Re: Still Struggling with Secure Connections
Yahav Shasha <[email protected]>
| Newsgroups | gmane.comp.audio.icecast.general |
|---|---|
| Message-ID | <CABuab=RRP+PAbP9azW0N-MiZB6AVrhmt8QT5c7rAmG2Gq4bQmg@mail.gmail.com> |
Wait, my bad. I missed the - x509 arg.. On Mon, Feb 6, 2023 at 10:32 AM Yahav Shasha <[email protected]> wrote: > > openssl req -newkey rsa:2048 -new -nodes -x509 -days 3650 -keyout > key.pem -out cert.pem > This will produce a csr file, not an actual certificate, you use this csr > file to generate an actual certificate which you can use with Icecast. > If you're interested in ssl certificate just for testing you can generate > a self signed cert: > https://devopscube.com/create-self-signed-certificates-openssl/ > For production you'll need to acquire a certificate from a trusted CA > though. > > > > On Mon, Feb 6, 2023 at 10:24 AM _zer0_ gravity <[email protected]> > wrote: > >> Which version of Icecast are you running and from which repo did you >> install it? >> I always used the xiph repo: >> http://download.opensuse.org/repositories/multimedia:/xiph/ >> as for example on at least older Debian versions the one on the official >> repos were NOT compiled with ssl support. >> >> Cheers, Paul >> >> -----Oorspronkelijk bericht----- >> Van: Icecast <[email protected]> Namens Steve Matzura >> Verzonden: Monday, 6 February 2023 04:35 >> Aan: Icecast streaming server user discussions <[email protected]> >> Onderwerp: [Icecast] Still Struggling with Secure Connections >> >> I made a special pair of keys just for Icecast with this command: >> >> $ openssl req -newkey rsa:2048 -new -nodes -x509 -days 3650 -keyout >> key.pem -out cert.pem >> >> I combined the two files like this: >> >> $ cat cert.pem key.pem > icecast.pem >> >> I placed icecast.pem in /etc/icecast2 and used 'chown icecast2:icecast >> icecast.pem' to change owner to icecast2:icecast. >> >> I also changed its protection to 600 with 'chmod 600 icecast.pem' since >> it does contain a private key. >> >> >> The listen socket has SSL enabled: >> >> >> <ssl>1</ssl> >> >> >> I check <paths> in icecast.xml: >> >> <ssl-certificate>/etc/icecast2/icecast.pem</ssl-certificate> >> >> I reloaded the configuration: >> >> $ /etc/init.d/icecast2 reload >> >> Tested with: >> >> https://theglobalvoice.info:8443/broadband >> >> >> Same PR_END_OF_FILE error. >> >> >> I'm stumped. >> _______________________________________________ >> Icecast mailing list >> [email protected] >> http://lists.xiph.org/mailman/listinfo/icecast >> _______________________________________________ >> Icecast mailing list >> [email protected] >> http://lists.xiph.org/mailman/listinfo/icecast >> > > > -- > Yahav Shasha, > Web Developer > +972-(0)549214421 > http://www.linkedin.com/in/yahavs > -- Yahav Shasha, Web Developer +972-(0)549214421 http://www.linkedin.com/in/yahavs _______________________________________________ Icecast mailing list [email protected] http://lists.xiph.org/mailman/listinfo/icecast