Re: Icecast-dev Digest, Vol 158, Issue 1
Paul Zaremba <[email protected]> Mon, 31 Aug 2020 12:57:52 -0500
| Newsgroups | gmane.comp.audio.icecast.devel |
|---|---|
| Message-ID | <CAF4BKq-ESYf_OK_0kmbi0pbuga4+2CEPrpWnxwxHXDDbUsS5=Q@mail.gmail.com> |
--===============1157359237813211561== Content-Type: multipart/alternative; boundary="000000000000d3270105ae302438" --000000000000d3270105ae302438 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable "i have got a big problem with ssl cert for icecast2. I've got 3 files from provider. I've made one .pem file from this, but icecast can't read the certyficate." #1) Yep, throw that key away yesterday, and never share the private key with anyone. #2) You sure you concatenated the full cert chain PLUS the private key file in PEM format? I did just that and it works fine. -p On Mon, Aug 31, 2020 at 7:00 AM <[email protected]> wrote: > Send Icecast-dev mailing list submissions to > [email protected] > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.xiph.org/mailman/listinfo/icecast-dev > or, via email, send a message with subject or body 'help' to > [email protected] > > You can reach the person managing the list at > [email protected] > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Icecast-dev digest..." > > > Today's Topics: > > 1. SSL problems (Bartosz Wi=C4=99cek) > 2. Re: SSL problems (Jordan Erickson) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sun, 30 Aug 2020 20:35:11 +0000 > From: Bartosz Wi=C4=99cek <[email protected]> > To: "[email protected]" <[email protected]> > Subject: [Icecast-dev] SSL problems > Message-ID: > < > PR3PR06MB7081E85D610C0D7D4C7B7D2CBB500@PR3PR06MB7081.eurprd06.prod.outloo= k.com > > > > Content-Type: text/plain; charset=3D"iso-8859-2" > > Hello everybody, > > i have got a big problem with ssl cert for icecast2. I've got 3 files fro= m > provider. I've made one .pem file from this, but icecast can't read the > certyficate. > > I will be very gratefull for help, > BW > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: < > http://lists.xiph.org/pipermail/icecast-dev/attachments/20200830/cb516cbe= /attachment-0001.html > > > -------------- next part -------------- > An embedded and charset-unspecified text was scrubbed... > Name: CA.txt > URL: < > http://lists.xiph.org/pipermail/icecast-dev/attachments/20200830/cb516cbe= /attachment-0003.txt > > > -------------- next part -------------- > An embedded and charset-unspecified text was scrubbed... > Name: cert.txt > URL: < > http://lists.xiph.org/pipermail/icecast-dev/attachments/20200830/cb516cbe= /attachment-0004.txt > > > -------------- next part -------------- > An embedded and charset-unspecified text was scrubbed... > Name: key.txt > URL: < > http://lists.xiph.org/pipermail/icecast-dev/attachments/20200830/cb516cbe= /attachment-0005.txt > > > > ------------------------------ > > Message: 2 > Date: Sun, 30 Aug 2020 15:22:09 -0700 > From: Jordan Erickson <[email protected]> > To: Bartosz Wi=C4=99cek <[email protected]>, "[email protected]" > <[email protected]> > Subject: Re: [Icecast-dev] SSL problems > Message-ID: <[email protected]> > Content-Type: text/plain; charset=3Diso-8859-2 > > You attached your private keyfile to a public list email. This is not goo= d. > > I suggest you 'throw these keys away', regenerate new ones and do NOT > share your private key with *anyone* as it compromises the security of > your setup. > > Please also state the specific error when you attempt to start Icecast. > It could very well be a permissions issue. > > > Sincerely, > Jordan Erickson > > > On 8/30/20 1:35 PM, Bartosz Wi=C4=99cek wrote: > > Hello everybody, > > > > i have got a big problem with ssl cert for icecast2. I've got 3 files > > from provider. I've made one .pem file from this, but icecast can't rea= d > > the certyficate. > > > > I will be very gratefull for help, > > BW > > > > _______________________________________________ > > Icecast-dev mailing list > > [email protected] > > http://lists.xiph.org/mailman/listinfo/icecast-dev > > > > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > Icecast-dev mailing list > [email protected] > http://lists.xiph.org/mailman/listinfo/icecast-dev > > > ------------------------------ > > End of Icecast-dev Digest, Vol 158, Issue 1 > ******************************************* > --000000000000d3270105ae302438 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div dir=3D"ltr">"i have got a big problem with ssl c= ert for icecast2. I've got 3 files from provider. I've made one .pe= m file from this, but icecast can't read the certyficate."<br><br>= #1) Yep, throw that key away yesterday, and never share the private key wit= h anyone.</div><div dir=3D"ltr"><br></div><div>#2) You sure you concatenate= d the full cert chain PLUS the private key file in PEM format?=C2=A0 I did = just that and it works fine.</div><div><br></div><div>-p</div><br><div clas= s=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Mon, Aug 31, 202= 0 at 7:00 AM <<a href=3D"mailto:[email protected]">icecast-de= [email protected]</a>> wrote:<br></div><blockquote class=3D"gmail_quote= " style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);= padding-left:1ex">Send Icecast-dev mailing list submissions to<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 <a href=3D"mailto:[email protected]" target= =3D"_blank">[email protected]</a><br> <br> To subscribe or unsubscribe via the World Wide Web, visit<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 <a href=3D"http://lists.xiph.org/mailman/listin= fo/icecast-dev" rel=3D"noreferrer" target=3D"_blank">http://lists.xiph.org/= mailman/listinfo/icecast-dev</a><br> or, via email, send a message with subject or body 'help' to<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 <a href=3D"mailto:[email protected]"= target=3D"_blank">[email protected]</a><br> <br> You can reach the person managing the list at<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 <a href=3D"mailto:[email protected]" t= arget=3D"_blank">[email protected]</a><br> <br> When replying, please edit your Subject line so it is more specific<br> than "Re: Contents of Icecast-dev digest..."<br> <br> <br> Today's Topics:<br> <br> =C2=A0 =C2=A01. SSL problems (Bartosz Wi=C4=99cek)<br> =C2=A0 =C2=A02. Re: SSL problems (Jordan Erickson)<br> <br> <br> ----------------------------------------------------------------------<br> <br> Message: 1<br> Date: Sun, 30 Aug 2020 20:35:11 +0000<br> From: Bartosz Wi=C4=99cek <<a href=3D"mailto:[email protected]" target= =3D"_blank">[email protected]</a>><br> To: "<a href=3D"mailto:[email protected]" target=3D"_blank">icecast= [email protected]</a>" <<a href=3D"mailto:[email protected]" target= =3D"_blank">[email protected]</a>><br> Subject: [Icecast-dev] SSL problems<br> Message-ID:<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 <<a href=3D"mailto:PR3PR06MB7081E85D610C0D7D= [email protected]" target=3D"_blank">PR= 3PR06MB7081E85D610C0D7D4C7B7D2CBB500@PR3PR06MB7081.eurprd06.prod.outlook.co= m</a>><br> <br> Content-Type: text/plain; charset=3D"iso-8859-2"<br> <br> Hello everybody,<br> <br> i have got a big problem with ssl cert for icecast2. I've got 3 files f= rom provider. I've made one .pem file from this, but icecast can't = read the certyficate.<br> <br> I will be very gratefull for help,<br> BW<br> -------------- next part --------------<br> An HTML attachment was scrubbed...<br> URL: <<a href=3D"http://lists.xiph.org/pipermail/icecast-dev/attachments= /20200830/cb516cbe/attachment-0001.html" rel=3D"noreferrer" target=3D"_blan= k">http://lists.xiph.org/pipermail/icecast-dev/attachments/20200830/cb516cb= e/attachment-0001.html</a>><br> -------------- next part --------------<br> An embedded and charset-unspecified text was scrubbed...<br> Name: CA.txt<br> URL: <<a href=3D"http://lists.xiph.org/pipermail/icecast-dev/attachments= /20200830/cb516cbe/attachment-0003.txt" rel=3D"noreferrer" target=3D"_blank= ">http://lists.xiph.org/pipermail/icecast-dev/attachments/20200830/cb516cbe= /attachment-0003.txt</a>><br> -------------- next part --------------<br> An embedded and charset-unspecified text was scrubbed...<br> Name: cert.txt<br> URL: <<a href=3D"http://lists.xiph.org/pipermail/icecast-dev/attachments= /20200830/cb516cbe/attachment-0004.txt" rel=3D"noreferrer" target=3D"_blank= ">http://lists.xiph.org/pipermail/icecast-dev/attachments/20200830/cb516cbe= /attachment-0004.txt</a>><br> -------------- next part --------------<br> An embedded and charset-unspecified text was scrubbed...<br> Name: key.txt<br> URL: <<a href=3D"http://lists.xiph.org/pipermail/icecast-dev/attachments= /20200830/cb516cbe/attachment-0005.txt" rel=3D"noreferrer" target=3D"_blank= ">http://lists.xiph.org/pipermail/icecast-dev/attachments/20200830/cb516cbe= /attachment-0005.txt</a>><br> <br> ------------------------------<br> <br> Message: 2<br> Date: Sun, 30 Aug 2020 15:22:09 -0700<br> From: Jordan Erickson <<a href=3D"mailto:[email protected]" target=3D"_= blank">[email protected]</a>><br> To: Bartosz Wi=C4=99cek <<a href=3D"mailto:[email protected]" target= =3D"_blank">[email protected]</a>>, "<a href=3D"mailto:icecast-de= [email protected]" target=3D"_blank">[email protected]</a>"<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 <<a href=3D"mailto:[email protected]" tar= get=3D"_blank">[email protected]</a>><br> Subject: Re: [Icecast-dev] SSL problems<br> Message-ID: <<a href=3D"mailto:03ff4784-147c-e459-868f-876a1a639425@cool= mic.net" target=3D"_blank">[email protected]= </a>><br> Content-Type: text/plain; charset=3Diso-8859-2<br> <br> You attached your private keyfile to a public list email. This is not good.= <br> <br> I suggest you 'throw these keys away', regenerate new ones and do N= OT<br> share your private key with *anyone* as it compromises the security of<br> your setup.<br> <br> Please also state the specific error when you attempt to start Icecast.<br> It could very well be a permissions issue.<br> <br> <br> Sincerely,<br> Jordan Erickson<br> <br> <br> On 8/30/20 1:35 PM, Bartosz Wi=C4=99cek wrote:<br> > Hello everybody,<br> > <br> > i have got a big problem with ssl cert for icecast2. I've got 3 fi= les<br> > from provider. I've made one .pem file from this, but icecast can&= #39;t read<br> > the certyficate.<br> > <br> > I will be very gratefull for help,<br> > BW<br> > <br> > _______________________________________________<br> > Icecast-dev mailing list<br> > <a href=3D"mailto:[email protected]" target=3D"_blank">Icecast-dev@= xiph.org</a><br> > <a href=3D"http://lists.xiph.org/mailman/listinfo/icecast-dev" rel=3D"= noreferrer" target=3D"_blank">http://lists.xiph.org/mailman/listinfo/icecas= t-dev</a><br> > <br> <br> <br> ------------------------------<br> <br> Subject: Digest Footer<br> <br> _______________________________________________<br> Icecast-dev mailing list<br> <a href=3D"mailto:[email protected]" target=3D"_blank">Icecast-dev@xiph.= org</a><br> <a href=3D"http://lists.xiph.org/mailman/listinfo/icecast-dev" rel=3D"noref= errer" target=3D"_blank">http://lists.xiph.org/mailman/listinfo/icecast-dev= </a><br> <br> <br> ------------------------------<br> <br> End of Icecast-dev Digest, Vol 158, Issue 1<br> *******************************************<br> </blockquote></div></div> --000000000000d3270105ae302438-- --===============1157359237813211561== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KSWNlY2FzdC1k ZXYgbWFpbGluZyBsaXN0CkljZWNhc3QtZGV2QHhpcGgub3JnCmh0dHA6Ly9saXN0cy54aXBoLm9y Zy9tYWlsbWFuL2xpc3RpbmZvL2ljZWNhc3QtZGV2Cg== --===============1157359237813211561==--