Third-Party Certificate for Subsonic on Linux

This is more a reminder-post for myself, than anything else, because every year my StartSSL-Certificate expires, I need to redo this and have to look it up anew. It is based on the basically excellent writeup at, which has a few tiny errors and does not include the info on how to use a non-standard password. (This info I got here at konkretor. Thanks!)

  1. Get a free certificate here.
  2. Once you receive your certificate you will need to combine the private key, server cert, and intermediate certs into one file. Simply open all three in a text editor and copy/paste everything into a new text file without any blank lines. I added mine in the following order:
    Private Key (myserver.key)
    Server Certificate (myserver.ssl)
    Intermediate Certificate (
  3. Save this text file as subsonic.crt. Do not mess this up as I did on the first try by using cat in the wrong way, as every new part should start at a new line.
  4. Next, convert the cert from PEM to PKCS12 format using the following command. Choose any password you like. In fact, do not choose the default password of „subsonic“. Memorize that password:
    openssl pkcs12 –in subsonic.crt –export –out subsonic.pkcs12
  5. Use Keytool to import this new keystore:
    keytool –importkeystore –srckeystore subsonic.pkcs12 –destkeystore subsonic.keystore –srcstoretype PKCS12 –srcalias 1 –destalias subsonic
  6. use zip to import the new keystore into the subsonic jar:
    sudo zip /usr/share/subsonic/subsonic-booter-jar-with-dependencies.jar subsonic.keystore
  7. Now tell subsonic the new non-generic password:
    1. open the subsonic starter:
      sudo nano /usr/bin/subsonic
    2. insert a line with the new password and save, at line 113ish (press alt+c to see line numbers)
      –Dsubsonic.ssl.password=123456 \
  8. Restart subsonic, and enjoy your custom SSL certifcate:
    sudo service subsonic restart

That’s all Folks!

My take on the shirtstorm…

Last week, science did awesome things. Or rather: Earned the fruits of having done awesome things 10 years ago. We landed a spaceship on a comet and had it talk back to us. That is really, really awesome. And during this event, the lead scientist did a sartorial booboo: He chose to wear a very boldly patterned shirt that […]

GateKeeper — first impressions

Early this year, I backed the GateKeeper — a small dongle that locks and unlocks my PC based on proximity. The general idea is that you clip a small bluetooth sender to your belt, and a dongle on your PC checks the signal strength to determine how close you are to it. By now, the small black box has arrived, and […]


Ihr erinnert Euch an den Dezember? Der arme Mann ist so einsam, der ist in 10 Monaten zwei Jahre gealtert! Sein Versuch im April scheiterte ja leider auch. Deshalb versucht er es jetzt wohl nicht mehr im langweiligen Edeka in Barmbek sondern im hippen Rewe des Einkaufszentrums. Nun erbarme sich doch jemand mal…