[Icecast] SSL-Question

[Ervin Bizjak]

Hello!
I edit .pem file and now is the same as you specifie, but not work.

Error.log display:
[2020-06-24  12:54:54] INFO main/main.c Icecast 2.4.4 server started
[2020-06-24  12:54:54] DBUG yp/yp.c Updating YP configuration
[2020-06-24  12:54:54] INFO yp/yp.c YP update thread started
[2020-06-24  12:54:55] INFO connection/connection.c SSL certificate found
at icecast.pem
[2020-06-24  12:54:55] INFO connection/connection.c SSL using ciphers
ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128
*(this chiphers is still going on, I just shortened it in this email)*
[2020-06-24  12:54:55] DBUG slave/slave.c checking master stream list

V V sre., 24. jun. 2020 ob 12:11 je oseba Paul Martin <pm at nowster.me.uk>
napisala:

> On Tue, Jun 23, 2020 at 08:58:43PM +0200, Ervin Bizjak wrote:
> > Tgis is my certificate:
> > -----BEGIN CERTIFICATE-----
> > MIIGfjCCBGagAwIBAgIRAPqeon+kOZ6aXWx4AImqAQwwDQYJKoZIhvcNAQEMBQAw
> > SzELMAkGA1UEBhMCQVQxEDAOBgNVBAoTB1plcm9TU0wxKjAoBgNVBAMTIVplcm9T
> > U0wgUlNBIERvbWFpbiBTZWN1cmUgU2l0ZSBDQTAeFw0yMDA1MDcwMDAwMDBaFw0
> > -----END CERTIFICATE----------BEGIN CERTIFICATE-----
> > MIIG1TCCBL2gAwIBAgIQbFWr29AHksedBwzYEZ7WvzANBgkqhkiG9w0BAQwFADCB
> > iDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0p
> > -----END CERTIFICATE----------BEGIN RSA PRIVATE KEY-----
> > MIIEogIBAAKCAQEAkCUP/iQJgZ2HVgA/o6LRjRfiHgr2/yWxCTwS24vBpxepKEJZ
> > m/smYD3livDhXID3fjI9vJPnPkCgr9u6G63yqt41DK6fZ5ojnbJXD88SykRMP/Cs
> > Dk+qAojubW1UqzG2NKeOVZ6xslDt4N5U27rw2VStrUwk1kx5Lt0=
> > -----END RSA PRIVATE KEY-----
>
> I'm sure you can see the problem. Compare with mine below.
>
> All lines with base64 code on them should be the same length (64
> characters), apart from the final one in each block, which should be a
> multiple of 4 characters in length.
>
> The END and BEGIN lines should be separate, and not joined as above,
> and there are five dashes before and after the BEGIN FOO or END FOO
> text.
>
>
> > > -----BEGIN CERTIFICATE-----
> > > MIIFwjCCBKqgAwIBAgISBIPa+jJe6VGpeSANiZUlOHRoOMSd5ShZqIkvDQC2dkm0
> > > mWW12hv4hfXgohn93Q/NstHq3hu5wRega3caQ9xtrf0LNTABdeuXuOntwBSzIGvx
> > > h+JGlOrXRo8x3FwyFNOilTU9aXTwB31T//l7pEQtrJwzhU8oW91sXhRpH/85IMYY
> > > ...
> > > Q54SFBxXzaxh/Ctqdgv2Ps+3O35Y0EhOQY5egC2EneXza9cxFeM=
> > > -----END CERTIFICATE-----
> > > -----BEGIN CERTIFICATE-----
> > > MIIEkjCCA3qgYMEOPwO0GoU9OP6z1NeelJPc4ViX7yM/yVOzY8o43SMR1EPAKWnL
> > > JXS+afquhx6n4SjHKy8D142K55w11beTgN0XtERQ6CQVsWrWB7T+AqGpkAoyh3Nl
> > > FdylWWkUsHCfYecjfYzA0nNqhpgISaCbmGsuj8HmT6+kr3ha0WdMvy+wy7tb3Exf
> > > ...
> > > X7SLD9j35mPMO2BGAPONMqhiQ+qluw==
> > > -----END CERTIFICATE-----
> > > -----BEGIN PRIVATE KEY-----
> > > MIIEvQIBADANAW64kp3aGDR1DiYTuRsd/yq9KqBXNky2sidHHIGXiaJ7ETNXvuPt
> > > Xf+nTNfaOi1oO6cmzWSdu1pzxEfJkqHGNq4Y3KhPuL9WFQeO7R0zQnnPOTA0xT26
> > > k8OGh2BeT7bMD44/Y2v6QaMZgfLLmAcq8v6XUPqRwMMy58j1n5fusWPcmUJFY1nW
> > > ...
> > > 408Pk4F/cVOz/l+aPiHWPqg=
> > > -----END PRIVATE KEY-----
>
> --
> Paul Martin <pm at nowster.me.uk>
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20200624/c6260fa6/attachment.htm>