[FFmpeg-trac] #5905(avformat:new): TLSv1.2 negotiation fails with OpenSSL

FFmpeg trac at avcodec.org
Mon Oct 24 02:50:08 EEST 2016


#5905: TLSv1.2 negotiation fails with OpenSSL
-------------------------------------+-------------------------------------
             Reporter:  lachs0r      |                     Type:  defect
               Status:  new          |                 Priority:  normal
            Component:  avformat     |                  Version:  git-
             Keywords:  openssl ssl  |  master
  tls                                |               Blocked By:
             Blocking:               |  Reproduced by developer:  0
Analyzed by developer:  0            |
-------------------------------------+-------------------------------------
 Summary of the bug:
 When built with OpenSSL, FFmpeg is unable to negotiate a TLSv1.2 session
 with servers that use certain cipher suites. I haven’t narrowed it down to
 anything in particular, but 0x0.st uses ECDHE with ECDSA rather than RSA.

 Other software that uses OpenSSL works fine.

 How to reproduce:
 {{{
 % ffprobe https://0x0.st/-k.txt
 ffprobe version N-82095-g5867234 Copyright (c) 2007-2016 the FFmpeg
 developers
   built with gcc 6 (SUSE Linux)
   configuration: --prefix=/usr --libdir=/usr/lib64 --shlibdir=/usr/lib64
 --enable-gpl --enable-nonfree --disable-stripping --enable-shared
 --disable-static --enable-postproc --enable-libvorbis --enable-libx264
 --enable-libssh --enable-libmp3lame --enable-libopus --enable-libvpx
 --enable-openssl --enable-libxvid --disable-librtmp --enable-libmodplug
 --enable-ladspa --enable-libopenjpeg --enable-libass --enable-libzimg
 --enable-libgme --enable-librubberband --enable-libfreetype --enable-
 libfontconfig --enable-netcdf
   libavutil      55. 33.100 / 55. 33.100
   libavcodec     57. 63.103 / 57. 63.103
   libavformat    57. 53.100 / 57. 53.100
   libavdevice    57.  0.103 / 57.  0.103
   libavfilter     6. 64.100 /  6. 64.100
   libswscale      4.  1.100 /  4.  1.100
   libswresample   2.  2.100 /  2.  2.100
   libpostproc    54.  0.100 / 54.  0.100
 [tls @ 0x796d40] Unable to negotiate TLS/SSL session
 https://0x0.st/-k.txt: Input/output error
 }}}

--
Ticket URL: <https://trac.ffmpeg.org/ticket/5905>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker


More information about the FFmpeg-trac mailing list