This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch master in repository ffmpeg.
commit c80f518e5146b117facd95f7a29aa8fabf640351 Author: Jun Zhao <[email protected]> AuthorDate: Sun Nov 8 07:37:49 2026 +0800 Commit: Jun Zhao <[email protected]> CommitDate: Sun Nov 8 07:46:46 2026 +0000 configure: warn when autodetecting deprecated Secure Transport Apple deprecated Secure Transport on macOS 10.15 / iOS 13 in favour of Network.framework, and it cannot negotiate TLS 1.3. configure still enables it silently whenever no other TLS backend is requested, so HTTPS to servers requiring TLS 1.3 fails. Warn only for the autodetected case. A user who passes --enable-securetransport has already made that choice, and the distinction also gives --fatal-warnings builds an escape hatch: any warn() makes configure exit 1, so such builds must add --enable-gnutls or --enable-openssl, or pass --enable-securetransport explicitly to acknowledge the deprecation. Autodetected builds still fail under --fatal-warnings, which is the flag's intended effect. Also update the https/tls/dtls "protocol not found" hint in avio.c: list only the four backends common to tls_protocol_deps_any and dtls_protocol_deps_any (libtls and securetransport are TLS-only and cannot provide the dtls protocol), say Apple deprecated Secure Transport on all its platforms rather than only macOS, and name all three URL schemes that reach the hint. This addresses the diagnostic part of the report, not a full fix. See: https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21686 Signed-off-by: Jun Zhao <[email protected]> --- configure | 4 ++++ libavformat/avio.c | 5 +++-- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/configure b/configure index 3a0ee5ddfb..133ad3ff42 100755 --- a/configure +++ b/configure @@ -8136,6 +8136,10 @@ check_deps $CONFIG_LIST \ $HAVE_LIST \ $ALL_COMPONENTS \ +enabled_all avformat tls_protocol securetransport && + ! requested securetransport && warn \ + "Secure Transport is deprecated by Apple and does not support TLS 1.3.\nConsider configuring with --enable-gnutls or --enable-openssl instead." + enabled threads || warn \ "Threading support was disabled or is not available on the target platform." \ "This means that not only is this build not multi-threaded, but also" \ diff --git a/libavformat/avio.c b/libavformat/avio.c index b0d2e067e4..f60bc0eae3 100644 --- a/libavformat/avio.c +++ b/libavformat/avio.c @@ -353,8 +353,9 @@ static const struct URLProtocol *url_find_protocol(const char *filename) av_freep(&protocols); if (av_strstart(filename, "https:", NULL) || av_strstart(filename, "tls:", NULL) || av_strstart(filename, "dtls:", NULL)) - av_log(NULL, AV_LOG_WARNING, "https or dtls protocol not found, recompile FFmpeg with " - "openssl, gnutls or securetransport enabled.\n"); + av_log(NULL, AV_LOG_WARNING, "https, tls or dtls protocol not found, recompile FFmpeg with " + "openssl, gnutls, mbedtls or schannel enabled " + "(securetransport is deprecated by Apple and lacks TLS 1.3).\n"); return NULL; } -- To stop receiving notification emails like this one, please contact [email protected]. _______________________________________________ ffmpeg-cvslog mailing list -- [email protected] To unsubscribe send an email to [email protected]
