[Icecast] SSL Question

[Chip]

 If you are using LE then this, IMHO, is a good way to make the icecast.pem
file:

cat privkey.pem fullchain.pem > icecast.pem

The above creates a useful SSL cert format which, for example, a range of
devices are able to interpret.

Then you can check your SSL stream here:

   - https://check-your-website.server-daten.de/?q=

Thanks

Chip Scooter

On Wed, 11 Mar 2020 at 09:47, unosonic <un at aporee.org> wrote:

>
> AFIK, pem is simply
>
> 1. private key
> 2. (most specific) certificate
> 3. intermediate certificates, if any
>
> in this order.
> at least such a pem work for my icecast 2.4 w/o problems
>
> --u
>
>
>
>
>
> Gavin Stephens:
> >
> > > > The error message I was getting in the Icecast log was about no
> > > > compatible ssl port. I assumed this was something more complex than a
> > > > bad certificate since an error message to that effect would have been
> > > > easier to figure out.
> > > >
> > > > I took the certificate and private key .pem files, added them
> together
> > > > but it didn't work until the conversion to pfx and back.
> > > Interesting. Can you show us the difference in .pem files before and
> > > after conversion (without revealing your private key, of course)?
> > >
> > > Regards,
> > >
> > >   - Jeroen
> > >
> > The only difference I can see, is that it has added the bag attributes,
> > issuer, country etc... before the base64 begins in plain text. I'm
> wondering
> > if it was in the way the ACME client made the .pem files. I used
> win-acme.
> >
> > Gavin.
> >
> > _______________________________________________
> > Icecast mailing list
> > Icecast at xiph.org
> > http://lists.xiph.org/mailman/listinfo/icecast
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/icecast/attachments/20200311/9189f856/attachment.htm>