date:** [June 2, 2017, 3:46am UTC](https://community.letsencrypt.org/t/using-stunnel-to-add-ssl-to-shoutcast-in-ovh-vps-help/35266/11 "2017-06-02T03:46:26Z")
> [@ahaw021](#): > > He has even done a proof for you so not sure why you are ignoring his assistance > > A) What is the website of your Station > B) What is the IP of your streaming server > C) Are you using shoutcast to stream (i.e. pushing one stream to [shoutcast.com](http://shoutcast.com)) > D) Are you using windows or linux? > > Andrei Thanks Andrei, I fixed it with the help of @sahsanu ---
**Author:** ![juanam](https://avatars.discourse-cdn.com/v4/letter/j/e274bd/32.png) [@juanam](https://community.letsencrypt.org/u/juanam)\ **Post date:** [June 2, 2017, 2:58pm UTC](https://community.letsencrypt.org/t/using-stunnel-to-add-ssl-to-shoutcast-in-ovh-vps-help/35266/12 "2017-06-02T14:58:35Z")
Topic solved! Thanks to @sahsanu for the patience, the support and the solution. He’s a genius! ---
**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\ **Post date:** [June 5, 2017, 10:25pm UTC](https://community.letsencrypt.org/t/using-stunnel-to-add-ssl-to-shoutcast-in-ovh-vps-help/35266/13 "2017-06-05T22:25:57Z")
Wow, that’s great. Now we can all keep in mind that stunnel is a valid means of solving this problem if other people ask in the future. Nice work, @sahsanu! ---
**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\ **Post date:** [June 5, 2017, 10:26pm UTC](https://community.letsencrypt.org/t/using-stunnel-to-add-ssl-to-shoutcast-in-ovh-vps-help/35266/14 "2017-06-05T22:26:50Z")
@juanam, I assume that you’ve also thought about renewal (this certificate will expire in 90 days and needs to be updated, possibly by running `certbot renew` regularly from `cron`). ---
**Author:** ![sahsanu](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/sahsanu/32/89984_2.png) [@sahsanu](https://community.letsencrypt.org/u/sahsanu)\ **Post date:** [June 5, 2017, 10:40pm UTC](https://community.letsencrypt.org/t/using-stunnel-to-add-ssl-to-shoutcast-in-ovh-vps-help/35266/15 "2017-06-05T22:40:20Z")
@schoen, I had a log conversation with @juanam and all aspects of the renewal are already covered… and tested 😉 ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [July 5, 2017, 10:40pm UTC](https://community.letsencrypt.org/t/using-stunnel-to-add-ssl-to-shoutcast-in-ovh-vps-help/35266/16 "2017-07-05T22:40:42Z")
Closed on July 5, 2017, 10:40pm UTC This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.