From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.ffmpeg.org (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTPS id CCBF150137 for ; Tue, 8 Jul 2025 18:06:34 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.ffmpeg.org (Postfix) with ESMTP id 0E43568F15D; Tue, 8 Jul 2025 21:06:31 +0300 (EEST) Received: from mail-ed1-f49.google.com (mail-ed1-f49.google.com [209.85.208.49]) by ffbox0-bg.ffmpeg.org (Postfix) with ESMTPS id BA17E68E631 for ; Tue, 8 Jul 2025 21:06:24 +0300 (EEST) Received: by mail-ed1-f49.google.com with SMTP id 4fb4d7f45d1cf-60c5b8ee2d9so10300735a12.2 for ; Tue, 08 Jul 2025 11:06:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1751997984; x=1752602784; darn=ffmpeg.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=6y8xIXmmUCdZEvZ+THUMkuewrVXtUN0h3BBDjM1bLGc=; b=Cq3sjnZzgZLRUPR1hVzRNhLbYSEtTN/Tvrv6pxbk6PmmKdcBu6Z0d0qwH+aXwVKN+I 4BspEXiTht0xUrHyR8vXoZsORYXmo9X+e8ajk8oJGWCZh8RiZ6MR6+FmjalAd6EyopiF yXzHwwyrWHnqlKAyEq6m+5UR2CcgJ02eVd/vdfXKwpHNsh7gMBdCexTz5524973EHvBF aoGKwGG1WDtoxaT+oy1J4iw4I4hPWOSqq8PQ//b+K88JVWSfkDnwpb68S+jrS5AvN+Xn GPNVup4ON9HD0mZ5i9PHY8X6d++GqGHavN0oah3yNhOPMJ0LOMP3qur1lfG0/wKoLiZB sbCw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1751997984; x=1752602784; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=6y8xIXmmUCdZEvZ+THUMkuewrVXtUN0h3BBDjM1bLGc=; b=azeGeMMygmbzw2ADsTaHJuAhv5KfpehqFiHTMCHm2Fo1t0mDiqoQ5G3hBzHSQKwH/+ EPeJpWKxTONWe62syk5nmNFXOBTJffzl14/S9oR5hckQGASvGdNo5cWKuG1g35ZNGxGz L6UBRP8ZyRpezDdbiOc+CkUPdUtJJ+sjtuthld+pXgvB984URV47ZJzcsUin/59wPeWy g/DtQNVHax+olc8vDaUXzV3wvssxe6+UYRUB6Sw8g6MXSLiZkKjpp1+yLDq+5lf7VX+A lC2wg87Upv8SHG7qzE2P5mVf/1E1b/sLCdWOW9QNY+np3zjBdjBaUGpnez9keK9hMCjO e3dw== X-Gm-Message-State: AOJu0YziGDBK7DkcnDjHxHUUmIMXojSOwxN8S+MrdD/99BNnnzh5z9Cr yjHUVAXa6If4Jz0fNtXsLBYa8bBDHKBiSP5GJwD5HLI2UW7OglbCYEEXf9GUM9CQ X-Gm-Gg: ASbGncuT+h/6E2BWNpWlm4qyqf5hmzYEMvi2sLjNLzNQRl2wf9XCgVMyCpYAC6xLVSl bh6dvM7aPOozkUdiNjXgQzMEf0WV3nwvWONaoXvTZt6DCcD3QNCfkQw7COXxeo9yqskytmj62hB Ham7gr/DSiFQSK+DqkkRDW6nu6ORt1Utt7t7ikt4+osOuMYkGXt+mmwY0TIYyx2cDz+ds/GMelt tZ8FvuMdz4Cz1+c/DY26YQsJapsQC3qIN6bbJH5f5oInE2JEejXN/fApfA7PFiTpxuiuO1Qk80e Bp60LKw8+m6a6xJw3JEZtd2fKnpDjdIfWwnCE7Ebykct6j+PD8eOdhzJRiJ9N95cutetyoXXfWt ofyOkfmcL0Y9/iygfbeALMC1TaaSiulqRRX7nlLcVfMnxF1Jgtm3Z8VBBjoJKSDrpQz2wtu6nt4 zl1JsKew== X-Google-Smtp-Source: AGHT+IGIz80lBgBKkeDqr/nTlMwu275UYSvuEKfWK512JyBzaFefs/81qCF4clqTDbVUC95GzAUdXg== X-Received: by 2002:a17:907:3f87:b0:ad5:7bc4:84be with SMTP id a640c23a62f3a-ae6b0eaf680mr422120666b.52.1751997983299; Tue, 08 Jul 2025 11:06:23 -0700 (PDT) Received: from localhost.localdomain (p200301023701fa00258573ace0251429.dip0.t-ipconnect.de. [2003:102:3701:fa00:2585:73ac:e025:1429]) by smtp.gmail.com with ESMTPSA id a640c23a62f3a-ae3f66d93c8sm945841666b.11.2025.07.08.11.06.22 (version=TLS1_3 cipher=TLS_CHACHA20_POLY1305_SHA256 bits=256/256); Tue, 08 Jul 2025 11:06:22 -0700 (PDT) From: Marvin Scholz To: ffmpeg-devel@ffmpeg.org Date: Tue, 8 Jul 2025 20:06:15 +0200 Message-Id: <20250708180617.59679-1-epirat07@gmail.com> X-Mailer: git-send-email 2.39.5 (Apple Git-154) MIME-Version: 1.0 Subject: [FFmpeg-devel] [PATCH 1/3] avformat/tls_openssl: add host verification X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Cc: Marvin Scholz Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: From: Daniel N Pettersson Co-Authored-By: Marvin Scholz --- libavformat/tls_openssl.c | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/libavformat/tls_openssl.c b/libavformat/tls_openssl.c index a0fa3285d5..7614caf089 100644 --- a/libavformat/tls_openssl.c +++ b/libavformat/tls_openssl.c @@ -921,8 +921,15 @@ static int tls_open(URLContext *h, const char *uri, int flags, AVDictionary **op ret = init_bio_method(h); if (ret < 0) goto fail; - if (!c->listen && !c->numerichost) + if (!c->listen && !c->numerichost) { + if (!SSL_set1_host(p->ssl, c->host)) { + av_log(h, AV_LOG_ERROR, "Failed to set hostname for TLS/SSL verification: %s\n", + openssl_get_error(p)); + ret = AVERROR(EIO); + goto fail; + } SSL_set_tlsext_host_name(p->ssl, c->host); + } ret = c->listen ? SSL_accept(p->ssl) : SSL_connect(p->ssl); if (ret == 0) { av_log(h, AV_LOG_ERROR, "Unable to negotiate TLS/SSL session\n"); -- 2.39.5 (Apple Git-154) _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".