[Icecast] Icecast2 with SSL, includes error.log extract
Steve Matzura
sm at noisynotes.com
Fri Nov 27 22:17:14 UTC 2020
After placing "<ssl>1</ssl>" in the listen-sockets stanza and the path
to my PEM-format certificate in the paths stanza, I restarted Icecast2.
In /usr/share/icecast2/log I got the following in error.log:
[2020-11-27 22:00:07] INFO connection/get_ssl_certificate SSL
certificate found at /etc/ssl/2020/icecast.pem
[2020-11-27 22:00:07] INFO connection/get_ssl_certificate SSL using
ciphers
ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
I have absolutely no idea what any of this means, good or bad, but I do
know that after restarting Icecast, I couldn't restart ices and
therefore couldn't connect to the server. Apparently something is wrong
with my PEM certificate file, but I truly don't know what it could be. I
created it by concatenating my server's public key plus its certifying
authority (CA) key provided by the hosting company plus the server's
private key according to many articles and Web pages, not to mention
several helpful messages on this very list. After restarting Icecast, I
could not restart ices, which probably means I need something else in
the ices configuration about which I do not know, or my certificate PEM
file is bad. Any help on solving this would be greatly appreaciated. I
feel I'm very close, jut one detail away from getting it right.
Thanks in advance.
More information about the Icecast
mailing list