how to make gstreamer within kms to igonre certificate errors?

579 views
Skip to first unread message

israel.r...@gmail.com

unread,
May 27, 2021, 6:11:33 AM5/27/21
to kurento
KMS logs write me:

gouphttpsrc getsouphttpsrc.c1578:gst_soup_http_src_parse_status:<source> error: Secure connection setup failed.
error: Unacceptable TLS certificate (6)...
Error code 5: 'Secure connection failed...
error: Internal data flow error
error: streaming task paused, reason error (-5)

and so on...

How can I make it ignore certificate errors?

Thanks,
Israel

Juan Navarro

unread,
Jun 17, 2021, 8:41:21 AM6/17/21
to kur...@googlegroups.com
I guess this comes from trying to use PlayerEndpoint to consume an HTTP source?

If that's the case, the GStreamer element "uridecodebin" (used by PlayerEndpoint) is choosing to create a souphttpsrc with default settings.
And seems that "ssl-strict" is enabled by default: https://gstreamer.freedesktop.org/documentation/soup/souphttpsrc.html?gi-language=c#souphttpsrc:ssl-strict

So I guess the solution would be to detect when "uridecodebin" decides to create a "souphttpsrc" element, and set "ssl-strict" to FALSE.

Something like this is already done for some of the properties when an rtspsrc is created (when asking GStreamer to receive an RTSP stream):
https://github.com/Kurento/kms-elements/blob/c017eb260ed14f0ecf10f1dfda3f6c25647d6fcc/src/gst-plugins/kmsplayerendpoint.c#L1295-L1302

so I guess an "else if (...)" to set the mentioned property.

Regards

--
Juan Navarro
Kurento developer
@j1elo at GitHub & Twitter
--
You received this message because you are subscribed to the Google Groups "kurento" group.
To unsubscribe from this group and stop receiving emails from it, send an email to kurento+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/kurento/94be4f83-8d21-49ab-8f5e-eb5d3fe8d032n%40googlegroups.com.

israel.r...@gmail.com

unread,
Jun 27, 2021, 9:25:43 AM6/27/21
to kurento
Yeah you understand right, http source.

So the only solution if I understand you right is to make a merge request to KMS that will do that?

I don't think i'm ready to edit C++ code just yet.

Thanks!
Israel

Reply all
Reply to author
Forward
0 new messages