forked from i12bretro/tutorials
-
Notifications
You must be signed in to change notification settings - Fork 0
/
0057.html
136 lines (126 loc) · 6.73 KB
/
0057.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
<!DOCTYPE html>
<html lang="en" xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>Installing and Setting Up SSL for Subsonic on Windows</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta charset="UTF-8">
<meta name="keywords" content="Windows,Subsonic,Media Streamer,Self-hosted,MP3,SSL,PKI,Tomcat,Web Based,Streaming,Self-Hosted,Music,Microsoft,Media Server,Install Guide,Browser Based,Home Lab,HTTPS,Airsonic,Web Based Tools,Apache Tomcat,Certificates,Certificate Authority,Self-Signed Certificates,Self-Signed PKI,Generating SSL Certificates,XCA,X Certificate And Key Management,How To,Tutorial,i12bretro">
<meta name="author" content="i12bretro">
<meta name="description" content="Installing and Setting Up SSL for Subsonic on Windows">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta name="revised" content="10/24/2022 10:03:56 AM" />
<link rel="icon" type="image/x-icon" href="includes/favicon.ico">
<script type="text/javascript" src="https://code.jquery.com/jquery-3.5.1.min.js"></script>
<script type="text/javascript" src="includes/js/steps.js"></script>
<link href="css/steps.css" rel="stylesheet" type="text/css" />
</head>
<body>
<div id="gridContainer">
<div class="topMargin"></div>
<div id="listName" class="topMargin">
<h1>Installing and Setting Up SSL for Subsonic on Windows</h1>
</div>
<div></div>
<div id="content">
<h2>Prerequisites</h2>
<ul>
<li class="noCheckbox">A XCA PKI database <a href="https://youtu.be/ezzj3x207lQ" target="_blank">https://youtu.be/ezzj3x207lQ</a></li>
</ul>
<h2>Create Your SSL Certificate</h2>
<ol>
<li>Launch XCA</li>
<li>Open the PKI database if it is not already (File > Open DataBase), enter password</li>
<li>Click on the Certificates tab, right click on your Intermediate CA certificate</li>
<li>Select New</li>
<li>On the Source tab, make sure Use this Certificate for signing is selected</li>
<li>Verify your Intermediate CA certificate is selected from the drop down</li>
<li>Click the Subject tab</li>
<li>Complete the Distinguished Name section
<p>internalName: Subsonic SSL<br />
countryName: US<br />
stateOrProvinceName: Virginia<br />
localityName: Northern<br />
organizationName: i12bretro<br />
organizationUnitName: i12bretro Certificate Authority<br />
commonName: subsonic.i12bretro.local</p>
</li>
<li>Click the Generate a New Key button</li>
<li>Enter a name and set the key size to at least 2048</li>
<li>Click Create</li>
<li>Click on the Extensions tab</li>
<li>Select End Entity from the type list</li>
<li>Click Edit next to Subject Alternative Name</li>
<li>Add any DNS or IP addresses that the certificate will identify</li>
<li>Update the validity dates to fit your needs</li>
<li>Click the Key Usage tab</li>
<li>Under Key Usage select Digital Signature, Key Encipherment</li>
<li>Under Extended Key Usage select Web Server and Web Client Authentication</li>
<li>Click the Netscape tab</li>
<li>Select SSL Server</li>
<li>Click OK to create the certificate</li>
</ol>
<h2>Exporting Required Files</h2>
<ol>
<li>In XCA, click on the Certificates tab</li>
<li>Right click the SSL certificate > Export > File</li>
<li>Set the file name with a .crt extension and verify the export format is PKCS #12 (*.p12)</li>
<li>Enter the password subsonic and confirm, Click OK</li>
<li>Click OK</li>
</ol>
<h2>Installing Subsonic and Initial Setup</h2>
<ol>
<li>Download Subsonic <a href="https://sourceforge.net/projects/subsonic/files/subsonic/6.1.6/subsonic-6.1.6-setup.exe/download" target="_blank">Download</a></li>
<li>Install Subsonic</li>
<li>Open a web browser and navigate to http://DNSorIP:Port</li>
<li>Login with username: admin password: admin</li>
<li>Go to Settings > Users</li>
<li>Check the Change Password box</li>
<li>Input a new password twice and click save to secure the admin account</li>
<li>Go to Settings > Media Folders</li>
<li>Under the Add media folder heading add your music directory</li>
<li>Click the Save button</li>
<li>Click the Scan media folders now button</li>
<li>Click the Home button in the top navigation</li>
<li>You should see music from your library starting to populate</li>
</ol>
<h2>Applying the SSL Certificates to Subsonic</h2>
<ol>
<li>Stop the Subsonic service</li>
<li>Right click the start button > Command Prompt (Admin)</li>
<li>Run the following command<br />
taskkill /f /im "subsonic-agent-elevated.exe"</li>
<li>Navigate to the Subsonic installation directory in Explorer</li>
<li>Extract subsonic-booter-jar-with-dependencies.jar</li>
<li>Download Keystore Explorer <a href="https://keystore-explorer.org/downloads.html" target="_blank">Download</a></li>
<li>Run kse.exe</li>
<li>Select File > Open > and select subsonic.keystore from the extracted jar</li>
<li>Enter subsonic as the keystore password</li>
<li>Delete the subsonic entry, this is the self-signed SSL certificate used for https by default</li>
<li>Select Tools > Import Key Pair</li>
<li>Select PKCS #12, Click OK</li>
<li>Click Browse and navigate to the .p12 file exported from XCA earlier</li>
<li>Enter subsonic as the Decryption password</li>
<li>Enter subsonic as the alias, click OK</li>
<li>Enter subsonic as the password and confirm, click OK</li>
<li>Select File > Save</li>
<li>Navigate to the extracted jar files in Explorer</li>
<li>Select all the files > Right Click > Send To > Compressed (zipped) folder</li>
<li>Rename the zip file created subsonic-booter-jar-with-dependencies.jar</li>
<li>Right click the created subsonic-booter-jar-with-dependencies.jar > Copy</li>
<li>Navigate to the Subsonic installation directory in Explorer</li>
<li>Renamed the existing subsonic-booter-jar-with-dependencies.jar to subsonic-booter-jar-with-dependencies.jar.orig</li>
<li>Paste the newly created subsonic-booter-jar-with-dependencies.jar</li>
<li>Right click subsonic-agent-elevated.exe > Run as administrator</li>
<li>If it doesn't show, double click the Subsonic icon in the system tray</li>
<li>Click the Settings tab</li>
<li>Check the Enable https on port box</li>
<li>Enter a port to run https on</li>
<li>Click the Save settings button</li>
<li>Click the Status tab</li>
<li>Click the Start button to start the Subsonic service</li>
<li>Open a web browser and navigate to https://DNSorIP:Port</li>
<li>Subsonic should now be running securely with https using the new certificate</li>
</ol> </div>
</div>
</body>
</html>