github-mirrors/FFmpeg
1
0
Fork 0
mirror of https://mirror.skon.top/https://github.com/FFmpeg/FFmpeg synced 2026-04-20 21:00:41 +08:00
Code Issues Packages Projects Releases Wiki Activity

avformat/tls_mbedtls: generate self-signed cert and key when none is provided in listen mode

Browse Source 
Signed-off-by: Jack Lau <jacklau1222gm@gmail.com>
This commit is contained in:
Jack Lau
2026-02-09 15:57:23 +08:00
parent 55f5cfafeb
commit 659892cda6
1 changed files with 16 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
libavformat/tls_mbedtls.c
View File

@@ -585,6 +585,22 @@ static int tls_open(URLContext *h, const char *uri, int flags, AVDictionary **op
}
}
if (shr->listen && !shr->cert_file && !shr->cert_buf && !shr->key_file && !shr->key_buf) {
char buf[4096];
if ((ret = mbedtls_gen_pkey(&tls_ctx->priv_key)) != 0) {
av_log(h, AV_LOG_ERROR, "failed to generate priv_key, returned %d\n", ret);
goto fail;
}
if ((ret = mbedtls_gen_x509_cert(&tls_ctx->priv_key, buf, sizeof(buf))) != 0) {
av_log(h, AV_LOG_ERROR, "failed to generate cert, returned %d\n", ret);
goto fail;
}
if ((ret = mbedtls_x509_crt_parse(&tls_ctx->own_cert, buf, sizeof(buf))) != 0) {
av_log(h, AV_LOG_ERROR, "failed to parse generated cert, returned %d\n", ret);
goto fail;
}
}
if ((ret = mbedtls_ssl_config_defaults(&tls_ctx->ssl_config,
shr->listen ? MBEDTLS_SSL_IS_SERVER : MBEDTLS_SSL_IS_CLIENT,
shr->is_dtls ? MBEDTLS_SSL_TRANSPORT_DATAGRAM : MBEDTLS_SSL_TRANSPORT_STREAM,