|
a/doc/upmpdcli-manual.txt |
|
b/doc/upmpdcli-manual.txt |
|
... |
|
... |
| 640 |
unknown. When feature is active, it actually prevents Lumin from
|
640 |
unknown. When feature is active, it actually prevents Lumin from
|
| 641 |
discovering upmpdcli at all, so there is a configuration variable to
|
641 |
discovering upmpdcli at all, so there is a configuration variable to
|
| 642 |
disable it: '+lumincompat+'. Set to 1 to use upmpdcli v1.3.0 with Lumin.
|
642 |
disable it: '+lumincompat+'. Set to 1 to use upmpdcli v1.3.0 with Lumin.
|
| 643 |
|
643 |
|
| 644 |
Upmpdcli uses the *openssl* command to perform the cryptography work. This
|
644 |
Upmpdcli uses the *openssl* command to perform the cryptography work. This
|
| 645 |
was not made a hard dependancy, so you should check that it is installed.
|
645 |
was not made a hard dependancy, so you should check that it is
|
|
|
646 |
installed. Unfortunately, I was only able to make things work with a fairly
|
|
|
647 |
recent version of OpenSSL (1.1). This is available in Debian Stretch (9.x),
|
|
|
648 |
but not Jessie (8.x) (on which Volumio, for example is based at this
|
|
|
649 |
moment (12-2018)). If you are running Jessie, there is a fairly easy
|
|
|
650 |
workaround available by building a static version of openssl and telling
|
|
|
651 |
upmpdcli what version to use. See <<OHCREDS-OPENSSL, some instructions in
|
|
|
652 |
this annex>>.
|
|
|
653 |
|
| 646 |
|
654 |
|
| 647 |
The media service icons will appear in the Control Point interface, and the
|
655 |
The media service icons will appear in the Control Point interface, and the
|
| 648 |
service will be accessible after entering the login and password.
|
656 |
service will be accessible after entering the login and password.
|
| 649 |
|
657 |
|
| 650 |
NOTE: the user name and password will be stored on the renderer in an
|
658 |
NOTE: the user name and password will be stored on the renderer in an
|
|
... |
|
... |
| 1415 |
display a reasonably self-explanatory interface.
|
1423 |
display a reasonably self-explanatory interface.
|
| 1416 |
|
1424 |
|
| 1417 |
Recent *upmpdcli* packages install the web app as a service named
|
1425 |
Recent *upmpdcli* packages install the web app as a service named
|
| 1418 |
*scweb*. The service is not started by default though, you need to edit
|
1426 |
*scweb*. The service is not started by default though, you need to edit
|
| 1419 |
`/etc/default/scweb`.
|
1427 |
`/etc/default/scweb`.
|
|
|
1428 |
|
|
|
1429 |
[[OHCREDS-OPENSSL]]
|
|
|
1430 |
== Annex: building openssl for Debian Jessie
|
|
|
1431 |
|
|
|
1432 |
The OHCredentials service needs OpenSSL 1.1 but Debian Jessie only has
|
|
|
1433 |
1.0. The following recipee builds a static version of the openssl command,
|
|
|
1434 |
which is installed with a specific name (upmpdcli-openssl). No libraries
|
|
|
1435 |
are installed and the standard command is left undisturbed, so that there
|
|
|
1436 |
is no risk of damaging the system.
|
|
|
1437 |
|
|
|
1438 |
Note that I am making no claims about the security of the encryption
|
|
|
1439 |
provided by this method. This should be fairly sufficient for a Qobuz
|
|
|
1440 |
password going around your local network though (except maybe if you think
|
|
|
1441 |
that the NSA is interested in your playlists).
|
|
|
1442 |
|
|
|
1443 |
----
|
|
|
1444 |
sudo apt install git make gcc
|
|
|
1445 |
cd
|
|
|
1446 |
git clone https://github.com/openssl/openssl.git
|
|
|
1447 |
cd openssl
|
|
|
1448 |
git checkout -b origin/OpenSSL_1_1_0-stable
|
|
|
1449 |
./config
|
|
|
1450 |
make
|
|
|
1451 |
cc -o upmpdcli-openssl apps/*.o libssl.a libcrypto.a -ldl -lpthread
|
|
|
1452 |
sudo cp upmpdcli-openssl /usr/bin
|
|
|
1453 |
----
|
|
|
1454 |
|
|
|
1455 |
|
|
|
1456 |
Then edit '/etc/upmpdcli.conf' and add the following:
|
|
|
1457 |
|
|
|
1458 |
opensslcmd = /usr/bin/upmpdcli-openssl
|
|
|
1459 |
|
|
|
1460 |
We chose to copy the command to '/usr/bin', but this could be any
|
|
|
1461 |
place. Change the path in '/etc/upmpdcli.conf' in this case.
|
|
|
1462 |
|
|
|
1463 |
Restart upmpdcli, and the logins from Kazoo should work.
|