gst-rtsp-server test-video error "Unacceptable TLS certificate"

[Mandar Joshi]

Hello everyone,
Has anyone managed to get the test-video example in gst-rtsp-server
1.8.2 working with TLS enabled? I keep getting an error "Unacceptable
TLS certificate".

I tried setting the tls certificate with:

cert = g_tls_certificate_new_from_files (...);

but that didn't help.

-------------------------------------------------------------------------------------------------------------
$ GST_DEBUG=3 gst-launch-1.0 rtspsrc
location=rtsps://127.0.0.1:8554/test latency=0 user-id=user
user-pw=password  ! rtph264depay ! fakesink
Setting pipeline to PAUSED ...
Pipeline is live and does not need PREROLL ...
Progress: (open) Opening Stream
Progress: (connect) Connecting to rtsps://127.0.0.1:8554/test
GLib-GIO-Message: Using the 'memory' GSettings backend.  Your settings
will not be saved or shared with other applications.
0:00:00.474444000 32100    0xebaf0 ERROR                default
gstrtspconnection.c:960:gst_rtsp_connection_connect_with_response:
failed to connect: Unacceptable TLS certificate
0:00:00.475023000 32100    0xebaf0 ERROR                rtspsrc
gstrtspsrc.c:4137:gst_rtsp_conninfo_connect:<rtspsrc0> Could not
connect to server. (Generic error)
0:00:00.475551000 32100    0xebaf0 WARN                 rtspsrc
gstrtspsrc.c:6795:gst_rtspsrc_retrieve_sdp:<rtspsrc0> error: Failed to
connect. (Generic error)
ERROR: from element /GstPipeline:pipeline0/GstRTSPSrc:rtspsrc0: Could
not open resource for reading and writing.
Additional debug info:
/var/tmp/portage/media-libs/gst-plugins-good-1.8.2/work/gst-plugins-good-1.8.2/gst/rtsp/gstrtspsrc.c(6795):
gst_rtspsrc_retrieve_sdp ():
/GstPipeline:pipeline0/GstRTSPSrc:rtspsrc0:
Failed to connect. (Generic error)
ERROR: pipeline doesn't want to preroll.
Setting pipeline to PAUSED ...
Setting pipeline to READY ...
Setting pipeline to NULL ...
0:00:00.477656000 32100    0xebaf0 WARN                 rtspsrc
gstrtspsrc.c:6874:gst_rtspsrc_open:<rtspsrc0> can't get sdp
Freeing pipeline ...
-------------------------------------------------------------------------------------------------------------

The ceritificates work correctly with openssl s_client. but not with
gnutls-server/gnutls-cli
Any suggestions?

Regards
Mandar Joshi
_______________________________________________
gstreamer-devel mailing list
[hidden email]
https://lists.freedesktop.org/mailman/listinfo/gstreamer-devel

[Rodrigo Pimenta Carvalho]

Hello.

Try this:

GST_DEBUG=3 gst-launch-1.0 rtspsrc location=rtsps://127.0.0.1:8554/test latency=0 user-id=user user-pw=password  tls-validation-flags=generic-error! rtph264depay ! fakesink

It make the client ignore the certificate from server. That is, any certificate should be acceptable.
However, if the certificate is important, so I still have search about how to use it. I'm still a beginner in GStreamer.

[Mandar Joshi]

> However, if the certificate is important, so I still have search about how
> to use it. I'm still a beginner in GStreamer.
>
the solution here is to subclass GTlsInteraction and handle the
accept-certificate event.
then pass this to rtspsrc in the tls-interaction property.

Regards
Mandar Joshi
_______________________________________________
gstreamer-devel mailing list
[hidden email]
https://lists.freedesktop.org/mailman/listinfo/gstreamer-devel

[enthusiastic geek]

@mandar not sure what you are trying to convey.

I have gone through many examples.

Almost every example uses GTlsConnection* or derivative of GIOStream* object
to handle "accept-certificate" event. Not sure how GTlsInteraction* "or
subclassing" relates to this.

https://github.com/Parrot-Developers/disco-opensource/blob/e31ac5bdec630e9882a08f286d4e266eda4fae96/sources/gst-plugins-base-1.8.3/gst-plugins-base-1.8.3/gst-libs/gst/rtsp/gstrtspconnection.c



--
Sent from: http://gstreamer-devel.966125.n4.nabble.com/
_______________________________________________
gstreamer-devel mailing list
[hidden email]
https://lists.freedesktop.org/mailman/listinfo/gstreamer-devel