[FFmpeg-user] How to Disable TLS support in ffmpeg 2.x? TLS Fatal alert

raccoon raccoon4me at gmail.com
Tue Mar 3 13:46:25 CET 2015


Hi everyone,

I'm stuck in ffmpeg 1.0.10 because i'm not able to force upper versions to
NOT use TLS.
Indeed, my server is behind a proxy that sniff SSL, so each https requests
has to ignore the wrong certificate. In ffmpeg/ffplay 1.0.10, it works
perfectly fine, but i try to compile the version 2.4.7 for example with
such options :

./configure --prefix=/usr --enable-shared --enable-libmp3lame --enable-gpl
--enable-nonfree --enable-libvorbis --enable-pthreads --enable-libfaac
--enable-libxvid --enable-postproc --enable-x11grab --enable-libgsm
--enable-libtheora --enable-libopencore-amrnb --enable-libopencore-amrwb
--enable-libx264 --enable-libspeex --enable-nonfree --disable-stripping
--enable-libvpx --enable-libschroedinger --disable-encoder=libschroedinger
--enable-version3 --enable-libopenjpeg --enable-avfilter
--enable-libvo-aacenc --disable-decoder=amrnb --enable-libvo-amrwbenc
--enable-libaacplus --libdir=/usr/lib/i386-linux-gnu --disable-vda
--enable-libbluray --enable-frei0r --enable-libass --enable-libopus
--enable-fontconfig --enable-libfdk-aac --enable-libdc1394
--disable-altivec --disable-yasm *--disable-gnutls --disable-protocol=tls
--enable-openssl *

*So i'm forcing **--disable-gnutls --disable-protocol=tls --enable-openssl
,* and despite that, the ffmpeg/ffplay generate is still unable to bypass
tls check, even if in the command line i specify tls_check 0 like above:

>ffplay "https://...." -tls_verify 0
>>>
>>>
ffplay version 2.5.4 Copyright (c) 2003-2015 the FFmpeg developers
  built on Feb 27 2015 07:48:18 with gcc 4.9.2 (Debian 4.9.2-10)
  configuration: --prefix=/usr --extra-cflags='-g -O2
-fstack-protector-strong -Wformat -Werror=format-security '
--extra-ldflags='-Wl,-z,relro' --cc='ccache cc' --enable-shared
--enable-libmp3lame --enable-gpl --enable-nonfree --enable-libvorbis
--enable-pthreads --enable-libfaac --enable-libxvid --enable-postproc
--enable-x11grab --enable-libgsm --enable-libtheora
--enable-libopencore-amrnb --enable-libopencore-amrwb --enable-libx264
--enable-libspeex --enable-nonfree --disable-stripping --enable-libvpx
--enable-libschroedinger --disable-encoder=libschroedinger
--enable-version3 --enable-libopenjpeg --enable-librtmp --enable-avfilter
--enable-libfreetype --enable-libvo-aacenc --disable-decoder=amrnb
--enable-libvo-amrwbenc --enable-libaacplus
--libdir=/usr/lib/i386-linux-gnu --disable-vda --enable-libbluray
--enable-libcdio --enable-gnutls --enable-frei0r --enable-openssl
--enable-libass --enable-libopus --enable-fontconfig --enable-libpulse
--disable-mips32r2 --disable-mipsdspr1 --disable-mipsdspr2
--enable-libvidstab --enable-libzvbi --enable-avresample
--disable-htmlpages --disable-podpages --enable-libutvideo
--enable-libiec61883 --enable-libfdk-aac --enable-vaapi --enable-libx265
--enable-libdc1394 --disable-altivec --shlibdir=/usr/lib/i386-linux-gnu
  libavutil      54. 15.100 / 54. 15.100
  libavcodec     56. 13.100 / 56. 13.100
  libavformat    56. 15.102 / 56. 15.102
  libavdevice    56.  3.100 / 56.  3.100
  libavfilter     5.  2.103 /  5.  2.103
  libavresample   2.  1.  0 /  2.  1.  0
  libswscale      3.  1.101 /  3.  1.101
  libswresample   1.  1.100 /  1.  1.100
  libpostproc    53.  3.100 / 53.  3.100
ALSA lib confmisc.c:768:(parse_card) cannot find card '0'
ALSA lib conf.c:4259:(_snd_config_evaluate) function snd_func_card_driver
returned error: Operation not permitted
ALSA lib confmisc.c:392:(snd_func_concat) error evaluating strings
ALSA lib conf.c:4259:(_snd_config_evaluate) function snd_func_concat
returned error: Operation not permitted
ALSA lib confmisc.c:1251:(snd_func_refer) error evaluating name
ALSA lib conf.c:4259:(_snd_config_evaluate) function snd_func_refer
returned error: Operation not permitted
ALSA lib conf.c:4738:(snd_config_expand) Evaluate error: Operation not
permitted
ALSA lib pcm.c:2239:(snd_pcm_open_noupdate) Unknown PCM default
[tls @ 0xb1c02620]* A TLS fatal alert has been received*.  0B f=0/0
https:...... Input/output error

In the stdout, i still see *--enable-gnutls while i did specify in the
compilation process not to use it.*

*Anyone could help me out with it to make sure i DO NOT compile ffmpeg
with tis support.*

*Thanks a lot for your precious help!*

*Regards*

*Steve*


More information about the ffmpeg-user mailing list