SubSonic is a pretty sweet application for streaming your music collection remotely to any browser, Android/iPhone device and more. FreeNAS is one of the best, if not the best, options for running a NAS in your home. However, you want to be secure so this will show you the not so straightforward setup to add SSL to your SubSonic install.

  1. Log in to FreeNAS GUI
  2. Click Plugins on top menu bar
  3. Choose Subsonic -> Install
  4. Refresh
  5. Click Plugins on top again
  6. Turn SubSonic on
  7. Add storage to your music folder and make sure it is mounted
  8. Click SubSonic in Plugins dropdown in left menu
  9. Click the link to visit subsonic (localip:4040) and update admin password


Make sure you have both a CA and a certificate (can be generated in System > CAs / System > Certificates). Download the .key and .crt for both and move them somewhere you can access them (in storage on your subsonic jail)

  1. SSH into FreeNAS box
  2. run jls to view jails which will return all your active jails with ids
  3. Find your subsonic jail ID and run jexec ID replacing ID with the appropriate number
  4. You should now see something like this root@subsonic_1:/
  5. Run the following (assuming you have a CA of "SSH-CA" and a certificate of "SubSonic"):
    • cd /mnt/software
    • cat SubSonic.crt SubSonic.key SSH-CA.crt > subsonic.crt
    • openssl pkcs12 -in subsonic.crt -export -out subsonic.pkcs12
    • You should be able to use any password when in prompts you, not 100% if you can use different password for later step when you create the keystore
    • /usr/pbi/subsonic-amd64/bin/keytool -importkeystore -srckeystore subsonic.pkcs12 -destkeystore subsonic.keystore -srcstoretype PKCS12 -srcstorepass subsonic -srcalias 1 -destalias subsonic
    • cp subsonic.keystore /subsonic.keystore
  6. Go back to FreeNAS GUI and click the Subsonic icon in plugins on the left. Select "Enable SSL" and browse to your root folder and select the keystore file.

Blog Comments powered by Disqus.