Tgis is my certificate: -----BEGIN CERTIFICATE----- MIIGfjCCBGagAwIBAgIRAPqeon+kOZ6aXWx4AImqAQwwDQYJKoZIhvcNAQEMBQAw SzELMAkGA1UEBhMCQVQxEDAOBgNVBAoTB1plcm9TU0wxKjAoBgNVBAMTIVplcm9T U0wgUlNBIERvbWFpbiBTZWN1cmUgU2l0ZSBDQTAeFw0yMDA1MDcwMDAwMDBaFw0 -----END CERTIFICATE----------BEGIN CERTIFICATE----- MIIG1TCCBL2gAwIBAgIQbFWr29AHksedBwzYEZ7WvzANBgkqhkiG9w0BAQwFADCB iDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0p -----END CERTIFICATE----------BEGIN RSA PRIVATE KEY----- MIIEogIBAAKCAQEAkCUP/iQJgZ2HVgA/o6LRjRfiHgr2/yWxCTwS24vBpxepKEJZ m/smYD3livDhXID3fjI9vJPnPkCgr9u6G63yqt41DK6fZ5ojnbJXD88SykRMP/Cs Dk+qAojubW1UqzG2NKeOVZ6xslDt4N5U27rw2VStrUwk1kx5Lt0-----END RSA PRIVATE KEY----- V V tor., 23. jun. 2020 ob 18:33 je oseba Paul Martin <pm at nowster.me.uk> napisala:> On Tue, Jun 23, 2020 at 07:58:35AM +0200, Ervin Bizjak wrote: > > CAT not working for me, because I use windows8, not Linux. > > In that case you probably need to check the files are proper text > files and correctly terminated. > > Open the icecast.pem file in a text editor. It should look something > like this. The "..." represents many lines of base-64 encoded > data. All the data lines should be the same length, except for the > last line in each section. > > -----BEGIN CERTIFICATE----- > MIIFwjCCBKqgAwIBAgISBIPa+jJe6VGpeSANiZUlOHRoOMSd5ShZqIkvDQC2dkm0 > mWW12hv4hfXgohn93Q/NstHq3hu5wRega3caQ9xtrf0LNTABdeuXuOntwBSzIGvx > h+JGlOrXRo8x3FwyFNOilTU9aXTwB31T//l7pEQtrJwzhU8oW91sXhRpH/85IMYY > ... > Q54SFBxXzaxh/Ctqdgv2Ps+3O35Y0EhOQY5egC2EneXza9cxFeM> -----END CERTIFICATE----- > -----BEGIN CERTIFICATE----- > MIIEkjCCA3qgYMEOPwO0GoU9OP6z1NeelJPc4ViX7yM/yVOzY8o43SMR1EPAKWnL > JXS+afquhx6n4SjHKy8D142K55w11beTgN0XtERQ6CQVsWrWB7T+AqGpkAoyh3Nl > FdylWWkUsHCfYecjfYzA0nNqhpgISaCbmGsuj8HmT6+kr3ha0WdMvy+wy7tb3Exf > ... > X7SLD9j35mPMO2BGAPONMqhiQ+qluw=> -----END CERTIFICATE----- > -----BEGIN PRIVATE KEY----- > MIIEvQIBADANAW64kp3aGDR1DiYTuRsd/yq9KqBXNky2sidHHIGXiaJ7ETNXvuPt > Xf+nTNfaOi1oO6cmzWSdu1pzxEfJkqHGNq4Y3KhPuL9WFQeO7R0zQnnPOTA0xT26 > k8OGh2BeT7bMD44/Y2v6QaMZgfLLmAcq8v6XUPqRwMMy58j1n5fusWPcmUJFY1nW > ... > 408Pk4F/cVOz/l+aPiHWPqg> -----END PRIVATE KEY----- > > The most likely damage would be that the begin/end delimiters are > mashed together, or that there are cut-and-paste errors. > > PS. Just in case anyone's wondering, the data in my example here > beyond the first few bytes are random gibberish. It's not part of any > valid certificate or key data. > > -- > Paul Martin <pm at nowster.me.uk> > _______________________________________________ > Icecast mailing list > Icecast at xiph.org > http://lists.xiph.org/mailman/listinfo/icecast >-------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.xiph.org/pipermail/icecast/attachments/20200623/b517d2fd/attachment.html>
On Tue, Jun 23, 2020 at 08:58:43PM +0200, Ervin Bizjak wrote:> Tgis is my certificate: > -----BEGIN CERTIFICATE----- > MIIGfjCCBGagAwIBAgIRAPqeon+kOZ6aXWx4AImqAQwwDQYJKoZIhvcNAQEMBQAw > SzELMAkGA1UEBhMCQVQxEDAOBgNVBAoTB1plcm9TU0wxKjAoBgNVBAMTIVplcm9T > U0wgUlNBIERvbWFpbiBTZWN1cmUgU2l0ZSBDQTAeFw0yMDA1MDcwMDAwMDBaFw0 > -----END CERTIFICATE----------BEGIN CERTIFICATE----- > MIIG1TCCBL2gAwIBAgIQbFWr29AHksedBwzYEZ7WvzANBgkqhkiG9w0BAQwFADCB > iDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0p > -----END CERTIFICATE----------BEGIN RSA PRIVATE KEY----- > MIIEogIBAAKCAQEAkCUP/iQJgZ2HVgA/o6LRjRfiHgr2/yWxCTwS24vBpxepKEJZ > m/smYD3livDhXID3fjI9vJPnPkCgr9u6G63yqt41DK6fZ5ojnbJXD88SykRMP/Cs > Dk+qAojubW1UqzG2NKeOVZ6xslDt4N5U27rw2VStrUwk1kx5Lt0> -----END RSA PRIVATE KEY-----I'm sure you can see the problem. Compare with mine below. All lines with base64 code on them should be the same length (64 characters), apart from the final one in each block, which should be a multiple of 4 characters in length. The END and BEGIN lines should be separate, and not joined as above, and there are five dashes before and after the BEGIN FOO or END FOO text.> > -----BEGIN CERTIFICATE----- > > MIIFwjCCBKqgAwIBAgISBIPa+jJe6VGpeSANiZUlOHRoOMSd5ShZqIkvDQC2dkm0 > > mWW12hv4hfXgohn93Q/NstHq3hu5wRega3caQ9xtrf0LNTABdeuXuOntwBSzIGvx > > h+JGlOrXRo8x3FwyFNOilTU9aXTwB31T//l7pEQtrJwzhU8oW91sXhRpH/85IMYY > > ... > > Q54SFBxXzaxh/Ctqdgv2Ps+3O35Y0EhOQY5egC2EneXza9cxFeM> > -----END CERTIFICATE----- > > -----BEGIN CERTIFICATE----- > > MIIEkjCCA3qgYMEOPwO0GoU9OP6z1NeelJPc4ViX7yM/yVOzY8o43SMR1EPAKWnL > > JXS+afquhx6n4SjHKy8D142K55w11beTgN0XtERQ6CQVsWrWB7T+AqGpkAoyh3Nl > > FdylWWkUsHCfYecjfYzA0nNqhpgISaCbmGsuj8HmT6+kr3ha0WdMvy+wy7tb3Exf > > ... > > X7SLD9j35mPMO2BGAPONMqhiQ+qluw=> > -----END CERTIFICATE----- > > -----BEGIN PRIVATE KEY----- > > MIIEvQIBADANAW64kp3aGDR1DiYTuRsd/yq9KqBXNky2sidHHIGXiaJ7ETNXvuPt > > Xf+nTNfaOi1oO6cmzWSdu1pzxEfJkqHGNq4Y3KhPuL9WFQeO7R0zQnnPOTA0xT26 > > k8OGh2BeT7bMD44/Y2v6QaMZgfLLmAcq8v6XUPqRwMMy58j1n5fusWPcmUJFY1nW > > ... > > 408Pk4F/cVOz/l+aPiHWPqg> > -----END PRIVATE KEY------- Paul Martin <pm at nowster.me.uk>
Hello! I edit .pem file and now is the same as you specifie, but not work. Error.log display: [2020-06-24 12:54:54] INFO main/main.c Icecast 2.4.4 server started [2020-06-24 12:54:54] DBUG yp/yp.c Updating YP configuration [2020-06-24 12:54:54] INFO yp/yp.c YP update thread started [2020-06-24 12:54:55] INFO connection/connection.c SSL certificate found at icecast.pem [2020-06-24 12:54:55] INFO connection/connection.c SSL using ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128 *(this chiphers is still going on, I just shortened it in this email)* [2020-06-24 12:54:55] DBUG slave/slave.c checking master stream list V V sre., 24. jun. 2020 ob 12:11 je oseba Paul Martin <pm at nowster.me.uk> napisala:> On Tue, Jun 23, 2020 at 08:58:43PM +0200, Ervin Bizjak wrote: > > Tgis is my certificate: > > -----BEGIN CERTIFICATE----- > > MIIGfjCCBGagAwIBAgIRAPqeon+kOZ6aXWx4AImqAQwwDQYJKoZIhvcNAQEMBQAw > > SzELMAkGA1UEBhMCQVQxEDAOBgNVBAoTB1plcm9TU0wxKjAoBgNVBAMTIVplcm9T > > U0wgUlNBIERvbWFpbiBTZWN1cmUgU2l0ZSBDQTAeFw0yMDA1MDcwMDAwMDBaFw0 > > -----END CERTIFICATE----------BEGIN CERTIFICATE----- > > MIIG1TCCBL2gAwIBAgIQbFWr29AHksedBwzYEZ7WvzANBgkqhkiG9w0BAQwFADCB > > iDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0p > > -----END CERTIFICATE----------BEGIN RSA PRIVATE KEY----- > > MIIEogIBAAKCAQEAkCUP/iQJgZ2HVgA/o6LRjRfiHgr2/yWxCTwS24vBpxepKEJZ > > m/smYD3livDhXID3fjI9vJPnPkCgr9u6G63yqt41DK6fZ5ojnbJXD88SykRMP/Cs > > Dk+qAojubW1UqzG2NKeOVZ6xslDt4N5U27rw2VStrUwk1kx5Lt0> > -----END RSA PRIVATE KEY----- > > I'm sure you can see the problem. Compare with mine below. > > All lines with base64 code on them should be the same length (64 > characters), apart from the final one in each block, which should be a > multiple of 4 characters in length. > > The END and BEGIN lines should be separate, and not joined as above, > and there are five dashes before and after the BEGIN FOO or END FOO > text. > > > > > -----BEGIN CERTIFICATE----- > > > MIIFwjCCBKqgAwIBAgISBIPa+jJe6VGpeSANiZUlOHRoOMSd5ShZqIkvDQC2dkm0 > > > mWW12hv4hfXgohn93Q/NstHq3hu5wRega3caQ9xtrf0LNTABdeuXuOntwBSzIGvx > > > h+JGlOrXRo8x3FwyFNOilTU9aXTwB31T//l7pEQtrJwzhU8oW91sXhRpH/85IMYY > > > ... > > > Q54SFBxXzaxh/Ctqdgv2Ps+3O35Y0EhOQY5egC2EneXza9cxFeM> > > -----END CERTIFICATE----- > > > -----BEGIN CERTIFICATE----- > > > MIIEkjCCA3qgYMEOPwO0GoU9OP6z1NeelJPc4ViX7yM/yVOzY8o43SMR1EPAKWnL > > > JXS+afquhx6n4SjHKy8D142K55w11beTgN0XtERQ6CQVsWrWB7T+AqGpkAoyh3Nl > > > FdylWWkUsHCfYecjfYzA0nNqhpgISaCbmGsuj8HmT6+kr3ha0WdMvy+wy7tb3Exf > > > ... > > > X7SLD9j35mPMO2BGAPONMqhiQ+qluw=> > > -----END CERTIFICATE----- > > > -----BEGIN PRIVATE KEY----- > > > MIIEvQIBADANAW64kp3aGDR1DiYTuRsd/yq9KqBXNky2sidHHIGXiaJ7ETNXvuPt > > > Xf+nTNfaOi1oO6cmzWSdu1pzxEfJkqHGNq4Y3KhPuL9WFQeO7R0zQnnPOTA0xT26 > > > k8OGh2BeT7bMD44/Y2v6QaMZgfLLmAcq8v6XUPqRwMMy58j1n5fusWPcmUJFY1nW > > > ... > > > 408Pk4F/cVOz/l+aPiHWPqg> > > -----END PRIVATE KEY----- > > -- > Paul Martin <pm at nowster.me.uk> > _______________________________________________ > Icecast mailing list > Icecast at xiph.org > http://lists.xiph.org/mailman/listinfo/icecast >-------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.xiph.org/pipermail/icecast/attachments/20200624/c6260fa6/attachment.html>