Icecast - Jun 2020 - SSL-Question

Hello!
I edit .pem file and now is the same as you specifie, but not work.

Error.log display:
[2020-06-24  12:54:54] INFO main/main.c Icecast 2.4.4 server started
[2020-06-24  12:54:54] DBUG yp/yp.c Updating YP configuration
[2020-06-24  12:54:54] INFO yp/yp.c YP update thread started
[2020-06-24  12:54:55] INFO connection/connection.c SSL certificate found
at icecast.pem
[2020-06-24  12:54:55] INFO connection/connection.c SSL using ciphers
ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128
*(this chiphers is still going on, I just shortened it in this email)*
[2020-06-24  12:54:55] DBUG slave/slave.c checking master stream list

V V sre., 24. jun. 2020 ob 12:11 je oseba Paul Martin <pm at
nowster.me.uk>
napisala:
> On Tue, Jun 23, 2020 at 08:58:43PM +0200, Ervin Bizjak wrote:
> > Tgis is my certificate:
> > -----BEGIN CERTIFICATE-----
> > MIIGfjCCBGagAwIBAgIRAPqeon+kOZ6aXWx4AImqAQwwDQYJKoZIhvcNAQEMBQAw
> > SzELMAkGA1UEBhMCQVQxEDAOBgNVBAoTB1plcm9TU0wxKjAoBgNVBAMTIVplcm9T
> > U0wgUlNBIERvbWFpbiBTZWN1cmUgU2l0ZSBDQTAeFw0yMDA1MDcwMDAwMDBaFw0
> > -----END CERTIFICATE----------BEGIN CERTIFICATE-----
> > MIIG1TCCBL2gAwIBAgIQbFWr29AHksedBwzYEZ7WvzANBgkqhkiG9w0BAQwFADCB
> > iDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0p
> > -----END CERTIFICATE----------BEGIN RSA PRIVATE KEY-----
> > MIIEogIBAAKCAQEAkCUP/iQJgZ2HVgA/o6LRjRfiHgr2/yWxCTwS24vBpxepKEJZ
> > m/smYD3livDhXID3fjI9vJPnPkCgr9u6G63yqt41DK6fZ5ojnbJXD88SykRMP/Cs
> > Dk+qAojubW1UqzG2NKeOVZ6xslDt4N5U27rw2VStrUwk1kx5Lt0> > -----END
RSA PRIVATE KEY-----
>
> I'm sure you can see the problem. Compare with mine below.
>
> All lines with base64 code on them should be the same length (64
> characters), apart from the final one in each block, which should be a
> multiple of 4 characters in length.
>
> The END and BEGIN lines should be separate, and not joined as above,
> and there are five dashes before and after the BEGIN FOO or END FOO
> text.
>
>
> > > -----BEGIN CERTIFICATE-----
> > > MIIFwjCCBKqgAwIBAgISBIPa+jJe6VGpeSANiZUlOHRoOMSd5ShZqIkvDQC2dkm0
> > > mWW12hv4hfXgohn93Q/NstHq3hu5wRega3caQ9xtrf0LNTABdeuXuOntwBSzIGvx
> > > h+JGlOrXRo8x3FwyFNOilTU9aXTwB31T//l7pEQtrJwzhU8oW91sXhRpH/85IMYY
> > > ...
> > > Q54SFBxXzaxh/Ctqdgv2Ps+3O35Y0EhOQY5egC2EneXza9cxFeM> > >
-----END CERTIFICATE-----
> > > -----BEGIN CERTIFICATE-----
> > > MIIEkjCCA3qgYMEOPwO0GoU9OP6z1NeelJPc4ViX7yM/yVOzY8o43SMR1EPAKWnL
> > > JXS+afquhx6n4SjHKy8D142K55w11beTgN0XtERQ6CQVsWrWB7T+AqGpkAoyh3Nl
> > > FdylWWkUsHCfYecjfYzA0nNqhpgISaCbmGsuj8HmT6+kr3ha0WdMvy+wy7tb3Exf
> > > ...
> > > X7SLD9j35mPMO2BGAPONMqhiQ+qluw=> > > -----END
CERTIFICATE-----
> > > -----BEGIN PRIVATE KEY-----
> > > MIIEvQIBADANAW64kp3aGDR1DiYTuRsd/yq9KqBXNky2sidHHIGXiaJ7ETNXvuPt
> > > Xf+nTNfaOi1oO6cmzWSdu1pzxEfJkqHGNq4Y3KhPuL9WFQeO7R0zQnnPOTA0xT26
> > > k8OGh2BeT7bMD44/Y2v6QaMZgfLLmAcq8v6XUPqRwMMy58j1n5fusWPcmUJFY1nW
> > > ...
> > > 408Pk4F/cVOz/l+aPiHWPqg> > > -----END PRIVATE KEY-----
>
> --
> Paul Martin <pm at nowster.me.uk>
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.xiph.org/pipermail/icecast/attachments/20200624/c6260fa6/attachment.html>

On Wed, Jun 24, 2020 at 01:01:38PM +0200, Ervin Bizjak
wrote:
> Hello!
> I edit .pem file and now is the same as you specifie, but not work.
> 
> Error.log display:
> [2020-06-24  12:54:54] INFO main/main.c Icecast 2.4.4 server started
> [2020-06-24  12:54:54] DBUG yp/yp.c Updating YP configuration
> [2020-06-24  12:54:54] INFO yp/yp.c YP update thread started
> [2020-06-24  12:54:55] INFO connection/connection.c SSL certificate found
> at icecast.pem
> [2020-06-24  12:54:55] INFO connection/connection.c SSL using ciphers
>
ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128
> *(this chiphers is still going on, I just shortened it in this email)*
That's fixed your certificate file.

The ciphers line is long.

And you have SSL.

You probably want to enable SSL on a port now:

    <listen-socket>
        <port>8000</port>
        <bind-address>::</bind-address>
    </listen-socket>

    <listen-socket>
        <port>8443</port>
        <bind-address>::</bind-address>
        <ssl>1</ssl>
    </listen-socket>


-- 
Paul Martin <pm at nowster.me.uk>

Yes I fix .pem. chiphers line = 758 characters

V V pet., 26. jun. 2020 ob 14:45 je oseba Paul Martin <pm at
nowster.me.uk>
napisala:
> On Wed, Jun 24, 2020 at 01:01:38PM +0200, Ervin Bizjak wrote:
> > Hello!
> > I edit .pem file and now is the same as you specifie, but not work.
> >
> > Error.log display:
> > [2020-06-24  12:54:54] INFO main/main.c Icecast 2.4.4 server started
> > [2020-06-24  12:54:54] DBUG yp/yp.c Updating YP configuration
> > [2020-06-24  12:54:54] INFO yp/yp.c YP update thread started
> > [2020-06-24  12:54:55] INFO connection/connection.c SSL certificate
found
> > at icecast.pem
> > [2020-06-24  12:54:55] INFO connection/connection.c SSL using ciphers
> >
>
ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128
> > *(this chiphers is still going on, I just shortened it in this email)*
>
> That's fixed your certificate file.
>
> The ciphers line is long.
>
> And you have SSL.
>
> You probably want to enable SSL on a port now:
>
>     <listen-socket>
>         <port>8000</port>
>         <bind-address>::</bind-address>
>     </listen-socket>
>
>     <listen-socket>
>         <port>8443</port>
>         <bind-address>::</bind-address>
>         <ssl>1</ssl>
>     </listen-socket>
>
>
> --
> Paul Martin <pm at nowster.me.uk>
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.xiph.org/pipermail/icecast/attachments/20200626/51c0f7e2/attachment.html>