[Icecast] SSL-Question

[Ervin Bizjak]

my ERROR.log show:
[2020-06-28  07:54:24] INFO main/main.c Icecast 2.4.4 server started
[2020-06-28  07:54:24] DBUG yp/yp.c Updating YP configuration
[2020-06-28  07:54:24] INFO yp/yp.c YP update thread started
[2020-06-28  07:54:24] INFO connection/connection.c SSL certificate found
at icecast.pem
[2020-06-28  07:54:24] INFO connection/connection.c SSL using ciphers
ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
[2020-06-28  07:54:25] DBUG slave/slave.c checking master stream list
[2020-06-28  07:54:41] DBUG stats/stats.c update global clients (1)
[2020-06-28  07:54:41] DBUG stats/stats.c update global connections (1)
[2020-06-28  07:54:42] DBUG stats/stats.c update global clients (2)

and access.log:
127.0.0.1 - - [28/Jun/2020:07:55:05 +0200] "GET / HTTP/1.1" 200 1431 "-"
"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101
Firefox/77.0" 5
127.0.0.1 - - [28/Jun/2020:07:55:05 +0200] "GET /style.css HTTP/1.1" 200
4170 "http://localhost:8000/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64;
rv:77.0) Gecko/20100101 Firefox/77.0" 0
127.0.0.1 - - [28/Jun/2020:07:55:05 +0200] "GET /icecast.png HTTP/1.1" 200
5365 "http://localhost:8000/style.css" "Mozilla/5.0 (Windows NT 10.0;
Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 0
127.0.0.1 - - [28/Jun/2020:07:55:05 +0200] "GET /favicon.ico HTTP/1.1" 404
394 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101
Firefox/77.0" 0

I not use domain for my icecast, but only localhost http://localhost:8000
and https://localhost:8443. and http(s)://ip:port This certificate is for
may domain, which buy, but don't use it. It's only parked for my web goster
(free DNS)

V V ned., 28. jun. 2020 ob 00:36 je oseba Paul Martin <pm at nowster.me.uk>
napisala:

> On Sat, Jun 27, 2020 at 08:44:32PM +0200, Ervin Bizjak wrote:
> > I set icecast.xmp:
> >     <listen-socket>
> >         <port>8000</port>
> >     </listen-socket>
> >
> >     <listen-socket>
> >         <port>8443</port>
> >         <ssl>1</ssl>
> >     </listen-socket>
> >
> > 8000 work, 8443 not work. If set ssl to port 8000 not work nothing
>
> What do the logs say?
>
> You can browse to https://your.site:8443/ and http://your.site:8000/ ?
>
> PS. My logs show:
>
> [2019-11-28  17:57:27] INFO connection/get_ssl_certificate SSL certificate
> found at /etc/icecast2/icecast.pem
> [2019-11-28  17:57:27] INFO connection/get_ssl_certificate SSL using
> ciphers
> ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
>
>
> --
> Paul Martin <pm at nowster.me.uk>
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20200628/d8cb45bd/attachment.htm>