From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.ffmpeg.org (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTPS id 82C6650187 for ; Tue, 8 Jul 2025 18:54:24 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.ffmpeg.org (Postfix) with ESMTP id 60C4268F39F; Tue, 8 Jul 2025 21:54:02 +0300 (EEST) Received: from mail-ed1-f54.google.com (mail-ed1-f54.google.com [209.85.208.54]) by ffbox0-bg.ffmpeg.org (Postfix) with ESMTPS id E352F68F2FA for ; Tue, 8 Jul 2025 21:53:58 +0300 (EEST) Received: by mail-ed1-f54.google.com with SMTP id 4fb4d7f45d1cf-60c9d8a169bso7710716a12.1 for ; Tue, 08 Jul 2025 11:53:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1752000838; x=1752605638; darn=ffmpeg.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=I26UZhWFYXJyg9ujISmOAA3Gal2JaBQwLhQsiopNazY=; b=Blkek56Uc1wOSt262wJ5N5GgP8PsFKXEdqVi1ds3MURvvtprHmqn1dzCuSMXPYn2zq EGWWEfr+MHyucDw97fXRPQj4GlPzWyyuX9xcySa9Drcg/zEdZzKQc1H5vd7PlfvHKoss F5gVlaEQm5Xh7itpM7dLMVIfyT+WVVqagC3d9QgNWQg3lRhtzALTVqPnzlvheIrn+aK8 L+N2+3VfzdhQN8sYsiCl7Tj0JjkI4aWayT90jltarK+E8ouv0vfVLfPs2EoTWbIzcXhS /1CEOvcH1esK/TtRGD9XexVHQs2AJNVULgOiLX69aVaKxNGOWt7fyPA2W/dS3nGUHbF1 jpBg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1752000838; x=1752605638; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=I26UZhWFYXJyg9ujISmOAA3Gal2JaBQwLhQsiopNazY=; b=guQDqYFm9UuwT3vLTSaDEDxLaFBnmhnYWDbxVf1ecRXvc/5fEHYORRldyQugF1fYN+ T1AG+IQ7+y3R7qXICFDgmGN24sh7eeCT1N/RKn2AZb5DY/43qp9DbYWZHhCwJbwu6iTI HT5jTJlzqaOSRhZknBvnM2iMIMh1e08GKeQunZP15SnzKtrT0Kmt31qCX3IzM+qfEHOJ 9X1rzolvTwxH9PQM6uRhi83B2XWp880w+aSMVVL37FOw+c/cRRaZDjMZA4fgSYaqERiQ z/WbapsOZSf9ZEy46hnJIl+LZ+XmXN75DISvU7MDzUBzwsMtp0ZItRtgm+jAZ+F1q1eL dasA== X-Gm-Message-State: AOJu0YxYcSJZcDX0237ECKxOLVwGAy1OSnPKdWChFfqUAdNnJ8YnpD4d 70gxSIx27uFLf00fhihOiR1ka3zNL+vZOf/vWgogyFt7i1bMW+vt9a6PrLQSp9AL X-Gm-Gg: ASbGncthiHxdq5D5/BbOBudvrmKq+g/hAqkhFZVOBhZLJbglbTduWgCfOsH4BzvY38p IQ2gn5cs3r74fDA4CRhQ3nXLjZAh2b5cY5+C81Yl6cXfAtJk3YpxKJg5Pma1v5fWmlbn0BDthgl bpKotifcS+flAbFxSTN3GIe6R64eA9XlYLNYDT+0zwe6ourD4QKywfQKJYc9HU8NJPGG7vBhxm0 oJ2rTTmqCPjtjhSCKrLCB2gWq7Fk9iOrbM0Qpkd5fQRtC78u9DUrVLZ8tSTXrI4EKq0IlueyctF NLatVIgWxFpjx/k2xddUb1ek2GzsA1DigrArekOS9MIagPZyeglJ7qd8S3Hw/1ExnGwx835dQ/L hHTOkuuhp7SHP/vnELkd32NtfbQGvRZyvNyxeO/upWtRkwuCPFrCjZqm61kHIbdwwTh46f0LNrd UYI7lhTA== X-Google-Smtp-Source: AGHT+IESQ7HKTHkTs/cCxHzwCoE9Fk9UoUlSNzhoM6Etpm0UksxFHj03qpym6sPKI8NEhfbjK3ZlBQ== X-Received: by 2002:a17:906:7310:b0:add:fe17:e970 with SMTP id a640c23a62f3a-ae3fe691cfdmr1718257366b.14.1752000837935; Tue, 08 Jul 2025 11:53:57 -0700 (PDT) Received: from localhost.localdomain (p200301023701fa00258573ace0251429.dip0.t-ipconnect.de. [2003:102:3701:fa00:2585:73ac:e025:1429]) by smtp.gmail.com with ESMTPSA id a640c23a62f3a-ae3f6bb1f45sm931018266b.181.2025.07.08.11.53.57 for (version=TLS1_3 cipher=TLS_CHACHA20_POLY1305_SHA256 bits=256/256); Tue, 08 Jul 2025 11:53:57 -0700 (PDT) From: Marvin Scholz To: ffmpeg-devel@ffmpeg.org Date: Tue, 8 Jul 2025 20:53:49 +0200 Message-Id: <20250708185349.62250-3-epirat07@gmail.com> X-Mailer: git-send-email 2.39.5 (Apple Git-154) In-Reply-To: <20250708185349.62250-1-epirat07@gmail.com> References: <20250708180617.59679-1-epirat07@gmail.com> <20250708185349.62250-1-epirat07@gmail.com> MIME-Version: 1.0 Subject: [FFmpeg-devel] [PATCH v3 3/3] avformat/tls_openssl: load default verify locations X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: When no explicit CAs file is set, load the default locations, else there is no way for verification to succeed. This matches the behavior of other TLS backends. --- libavformat/tls_openssl.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/libavformat/tls_openssl.c b/libavformat/tls_openssl.c index 248d1eedf9..d360dd320c 100644 --- a/libavformat/tls_openssl.c +++ b/libavformat/tls_openssl.c @@ -698,6 +698,12 @@ static av_cold int openssl_init_ca_key_cert(URLContext *h) if (c->ca_file) { if (!SSL_CTX_load_verify_locations(p->ctx, c->ca_file, NULL)) av_log(h, AV_LOG_ERROR, "SSL_CTX_load_verify_locations %s\n", openssl_get_error(p)); + } else { + if (!SSL_CTX_set_default_verify_paths(p->ctx)) { + // Only log the failure but do not error out, as this is not fatal + av_log(h, AV_LOG_WARNING, "Failure setting default verify locations: %s\n", + openssl_get_error(p)); + } } if (c->cert_file) { -- 2.39.5 (Apple Git-154) _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".