Icecast - Jun 2020 - SSL-Question

I set icecast.xmp:
    <listen-socket>
        <port>8000</port>
    </listen-socket>

    <listen-socket>
        <port>8443</port>
        <ssl>1</ssl>
    </listen-socket>

8000 work, 8443 not work. If set ssl to port 8000 not work nothing

V V sob., 27. jun. 2020 ob 18:13 je oseba Paul Martin <pm at
nowster.me.uk>
napisala:
> On Fri, Jun 26, 2020 at 09:08:48PM +0200, Ervin Bizjak wrote:
> > chiphers line is too long. And what can I do now?  Can I send 3
> certificate
> > files to someone and edit them for me?
>
> Your ciphers line is perfectly OK.  Your SSL certificate is working.
>
> As per my last email you need to enable it on one of your server's
> listening ports.
>
> --
> Paul Martin <pm at nowster.me.uk>
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.xiph.org/pipermail/icecast/attachments/20200627/d79fb1e8/attachment.html>

On Sat, Jun 27, 2020 at 08:44:32PM +0200, Ervin Bizjak
wrote:
> I set icecast.xmp:
>     <listen-socket>
>         <port>8000</port>
>     </listen-socket>
> 
>     <listen-socket>
>         <port>8443</port>
>         <ssl>1</ssl>
>     </listen-socket>
> 
> 8000 work, 8443 not work. If set ssl to port 8000 not work nothing
What do the logs say?

You can browse to https://your.site:8443/ and http://your.site:8000/ ?

PS. My logs show:

[2019-11-28  17:57:27] INFO connection/get_ssl_certificate SSL certificate found
at /etc/icecast2/icecast.pem
[2019-11-28  17:57:27] INFO connection/get_ssl_certificate SSL using ciphers
ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA


-- 
Paul Martin <pm at nowster.me.uk>

my ERROR.log show:
[2020-06-28  07:54:24] INFO main/main.c Icecast 2.4.4 server started
[2020-06-28  07:54:24] DBUG yp/yp.c Updating YP configuration
[2020-06-28  07:54:24] INFO yp/yp.c YP update thread started
[2020-06-28  07:54:24] INFO connection/connection.c SSL certificate found
at icecast.pem
[2020-06-28  07:54:24] INFO connection/connection.c SSL using ciphers
ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
[2020-06-28  07:54:25] DBUG slave/slave.c checking master stream list
[2020-06-28  07:54:41] DBUG stats/stats.c update global clients (1)
[2020-06-28  07:54:41] DBUG stats/stats.c update global connections (1)
[2020-06-28  07:54:42] DBUG stats/stats.c update global clients (2)

and access.log:
127.0.0.1 - - [28/Jun/2020:07:55:05 +0200] "GET / HTTP/1.1" 200 1431
"-"
"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101
Firefox/77.0" 5
127.0.0.1 - - [28/Jun/2020:07:55:05 +0200] "GET /style.css HTTP/1.1"
200
4170 "http://localhost:8000/" "Mozilla/5.0 (Windows NT 10.0;
Win64; x64;
rv:77.0) Gecko/20100101 Firefox/77.0" 0
127.0.0.1 - - [28/Jun/2020:07:55:05 +0200] "GET /icecast.png HTTP/1.1"
200
5365 "http://localhost:8000/style.css" "Mozilla/5.0 (Windows NT
10.0;
Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 0
127.0.0.1 - - [28/Jun/2020:07:55:05 +0200] "GET /favicon.ico HTTP/1.1"
404
394 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0)
Gecko/20100101
Firefox/77.0" 0

I not use domain for my icecast, but only localhost http://localhost:8000
and https://localhost:8443. and http(s)://ip:port This certificate is for
may domain, which buy, but don't use it. It's only parked for my web
goster
(free DNS)

V V ned., 28. jun. 2020 ob 00:36 je oseba Paul Martin <pm at
nowster.me.uk>
napisala:
> On Sat, Jun 27, 2020 at 08:44:32PM +0200, Ervin Bizjak wrote:
> > I set icecast.xmp:
> >     <listen-socket>
> >         <port>8000</port>
> >     </listen-socket>
> >
> >     <listen-socket>
> >         <port>8443</port>
> >         <ssl>1</ssl>
> >     </listen-socket>
> >
> > 8000 work, 8443 not work. If set ssl to port 8000 not work nothing
>
> What do the logs say?
>
> You can browse to https://your.site:8443/ and http://your.site:8000/ ?
>
> PS. My logs show:
>
> [2019-11-28  17:57:27] INFO connection/get_ssl_certificate SSL certificate
> found at /etc/icecast2/icecast.pem
> [2019-11-28  17:57:27] INFO connection/get_ssl_certificate SSL using
> ciphers
>
ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
>
>
> --
> Paul Martin <pm at nowster.me.uk>
> _______________________________________________
> Icecast mailing list
> Icecast at xiph.org
> http://lists.xiph.org/mailman/listinfo/icecast
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.xiph.org/pipermail/icecast/attachments/20200628/d8cb45bd/attachment.html>