highperfocused/ffmpeg
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

tls: TLS/SSL server

Browse Source 
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
Peter Ross 2012-07-22 14:25:12 +10:00 committed by Michael Niedermayer
parent d1146d67ca
commit 4f4eb380f0
1 changed files with 8 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
libavformat/tls.c
View File

@ -165,6 +165,10 @@ static int tls_open(URLContext *h, const char *uri, int flags)
struct addrinfo hints = { 0 }, *ai = NULL; struct addrinfo hints = { 0 }, *ai = NULL;
const char *proxy_path; const char *proxy_path;
int use_proxy; int use_proxy;
int server = 0;
const char *p = strchr(uri, '?');
if (p && av_find_info_tag(buf, sizeof(buf), "listen", p))
server = 1;
ff_tls_init(); ff_tls_init();
@ -199,7 +203,7 @@ static int tls_open(URLContext *h, const char *uri, int flags)
c->fd = ffurl_get_file_handle(c->tcp); c->fd = ffurl_get_file_handle(c->tcp);
#if CONFIG_GNUTLS #if CONFIG_GNUTLS
gnutls_init(&c->session, GNUTLS_CLIENT); gnutls_init(&c->session, server ? GNUTLS_SERVER : GNUTLS_CLIENT);
if (!numerichost) if (!numerichost)
gnutls_server_name_set(c->session, GNUTLS_NAME_DNS, host, strlen(host)); gnutls_server_name_set(c->session, GNUTLS_NAME_DNS, host, strlen(host));
gnutls_certificate_allocate_credentials(&c->cred); gnutls_certificate_allocate_credentials(&c->cred);
@ -216,7 +220,7 @@ static int tls_open(URLContext *h, const char *uri, int flags)
goto fail; goto fail;
} }
#elif CONFIG_OPENSSL #elif CONFIG_OPENSSL
c->ctx = SSL_CTX_new(TLSv1_client_method()); c->ctx = SSL_CTX_new(server ? TLSv1_server_method() : TLSv1_client_method());
if (!c->ctx) { if (!c->ctx) {
av_log(h, AV_LOG_ERROR, "%s\n", ERR_error_string(ERR_get_error(), NULL)); av_log(h, AV_LOG_ERROR, "%s\n", ERR_error_string(ERR_get_error(), NULL));
ret = AVERROR(EIO); ret = AVERROR(EIO);
@ -230,10 +234,10 @@ static int tls_open(URLContext *h, const char *uri, int flags)
goto fail; goto fail;
} }
SSL_set_fd(c->ssl, c->fd); SSL_set_fd(c->ssl, c->fd);
if (!numerichost) if (!server && !numerichost)
SSL_set_tlsext_host_name(c->ssl, host); SSL_set_tlsext_host_name(c->ssl, host);
while (1) { while (1) {
ret = SSL_connect(c->ssl); ret = server ? SSL_accept(c->ssl) : SSL_connect(c->ssl);
if (ret > 0) if (ret > 0)
break; break;
if (ret == 0) { if (ret == 0) {