Linux 客户端食用指南

silasol commented 5 years ago

前提

服务端已经配置完毕,支持http、https

两种方法：

直接用此工具监听Server的80和443
通过nginx监听80和443，然后进行反代相关进阶配置说明

因为我服务器上有多个站点，所以选择了后者

nginx 配置文件

server {
        listen 80;
        server_name music.163.com interface.music.163.com;

        location / {
                proxy_pass http://127.0.0.1:1630;
                proxy_set_header HOST 'music.163.com';
        }
}
server {
        listen 443 ssl;
        server_name music.163.com interface.music.163.com;

        ssl on;
        ssl_certificate /etc/nginx/ssl/163/server.crt;
        ssl_certificate_key /etc/nginx/ssl/163/server.key;

        ssl_session_timeout 10m;
        ssl_session_cache shared:SSL:10m;

        ssl_protocols  TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers 'AES128+EECDH:AES128+EDH';
        ssl_prefer_server_ciphers on;

        location / {
                proxy_pass https://127.0.0.1:1631;
                proxy_set_header HOST 'music.163.com';
        }
}

环境介绍

ubuntu 1804 LTS
netease-cloud-music 1.2.1

1.证书

目前除 UWP 外其它客户端均优先请求 HTTPS 接口，默认配置下本代理对网易云所有 HTTPS API 连接返回空数据，促使客户端降级使用 HTTP 接口 (新版 Linux 客户端和 macOS 客户端已无法降级)

自签证书请参考 https://github.com/nondanee/UnblockNeteaseMusic/issues/48

为ubuntu 添加信任证书

lushan@u:~/Downloads$ sudo cp ca.crt /usr/local/share/ca-certificates/
[sudo] password for lushan: 
lushan@u:~/Downloads$ sudo update-ca-certificates 
Updating certificates in /etc/ssl/certs...
1 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...

Adding debian:ca.pem
done.
done.

2.修改hosts

sudo vim /etc/hosts

<Your-Server-IP> music.163.com
<Your-Server-IP> interface.music.163.com

增加默认启动参数

Linux 客户端 (1.2 版本以上需要自签证书 MITM，启动客户端需要增加 --ignore-certificate-errors 参数)

lushan@u:/usr/share/applications$ ls | grep netease
netease-cloud-music.desktop
lushan@u:/usr/share/applications$ sudo vim netease-cloud-music.desktop

在Exec这一行末尾增加--ignore-certificate-errors 参数