gst-rtsp-server with TLS support need libgiognutls (It requires nettle which is blacklisted from a license point)

[Ansa]

Hi Gstreamer support Team,

I am using Gstreamer gst-rtsp-server 1.8.3 version and I am able to build an
RTSP server for my use case with out Security.

Now i need to enable TLS suppprt on my server application and use the SRTP
with GST_RTSP_PROFILE_SAVP profile.

When i run the test application, it shows "TLS support is not available"
./test-video-sec
WITH_TLS is enabled : call g_tls_certificate_new_from_pem()
failed to parse PEM: TLS support is not available

After reading through some posts, it looks like missing
"gio/modules/libgiognutls.so". I tried to add this from glib-networking.
libgiognutls requires nettle which is blacklisted from a license point and
it looks like there is no other option than using this package.

We have authentication methods using openssl in our System.
Is it possible to enable TLS support without "libgiognutls.so". Is it
possible to use Openssl libraries directly from gstreamer ?

Please advise as We are currently blocked to add security to our media
transport.

Thank You so much for your help and support,

Best Regards,
Ansa



--
Sent from: http://gstreamer-devel.966125.n4.nabble.com/
_______________________________________________
gstreamer-devel mailing list
[hidden email]
https://lists.freedesktop.org/mailman/listinfo/gstreamer-devel

[Olivier Crête-3]

Hi,

If you use the very latest glib-networking, there is a OpenSSL backend, if you have an older version there is a package called glib-openssl with the same code.

Olivier

On May 27, 2019 2:34:17 p.m. GMT+01:00, Ansa <[hidden email]> wrote:

>Hi Gstreamer support Team,
>
>I am using Gstreamer gst-rtsp-server 1.8.3 version and I am able to
>build an
>RTSP server for my use case with out Security.
>
>Now i need to enable TLS suppprt on my server application and use the
>SRTP
>with GST_RTSP_PROFILE_SAVP profile.
>
>When i run the test application, it shows "TLS support is not
>available"
>./test-video-sec
>WITH_TLS is enabled : call g_tls_certificate_new_from_pem()
>failed to parse PEM: TLS support is not available
>
>After reading through some posts, it looks like missing
>"gio/modules/libgiognutls.so". I tried to add this from
>glib-networking.
>libgiognutls requires nettle which is blacklisted from a license point
>and
>it looks like there is no other option than using this package.
>
>We have authentication methods using openssl in our System.
>Is it possible to enable TLS support without "libgiognutls.so". Is it
>possible to use Openssl libraries directly from gstreamer ?
>
>Please advise as We are currently blocked to add security to our media
>transport.
>
>Thank You so much for your help and support,
>
>Best Regards,
>Ansa
>
>
>
>--
>Sent from: http://gstreamer-devel.966125.n4.nabble.com/
>_______________________________________________
>gstreamer-devel mailing list
>[hidden email]
>https://lists.freedesktop.org/mailman/listinfo/gstreamer-devel

--
Olivier Crête
[hidden email]
_______________________________________________
gstreamer-devel mailing list
[hidden email]
https://lists.freedesktop.org/mailman/listinfo/gstreamer-devel

[Nicolas Dufresne-5]

Le lun. 27 mai 2019 15 h 40, Ansa <[hidden email]> a écrit :

Hi Gstreamer support Team,

I am using Gstreamer gst-rtsp-server 1.8.3 version and I am able to build an
RTSP server for my use case with out Security.

Now i need to enable TLS suppprt on my server application and use the SRTP
with GST_RTSP_PROFILE_SAVP profile.

When i run the test application, it shows "TLS support is not available"
./test-video-sec
WITH_TLS is enabled : call g_tls_certificate_new_from_pem()
failed to parse PEM: TLS support is not available

After reading through some posts, it looks like missing
"gio/modules/libgiognutls.so". I tried to add this from glib-networking.
libgiognutls requires nettle which is blacklisted from a license point and
it looks like there is no other option than using this package.

We have authentication methods using openssl in our System.
Is it possible to enable TLS support without "libgiognutls.so". Is it
possible to use Openssl libraries directly from gstreamer ?

There exist an OpenSSL backend for GLib GIO. It's simply not the one we ship. Update your glib/glib-networking to the latest and configure the backend your lawyers want.

Please advise as We are currently blocked to add security to our media
transport.

Thank You so much for your help and support,

Best Regards,
Ansa



--
Sent from: http://gstreamer-devel.966125.n4.nabble.com/
_______________________________________________
gstreamer-devel mailing list
[hidden email]
https://lists.freedesktop.org/mailman/listinfo/gstreamer-devel

_______________________________________________
gstreamer-devel mailing list
[hidden email]
https://lists.freedesktop.org/mailman/listinfo/gstreamer-devel

[Ansa]

Thank You so much Olivier for the Advise. We will try that.

BR,
Ansa



--
Sent from: http://gstreamer-devel.966125.n4.nabble.com/
_______________________________________________
gstreamer-devel mailing list
[hidden email]
https://lists.freedesktop.org/mailman/listinfo/gstreamer-devel

[Ansa]

Hi Nicolas,

Thank you so much for the quick response. We will try those options.

BR,
Ansa



--
Sent from: http://gstreamer-devel.966125.n4.nabble.com/
_______________________________________________
gstreamer-devel mailing list
[hidden email]
https://lists.freedesktop.org/mailman/listinfo/gstreamer-devel