PR #23689 opened by Jack Lau (JackLau)
URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23689
Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23689.patch

Fix DTLS failure since 9549c9ad79ee399ff469a420223d4b6118498f7e

WebRTC does not verify CA because it allows self-signed cerificate.

Signed-off-by: Jack Lau <[email protected]>



>From a8df1e9000b176b457dccefaaa568c635d38ed60 Mon Sep 17 00:00:00 2001
From: Jack Lau <[email protected]>
Date: Fri, 3 Jul 2026 20:56:36 +0800
Subject: [PATCH] avformat/whip: disable DTLS certificate verification

Fix DTLS failure since 9549c9ad79ee399ff469a420223d4b6118498f7e

WebRTC does not verify CA because it allows self-signed cerificate.

Signed-off-by: Jack Lau <[email protected]>
---
 libavformat/whip.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/libavformat/whip.c b/libavformat/whip.c
index edd9136d3e..ae2c116a4d 100644
--- a/libavformat/whip.c
+++ b/libavformat/whip.c
@@ -396,6 +396,8 @@ static av_cold int dtls_initialize(AVFormatContext *s)
     av_dict_set_int(&opts, "external_sock", 1, 0);
     av_dict_set_int(&opts, "use_srtp", 1, 0);
     av_dict_set_int(&opts, "listen", is_dtls_active ? 0 : 1, 0);
+    // Do not verify CA
+    av_dict_set_int(&opts, "verify", 0, 0);
     ret = ffurl_open_whitelist(&whip->dtls_uc, buf, AVIO_FLAG_READ_WRITE, 
&s->interrupt_callback,
         &opts, s->protocol_whitelist, s->protocol_blacklist, NULL);
     av_dict_free(&opts);
-- 
2.52.0

_______________________________________________
ffmpeg-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to