mirror of
https://github.com/LibreELEC/LibreELEC.tv.git
synced 2025-07-29 13:46:49 +00:00
Merge pull request #895 from sopparus/master
patch to make ffmpeg work with tls 1.2 servers
This commit is contained in:
commit
fe4cc9fe83
@ -0,0 +1,17 @@
|
|||||||
|
--- a/libavformat/tls_openssl.c
|
||||||
|
+++ b/libavformat/tls_openssl.c
|
||||||
|
@@ -233,12 +233,13 @@ static int tls_open(URLContext *h, const char *uri, int flags, AVDictionary **op
|
||||||
|
if ((ret = ff_tls_open_underlying(c, h, uri, options)) < 0)
|
||||||
|
goto fail;
|
||||||
|
|
||||||
|
- p->ctx = SSL_CTX_new(c->listen ? TLSv1_server_method() : TLSv1_client_method());
|
||||||
|
+ p->ctx = SSL_CTX_new(c->listen ? SSLv23_server_method() : SSLv23_client_method());
|
||||||
|
if (!p->ctx) {
|
||||||
|
av_log(h, AV_LOG_ERROR, "%s\n", ERR_error_string(ERR_get_error(), NULL));
|
||||||
|
ret = AVERROR(EIO);
|
||||||
|
goto fail;
|
||||||
|
}
|
||||||
|
+ SSL_CTX_set_options(p->ctx, SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3);
|
||||||
|
if (c->ca_file) {
|
||||||
|
if (!SSL_CTX_load_verify_locations(p->ctx, c->ca_file, NULL))
|
||||||
|
av_log(h, AV_LOG_ERROR, "SSL_CTX_load_verify_locations %s\n", ERR_error_string(ERR_get_error(), NULL));
|
Loading…
x
Reference in New Issue
Block a user