tag:blogger.com,1999:blog-2503925492290059.post4699103696780092435..comments2023-08-06T10:14:55.376+02:00Comments on 42wim's blog: WeepeeTV and VLC42wimhttp://www.blogger.com/profile/03140786286473099167noreply@blogger.comBlogger7125tag:blogger.com,1999:blog-2503925492290059.post-8757593101595617232013-03-04T16:23:06.393+01:002013-03-04T16:23:06.393+01:00Hi Nick, shouldn't be an issue, if it's on...Hi Nick, shouldn't be an issue, if it's on a mac however I can't help you42wimhttps://www.blogger.com/profile/03140786286473099167noreply@blogger.comtag:blogger.com,1999:blog-2503925492290059.post-69353242228728454202013-03-04T13:59:07.433+01:002013-03-04T13:59:07.433+01:00Hey Wim
I tried to use stunnel so I could play the...Hey Wim<br />I tried to use stunnel so I could play the streams using xbmc, but stunnel fails to start. It says that the server needs a certificate. Maybe you can help me?<br /><br />NickAnonymoushttps://www.blogger.com/profile/02685660442208245076noreply@blogger.comtag:blogger.com,1999:blog-2503925492290059.post-41236273714253273482013-02-04T11:08:58.632+01:002013-02-04T11:08:58.632+01:00Hi Filip,
No idea, but you can use stunnel to fix...Hi Filip,<br /><br />No idea, but you can use stunnel to fix this.<br />Create stunnel.conf containing this:<br /><br />client = yes<br />[proxy]<br />accept = 127.0.0.1:1234<br /># Replace SERVER with the address of the server setup previously<br />connect = weepeetv.my-stream.eu:443<br /><br />run stunnel stunnel.conf<br />adapt the xml file to change https://weepeetv.my-stream.eu to http://localhost:1234<br />42wimhttps://www.blogger.com/profile/03140786286473099167noreply@blogger.comtag:blogger.com,1999:blog-2503925492290059.post-48406389257898741252013-02-04T01:47:19.661+01:002013-02-04T01:47:19.661+01:00Hi 42wim,
with your script I hope to be able to ...Hi 42wim, <br /><br />with your script I hope to be able to watch weepeetv on my BSD. however i'm also suffering some TLS issues. I know it is not related to your code, but i haven't found any solution - or even a cause of the problem for that matter.<br /><br />Perhaps you encountered something similar somewhere during testing or stumbled upon similar problems?<br /><br />VLC isn't able to 'read' my CA chain:<br /><br />[0x28873f10] gnutls tls client debug: GnuTLS v2.12.18 initialized<br />[0x28873f10] gnutls tls client debug: browsing x509 credentials in /home/filip/.local/share/vlc/ssl/certs...<br />[0x28873f10] gnutls tls client debug: loading x509 credentials from globalsign-root-bundle-2011.crt...<br />[0x28873f10] gnutls tls client warning: cannot read x509 credentials: Bad file descriptor<br /><br />permissions are fine...<br /><br />i know the CA's are fine too for the cert of weepeetv:<br /><br />[filip@gnix ~]$ cat wildcardcert.my-stream.eu.cer | openssl verify -CAfile .local/share/vlc/ssl/certs/globalsign-root-bundle-2011.crt -purpose sslserver<br />stdin: OK<br /><br />Even while using gnutls-cli it is accepted:<br /><br />[filip@gnix ~]$ gnutls-cli -s weepeetv.my-stream.eu --x509cafile .local/share/vlc/ssl/certs/globalsign-root-bundle-2011.crt <br />Processed 2 CA certificate(s).<br />Resolving 'weepeetv.my-stream.eu'...<br />Connecting to '37.143.7.7:443'...<br /><br />- Simple Client Mode:<br /><br />*** Starting TLS handshake<br />...<br /> - Certificate[0] info:<br /> - subject `OU=Domain Control Validated,CN=*.my-stream.eu', issuer `C=BE,O=GlobalSign nv-sa,CN=GlobalSign Domain Validation CA - G2', RSA key 2048 bits, signed using RSA-SHA1, activated `2012-12-12 10:25:53 UTC', expires `2015-12-13 10:25:53 UTC', SHA-1 fingerprint `70286185fdf0191f72734ea7b8beb920a0927888'<br /> - Certificate[1] info:<br /> - subject `C=BE,O=GlobalSign nv-sa,CN=GlobalSign Domain Validation CA - G2', issuer `C=BE,O=GlobalSign nv-sa,OU=Root CA,CN=GlobalSign Root CA', RSA key 2048 bits, signed using RSA-SHA1, activated `2011-04-13 10:00:00 UTC', expires `2022-04-13 10:00:00 UTC', SHA-1 fingerprint `2a3cf4bddc74ccaa480558f9d8d1d2a084f34b31'<br />- The hostname in the certificate matches 'weepeetv.my-stream.eu'.<br />- Peer's certificate is trusted<br />...<br /><br /><br />So everything seems fine, except that gnutls inside vlc is unable to read the CA chain.<br /><br />Do you have an idea? Or did you encounter something similar?<br /><br />filip<br />filiphttps://www.blogger.com/profile/07794077796367688423noreply@blogger.comtag:blogger.com,1999:blog-2503925492290059.post-78126036808845695262013-01-09T14:41:17.868+01:002013-01-09T14:41:17.868+01:00Found the problem: http://trac.videolan.org/vlc/ti...Found the problem: http://trac.videolan.org/vlc/ticket/7724 because I'm on a Mac :-)<br />GnuTLS doesn't support OS X keychain for getting the certificates it seems.<br /><br />I got the cert from https://www.globalsign.com/support/root-certificate/root-globalsign.php and put it in ~/Library/Preferences/org.videolan.vlc/ssl/certs/ca-certificates.crt and now I'm in business :)Wout Mertenshttps://www.blogger.com/profile/05787109608088688477noreply@blogger.comtag:blogger.com,1999:blog-2503925492290059.post-2634434456491444112013-01-08T22:42:45.367+01:002013-01-08T22:42:45.367+01:00You don't need to install a SSL certificate, w...You don't need to install a SSL certificate, weepee.tv isn't using a self signed one, there shouldn't be an issue. Be sure to use the latest VLC (2.0.5)<br /><br />Check out my other post (http://blog.42.be/2013/01/weepeetv-and-vlc-2.html) about weepeetv and vlc, there's a link to the script generating the XML and more information about how to use it.42wimhttps://www.blogger.com/profile/03140786286473099167noreply@blogger.comtag:blogger.com,1999:blog-2503925492290059.post-72153053262585284822013-01-08T20:13:52.958+01:002013-01-08T20:13:52.958+01:00So how do you get the SSL certificate installed in...So how do you get the SSL certificate installed in VLC?Wout Mertenshttps://www.blogger.com/profile/05787109608088688477noreply@blogger.com