souphttpsrc SSL/TLS handling and default CA location

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

souphttpsrc SSL/TLS handling and default CA location

dorin
I just hit the unlikely and unfortunate case where a source server relies on
a certificate authority that is not trusted by linux distros (Starfield G2 -
although it's trusted by all browsers). I need to fetch data from a https
url from that server, and it returns Unacceptable TLS certificate (6).

The problem now is that I think souphttpsrc is buggy and I can't find a
workaround. Things I've tried:
 - souphttpsrc ssl-strict=0 (no difference)

 - downloaded the Starfield G2 CA file and installed it to the default CA
bundle
   - $ curl https://server works fine, this confirms the CA is trusted now
   - using curlhttpsrc in gstreamer pipeline works fine
   - using souphttpsrc still throws TLS error (6)

- souphttpsrc ssl-ca-file=/tmp/sfig2.crt.pem (no difference)
- souphttpsrc ssl-ca-file=/tmp/sfig2.crt (no difference)
- souphttpsrc ssl-use-system-ca-file=1 (no difference)

How can I get souphttpsrc to read from the server?




--
Sent from: http://gstreamer-devel.966125.n4.nabble.com/
_______________________________________________
gstreamer-devel mailing list
[hidden email]
https://lists.freedesktop.org/mailman/listinfo/gstreamer-devel
Reply | Threaded
Open this post in threaded view
|

Re: souphttpsrc SSL/TLS handling and default CA location

dorin
I solved it by deleting gstreamer cache
(/root/.cache/gstreamer-1.0/registry.x86_64.bin)



--
Sent from: http://gstreamer-devel.966125.n4.nabble.com/
_______________________________________________
gstreamer-devel mailing list
[hidden email]
https://lists.freedesktop.org/mailman/listinfo/gstreamer-devel