starred/mumble-mumble-voip

Fork 0

mirror of https://github.com/mumble-voip/mumble.git synced 2026-03-03 00:46:56 -05:00

How to use Certificate? #1403

New issue

Closed

opened 2026-02-20 21:01:33 -05:00 by deekerman · 7 comments

deekerman commented

2026-02-20 21:01:33 -05:00

Owner

Originally created by @inukaze on GitHub (Jul 5, 2018).

Hi there, someone can explain how i can. set the "Comodo" Certificate with Murmur, and the client read the added Certificate (X509) i make one, is RSA 2048 with SHA1 and SHA256. But i don't know how set right to my local server.

For example, what i should put in the lines "sslCert" and "sslKey" ?

sslCert=file.p12
sslKey=00 01 AB CD EF F0 00 01 02 03 04 05 06 07 08 09 10 AA AB AC

How is the right way?

i should edit files like :
/etc/init.d/mumble-server
/etc/mumble-server.ini

One last thing, how i set mumble to ever put me a specific Nickname, and connect to my localhost, without show me the GUI Server Selector.

???

Reading this -> https://wiki.mumble.info/wiki/Obtaining_a_StartCom_Murmur_Certificate
i have a dunno, from where i get "ssl_mumble.crt" because in none part, explain from where get that file.

Originally created by @inukaze on GitHub (Jul 5, 2018). Hi there, someone can explain how i can. set the "Comodo" Certificate with Murmur, and the client read the added Certificate (X509) i make one, is RSA 2048 with SHA1 and SHA256. But i don't know how set right to my local server. For example, what i should put in the lines "sslCert" and "sslKey" ? sslCert=file.p12 sslKey=00 01 AB CD EF F0 00 01 02 03 04 05 06 07 08 09 10 AA AB AC How is the right way? i should edit files like : /etc/init.d/mumble-server /etc/mumble-server.ini One last thing, how i set mumble to ever put me a specific Nickname, and connect to my localhost, without show me the GUI Server Selector. ??? Reading this -> https://wiki.mumble.info/wiki/Obtaining_a_StartCom_Murmur_Certificate i have a dunno, from where i get "ssl_mumble.crt" because in none part, explain from where get that file.

deekerman

2026-02-20 21:01:33 -05:00

closed this issue
added the
support
label

deekerman commented

2026-02-20 21:01:39 -05:00

Author

Owner

@davidebeatrici commented on GitHub (Jul 5, 2018):

Hi!

For example, what i should put in the lines "sslCert" and "sslKey" ?

sslCert=file.p12
sslKey=00 01 AB CD EF F0 00 01 02 03 04 05 06 07 08 09 10 AA AB AC

You have to set the path to the corresponding file in each of the two variables, for example:

sslCert=certificate.pem
sslKey=key.pem

A PKCS #12 file (.p12) can contain both the certificate and the private key, you should generate two separate files instead.

i should edit files like :
/etc/init.d/mumble-server
/etc/mumble-server.ini

/etc/mumble-server.ini, which contains your server's configuration.

One last thing, how i set mumble to ever put me a specific Nickname, and connect to my localhost, without show me the GUI Server Selector.

Settings -> Network -> Reconnect to last server on startup

@davidebeatrici commented on GitHub (Jul 5, 2018): Hi! > For example, what i should put in the lines "sslCert" and "sslKey" ? > >sslCert=file.p12 sslKey=00 01 AB CD EF F0 00 01 02 03 04 05 06 07 08 09 10 AA AB AC You have to set the path to the corresponding file in each of the two variables, for example: ``` sslCert=certificate.pem sslKey=key.pem ``` A PKCS #12 file (.p12) can contain both the certificate and the private key, you should generate two separate files instead. > i should edit files like : /etc/init.d/mumble-server /etc/mumble-server.ini `/etc/mumble-server.ini`, which contains your server's configuration. > One last thing, how i set mumble to ever put me a specific Nickname, and connect to my localhost, without show me the GUI Server Selector. Settings -> Network -> Reconnect to last server on startup

deekerman commented

2026-02-20 21:01:39 -05:00

Author

Owner

@inukaze commented on GitHub (Jul 7, 2018):

Thanks for your answers :)

Okey i am trying the follow :

#Extract Certificate : 
openssl pkcs12 -in bloginukaze.p12 -clcerts -nokeys -out bloginukaze.crt 

#Extract Private Key : 
openssl pkcs12 -in bloginukaze.p12 -nocerts -out bloginukaze.pem

# Test :
$ sudo /usr/sbin/murmurd
<W>2018-07-07 20:23:17.213 Initializing settings from /etc/mumble-server.ini (basepath /etc)
<F>2018-07-07 20:23:17.216 No private key found in certificate or key file.

I don't know which thing is wrong here.

Where is the default path for the server, where i should put that files if i want just add "bloginukaze.crt" & "bloginukaze.pem" ?, should be in /etc/ ?

Screenshots :

@inukaze commented on GitHub (Jul 7, 2018): Thanks for your answers :) Okey i am trying the follow : ``` #Extract Certificate : openssl pkcs12 -in bloginukaze.p12 -clcerts -nokeys -out bloginukaze.crt #Extract Private Key : openssl pkcs12 -in bloginukaze.p12 -nocerts -out bloginukaze.pem # Test : $ sudo /usr/sbin/murmurd <W>2018-07-07 20:23:17.213 Initializing settings from /etc/mumble-server.ini (basepath /etc) <F>2018-07-07 20:23:17.216 No private key found in certificate or key file. ``` I don't know which thing is wrong here. Where is the default path for the server, where i should put that files if i want just add "bloginukaze.crt" & "bloginukaze.pem" ?, should be in /etc/ ? Screenshots : [![Murmur001.png](https://s25.postimg.cc/4b0od2ej3/Murmur001.png)](https://postimg.cc/image/50jgpff2j/) [![Murmur002.png](https://s25.postimg.cc/7hv7wpeen/Murmur002.png)](https://postimg.cc/image/serg1dcff/) [![Murmur003.png](https://s25.postimg.cc/62tn7z5lr/Murmur003.png)](https://postimg.cc/image/4ns2j94ij/)

deekerman commented

2026-02-20 21:01:39 -05:00

Author

Owner

@davidebeatrici commented on GitHub (Jul 7, 2018):

It would be better to create a dedicated folder for the certificate files and specify the path in /etc/mumble-server.ini.

@davidebeatrici commented on GitHub (Jul 7, 2018): It would be better to create a dedicated folder for the certificate files and specify the path in `/etc/mumble-server.ini`.

deekerman commented

2026-02-20 21:01:40 -05:00

Author

Owner

@inukaze commented on GitHub (Jul 7, 2018):

I SOLVED IT!

1 - Get Comodo Certificate
2 - Extract the Certificate from my Firefox Web Browser and Save it with Name.p12

3 - Extract the RSA Public Key & Convert pkcs12 the certificate to pem format, edit the server file, to put the absolute path of your files in my case both are named bloginukaze, and in the test i put on the tmp folder.

openssl pkcs12 -in bloginukaze.p12 -nocerts -nodes | openssl rsa > bloginukaze.rsa #This is for sslKey
openssl pkcs12 -in bloginukaze.p12 -nodes -out bloginukaze.crt #This is for sslCert

sudo sed -i "s|#sslCert=|sslCert=/tmp/Murmur/bloginukaze.crt|g" /etc/mumble-server.ini 
sudo sed -i "s|#sslKey=|sslKey=/tmp/Murmur/bloginukaze.rsa|g" /etc/mumble-server.ini 
sudo sed -i "s|MURMUR_USE_CAPABILITIES=0|MURMUR_USE_CAPABILITIES=1|g" /etc/init.d/mumble-server

# Now test : 
sudo /sbin/murmurd #Not problem here

Screenshot The Certificate Working :

@inukaze commented on GitHub (Jul 7, 2018): I SOLVED IT! 1 - [Get Comodo Certificate](https://www.comodo.com/home/email-security/free-email-certificate.php) 2 - Extract the Certificate from my Firefox Web Browser and Save it with **Name.p12** 3 - **Extract the RSA Public Key & Convert pkcs12 the certificate to pem format**, edit the server file, to put the absolute path of your files in my case both are named bloginukaze, and in the test i put on the tmp folder. ``` openssl pkcs12 -in bloginukaze.p12 -nocerts -nodes | openssl rsa > bloginukaze.rsa #This is for sslKey openssl pkcs12 -in bloginukaze.p12 -nodes -out bloginukaze.crt #This is for sslCert sudo sed -i "s|#sslCert=|sslCert=/tmp/Murmur/bloginukaze.crt|g" /etc/mumble-server.ini sudo sed -i "s|#sslKey=|sslKey=/tmp/Murmur/bloginukaze.rsa|g" /etc/mumble-server.ini sudo sed -i "s|MURMUR_USE_CAPABILITIES=0|MURMUR_USE_CAPABILITIES=1|g" /etc/init.d/mumble-server # Now test : sudo /sbin/murmurd #Not problem here ``` Screenshot The Certificate Working : [![Murmur_Certificado.png](https://s25.postimg.cc/4u5rmjnzz/Murmur_Certificado.png)](https://postimg.cc/image/7bhitt7wb/)

deekerman commented

2026-02-20 21:01:40 -05:00

Author

Owner

@davidebeatrici commented on GitHub (Jul 7, 2018):

Awesome!

I created a dedicated page on our Wiki with a link to this issue, feel free to create an account and write your instructions.

Thank you.

@davidebeatrici commented on GitHub (Jul 7, 2018): Awesome! I created a [dedicated page](https://wiki.mumble.info/wiki/Obtaining_a_Comodo_Murmur_certificate) on our Wiki with a link to this issue, feel free to create an account and write your instructions. Thank you.

deekerman commented

2026-02-20 21:01:41 -05:00

Author

Owner

@inukaze commented on GitHub (Jul 7, 2018):

Thanks but i prefer, you test my instructions are easy to follow, and test you too :D, just for make secure all steps are easy and right explain it :D

@inukaze commented on GitHub (Jul 7, 2018): Thanks but i prefer, you test my instructions are easy to follow, and test you too :D, just for make secure all steps are easy and right explain it :D

deekerman commented

2026-02-20 21:01:41 -05:00

Author

Owner

@davidebeatrici commented on GitHub (Jul 7, 2018):

No problem.

@davidebeatrici commented on GitHub (Jul 7, 2018): No problem.