[FFmpeg-devel] [PATCH 3/3] lavf/tls: accept a default CA bundle at configure-time

[Michael Niedermayer]

On Sat, May 02, 2015 at 02:07:31AM -0500, Rodger Combs wrote:
> ---
>  configure         | 28 ++++++++++++++++++++++++++++
>  libavformat/tls.c |  2 +-
>  2 file
> 
> diff --git a/configure b/configure
> index 1ef2908..5b68514 100755
> --- a/configure
> +++ b/configure
> @@ -108,6 +108,7 @@ Configuration options:
>    --disable-all            disable building components, libraries and programs
>    --enable-incompatible-libav-abi enable incompatible Libav fork ABI [no]
>    --enable-raise-major     increase major version numbers in sonames [no]
> +  --default-ca-file=PATH   default CA file for TLS verification [autodetect]
>  
>  Program options:
>    --disable-programs       do not build command line programs
> @@ -1950,6 +1951,7 @@ PATHS_LIST="
>      mandir
>      prefix
>      shlibdir
> +    default_ca_file
>  "
>  
>  CMDLINE_SET="
> @@ -3135,6 +3137,8 @@ test -n "$cross_prefix" && enable cross_compile
>  if enabled cross_compile; then
>      test -n "$arch" && test -n "$target_os" ||
>          die "Must specify target arch and OS when cross-compiling"
> +else
> +    enable find_cert_bundle
>  fi
>  
>  ar_default="${cross_prefix}${ar_default}"
> @@ -4470,6 +4474,25 @@ check_cpp_condition stdlib.h "defined(__PIC__) || defined(__pic__) || defined(PI
>  set_default libdir
>  : ${shlibdir_default:="$libdir"}
>  
> +# CA bundle
> +
> +enabled securetransport && disable find_cert_bundle
> +
> +if enabled find_cert_bundle && [[ -z "$default_ca_file" ]]; then
                                  ^^                       ^^
these look wrong

[...]

-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

In fact, the RIAA has been known to suggest that students drop out
of college or go to community college in order to be able to afford
settlements. -- The RIAA
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 181 bytes
Desc: Digital signature
URL: <https://ffmpeg.org/pipermail/ffmpeg-devel/attachments/20150502/03c37f24/attachment.asc>