[vlc-devel] add support for https video streaming from websites with untrusted SSL certificates

[Sylver Bruneau]

On Mon, Dec 20, 2010 at 9:06 PM, Francois Cartegnie <fcvlcdev at free.fr>wrote:

> Le lundi 20 décembre 2010, vous avez écrit :
> > certificates). Getting a trusted certificate from a company providing
> > trusted certificates is not an option in my case ...
>
> Hi,
>
> You problem is in commit 7b3eb71e858bfcb3f22d07985f27226306e26ce2
> where tls-check-cert has been deprecated and its code removed.
>
> http://git.videolan.org/?p=vlc.git;a=commitdiff;h=7b3eb71e858bfcb3f22d07985f27226306e26ce2
>
>
Thanks François, this is actually showing me how to bypass the certificate
verification ...

I'm aware of security concerns about that, but the fact is that the goal of
my application is to connect to some home servers, and most people will just
install self signed certificates (actually, most users will not even use
SSL, just standard http ...). The goal is to bybass the validity check only
if the user accept to !

As you told me, the log shows that gnutls is not compiled on iOS platform,
so in extras/contrib/src/Distributions/ios.mak, I added .gnutls, but I have
a strange error at link :

./libtool: eval: line 961: syntax error near unexpected token `|'
./libtool: eval: line 961: `link -dump -symbols  .libs/gnutls_record.o
.libs/gnutls_compress.o .libs/debug.o .libs/gnutls_cipher.o
.libs/gnutls_buffers.o .libs/gnutls_handshake.o .libs/gnutls_num.o
.libs/gnutls_errors.o .libs/gnutls_algorithms.o .libs/gnutls_dh.o
.libs/gnutls_kx.o .libs/gnutls_priority.o .libs/gnutls_hash_int.o
.libs/gnutls_cipher_int.o .libs/gnutls_session.o .libs/gnutls_db.o
.libs/x509_b64.o .libs/auth_anon.o .libs/gnutls_extensions.o
.libs/gnutls_auth.o .libs/gnutls_v2_compat.o .libs/gnutls_datum.o
.libs/auth_rsa.o .libs/gnutls_session_pack.o .libs/gnutls_mpi.o
.libs/gnutls_pk.o .libs/gnutls_cert.o .libs/gnutls_global.o
.libs/gnutls_constate.o .libs/gnutls_anon_cred.o .libs/pkix_asn1_tab.o
.libs/gnutls_asn1_tab.o .libs/gnutls_mem.o .libs/auth_cert.o
.libs/gnutls_ui.o .libs/gnutls_sig.o .libs/auth_dhe.o
.libs/gnutls_dh_primes.o .libs/ext_max_record.o .libs/gnutls_alert.o
.libs/gnutls_str.o .libs/gnutls_state.o .libs/gnutls_x509.o
.libs/ext_cert_type.o .libs/gnutls_rsa_export.o .libs/auth_rsa_export.o
.libs/ext_server_name.o .libs/auth_dh_common.o .libs/gnutls_helper.o
.libs/gnutls_supplemental.o .libs/crypto.o .libs/random.o
.libs/pk-libgcrypt.o .libs/mpi-libgcrypt.o .libs/cryptodev.o
.libs/rnd-libgcrypt.o .libs/cipher-libgcrypt.o .libs/mac-libgcrypt.o
.libs/ext_signature.o .libs/crypto-api.o .libs/ext_safe_renegotiation.o
.libs/ext_srp.o .libs/gnutls_srp.o .libs/auth_srp.o .libs/auth_srp_passwd.o
.libs/auth_srp_sb64.o .libs/auth_srp_rsa.o .libs/auth_psk.o
.libs/auth_psk_passwd.o .libs/gnutls_psk.o .libs/auth_dhe_psk.o
.libs/gnutls_psk_netconf.o .libs/ext_session_ticket.o   gl/.libs/liblgnu.a
x509/.libs/libgnutls_x509.a openpgp/.libs/libgnutls_openpgp.a
opencdk/.libs/libminiopencdk.a minitasn1/.libs/libminitasn1.a |  |
/usr/bin/sed 's/.* //' | sort | uniq > .libs/libgnutls.exp'
make[6]: *** [libgnutls.la] Error 1

Anyone have ever seen this kind of error ?
Thanks,
Sylver
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.videolan.org/pipermail/vlc-devel/attachments/20101221/46c7b9ee/attachment.html>