[Icecast] SSL-Question

[Ervin Bizjak]

Hello!
Thank you for help.

CAT not working for me, because I use windows8, not Linux.

Certificate convert in this command:
type certificate.crt ca_bundle.crt private.key > icecast.pem

Copy icecast.pem in root of icecast, this is: D:\Icecast/

Run icecast and error.log display:
[2020-06-23  07:29:36] INFO main/main.c Icecast 2.4.4 server started
[2020-06-23  07:29:36] DBUG yp/yp.c Updating YP configuration
[2020-06-23  07:29:36] INFO yp/yp.c YP update thread started
[2020-06-23  07:29:36] WARN connection/connection.c Invalid cert file
/icecast.pem
[2020-06-23  07:29:36] INFO connection/connection.c No SSL capability on
any configured ports
[2020-06-23  07:29:37] DBUG slave/slave.c checking master stream list
[2020-06-23  07:29:42] DBUG stats/stats.c update global clients (1)
[2020-06-23  07:29:42] DBUG stats/stats.c update global connections (1)
[2020-06-23  07:29:57] DBUG stats/stats.c update global clients (0)

or:
[2020-06-23  07:33:34] INFO main/main.c Icecast 2.4.4 server started
[2020-06-23  07:33:34] DBUG yp/yp.c Updating YP configuration
[2020-06-23  07:33:34] INFO yp/yp.c YP update thread started
[2020-06-23  07:33:34] WARN connection/connection.c Invalid cert file
d:\Icecast/icecast.pem
[2020-06-23  07:33:34] INFO connection/connection.c No SSL capability on
any configured ports
[2020-06-23  07:33:35] DBUG slave/slave.c checking master stream list
[2020-06-23  07:33:52] DBUG stats/stats.c update global clients (1)
[2020-06-23  07:33:52] DBUG stats/stats.c update global connections (1)
[2020-06-23  07:34:07] DBUG stats/stats.c update global clients (0)

or:
[2020-06-23  07:38:24] INFO main/main.c Icecast 2.4.4 server started
[2020-06-23  07:38:24] DBUG yp/yp.c Updating YP configuration
[2020-06-23  07:38:24] INFO yp/yp.c YP update thread started
[2020-06-23  07:38:24] WARN connection/connection.c Invalid cert file
/Icecast/icecast.pem
[2020-06-23  07:38:24] INFO connection/connection.c No SSL capability on
any configured ports
[2020-06-23  07:38:25] DBUG slave/slave.c checking master stream list

Port is:
    <listen-socket>
        <port>8443</port>
        <ssl>1</ssl>
    </listen-socket>

And paths:
    <paths>
        <logdir>./log</logdir>
        <webroot>./web</webroot>
        <adminroot>./admin</adminroot>
        <alias source="/" destination="/status.xsl"/>
        <!-- The certificate file needs to contain both public and private
part.
             Both should be PEM encoded.-->
        <ssl-certificate>/Icecast/icecast.pem</ssl-certificate>
    </paths>

I don't know what can I do wrong......

V V pon., 22. jun. 2020 ob 23:25 je oseba Paul Martin <pm at nowster.me.uk>
napisala:

> On Mon, Jun 22, 2020 at 05:14:48PM +0200, Ervin Bizjak wrote:
> > file ca_bundle.crt:
> > -----BEGIN CERTIFICATE-----
> > MIIG1TCCBL2gAwIBAgIQbFWr29AHksedBwzYEZ7WvzANBgkqhkiG9w0BAQwFADCB
> > iDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0pl
> >
> > file: certificate.crt:
> > -----BEGIN CERTIFICATE-----
> > MIIGfjCCBGagAwIBAgIRAPqeon+kOZ6aXWx4AImqAQwwDQYJKoZIhvcNAQEMBQAw
> > SzELMAkGA1UEBhMCQVQxEDAOBgNVBAoTB1plcm9TU0wxKjAoBgNVBAMTIVplcm9T
> >
> > file: private.key:
> > -----BEGIN RSA PRIVATE KEY-----
> > MIIEogIBAAKCAQEAkCUP/iQJgZ2HVgA/o6LRjRfiHgr2/yWxCTwS24vBpxepKEJZ
> > m/smYD3livDhXID3fjI9vJPnPkCgr9u6G63yqt41DK6fZ5ojnbJXD88SykRMP/Cs
>
> Run...
>
>         cat certificate.crt ca_bundle.crt private.key >icecast.pem
>
> and change the ownership and permissions of the icecast.pem file so
> that only the icecast server software can read it.
>
> Then, in icecast.xml's "<paths>" block, add:
>
>         <ssl-certificate>/etc/icecast2/icecast.pem</ssl-certificate>
>
> Changing the file path to point to where you've put the icecast.pem
> file.
>
> --
> Paul Martin <pm at nowster.me.uk>
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20200623/859b8447/attachment.htm>