ffmpeg | branch: master | Marvin Scholz <epira...@gmail.com> | Tue Jul  8 
19:52:48 2025 +0200| [f4befeb7674978738ce3c7256545dfa49f3e40d7] | committer: 
Marvin Scholz

avformat/tls_openssl: verify setting hostname for SNI

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=f4befeb7674978738ce3c7256545dfa49f3e40d7
---

 libavformat/tls_openssl.c | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/libavformat/tls_openssl.c b/libavformat/tls_openssl.c
index 7845335811..49f26860b1 100644
--- a/libavformat/tls_openssl.c
+++ b/libavformat/tls_openssl.c
@@ -962,7 +962,11 @@ static int tls_open(URLContext *h, const char *uri, int 
flags, AVDictionary **op
             ret = AVERROR_EXTERNAL;
             goto fail;
         }
-        SSL_set_tlsext_host_name(p->ssl, c->host);
+        if (!SSL_set_tlsext_host_name(p->ssl, c->host)) {
+            av_log(h, AV_LOG_ERROR, "Failed to set hostname for SNI: %s\n", 
openssl_get_error(p));
+            ret = AVERROR_EXTERNAL;
+            goto fail;
+        }
     }
     ret = c->listen ? SSL_accept(p->ssl) : SSL_connect(p->ssl);
     if (ret == 0) {

_______________________________________________
ffmpeg-cvslog mailing list
ffmpeg-cvslog@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-cvslog

To unsubscribe, visit link above, or email
ffmpeg-cvslog-requ...@ffmpeg.org with subject "unsubscribe".

Reply via email to