From patchwork Mon Jul 22 09:48:13 2019 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Nicolas Chauvet X-Patchwork-Id: 14035 Return-Path: X-Original-To: patchwork@ffaux-bg.ffmpeg.org Delivered-To: patchwork@ffaux-bg.ffmpeg.org Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by ffaux.localdomain (Postfix) with ESMTP id 11730448872 for ; Mon, 22 Jul 2019 12:53:44 +0300 (EEST) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id EA18568A4CB; Mon, 22 Jul 2019 12:53:43 +0300 (EEST) X-Original-To: ffmpeg-devel@ffmpeg.org Delivered-To: ffmpeg-devel@ffmpeg.org Received: from mail-wr1-f68.google.com (mail-wr1-f68.google.com [209.85.221.68]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 6DC14689F3F for ; Mon, 22 Jul 2019 12:53:37 +0300 (EEST) Received: by mail-wr1-f68.google.com with SMTP id g17so38724444wrr.5 for ; Mon, 22 Jul 2019 02:53:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id; bh=7auiNSi9qJuuI6F8Ae0tf5hmU3OXDvvurgpCbDFj6q8=; b=drJAFeXZpRw/5YwrMbmBAhvBk6sTfuKZaFk3h2HfxAAZpOSym4aRMcaeNaa4JHzfy6 OC7Xp6IW1w7bXUzwArNDtCPfymdGKPtC9Hh4xVyEe+gRosyb5Jcnc1obSXLXkLk/7UJs 2KK4GvgTPa9zhXS2eOSrZcnwc4KMtLKGw5RiC21soLjVNkxJKNTna7kwvz7oDoTJIb8G My6XZkitiRvUpw3LeGzYhqJh4dnD5tBvk1DLS4eJans1dih/kmTBVXemwBWumN505OJW v/bdTqQtbD5g3BjKWcofZHTjWULJ62EvXLpj2Ii4pNRGP3qiaAyMu/GYyYpCF+CrMhgf gFZw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id; bh=7auiNSi9qJuuI6F8Ae0tf5hmU3OXDvvurgpCbDFj6q8=; b=Hd37qk/ICuFmjpg3sij4nKa3W2ZTg1GnMMTYP310iDhYrdbeG/3Rl45U6AtaVeEZOk mhtOB0ABFD20WiPLwG4Zhj09TLYIuyfzoBk8wzzsfegI6d7yNqnHhXawzmSJ1zvYlqBT ZQkrjKOHR5ZMZysW3Ps+M28PUTQ63UJwIPX2sNXBa9o1z++IWckwYAkCdr+ncmpy1/o2 SFtxTPjtQh7NQ93SECsM6XUK0Im/atnO+0o6jpE4qMbTgJngxd5xYSVQNAenA6v3iER5 D8o2RvEQie44Yz57YuOdTXnOVun+Tz4egGeahaDX/qJgTchUaqySb/fWjH8vRgTaNcQB DunQ== X-Gm-Message-State: APjAAAUrI+v7Lo6mSUZEXBaRiSls/UVNIIqe4kGN1mnHM/j8ipymBMN9 HKxl3Fku/DEo/Hv0fztUEkIXuwkE X-Google-Smtp-Source: APXvYqxueQZdBXYGMZIItLen41YfSw/Sed4ZPCOizMhKuSplGFz0UbUnLFC9tZElQMQ5uctpd2zQlA== X-Received: by 2002:adf:f84f:: with SMTP id d15mr73119707wrq.53.1563788900913; Mon, 22 Jul 2019 02:48:20 -0700 (PDT) Received: from arrakis.kwizart.net (lfbn-nic-1-211-179.w2-15.abo.wanadoo.fr. [2.15.58.179]) by smtp.gmail.com with ESMTPSA id t1sm50265134wra.74.2019.07.22.02.48.20 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Mon, 22 Jul 2019 02:48:20 -0700 (PDT) From: Nicolas Chauvet To: ffmpeg-devel@ffmpeg.org Date: Mon, 22 Jul 2019 11:48:13 +0200 Message-Id: <20190722094813.13447-1-kwizart@gmail.com> X-Mailer: git-send-email 2.17.2 Subject: [FFmpeg-devel] [PATCH] Use gnutls_set_default_priority X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Cc: Nicolas Chauvet MIME-Version: 1.0 Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" This will use the default priority for gnutls. When supported, the priority will be set to @SYSTEM which allows to adapt the ciphers list at runtime according to the policy set. See also: https://fedoraproject.org/wiki/Packaging:CryptoPolicies https://wiki.debian.org/CryptoPolicy Signed-off-by: Nicolas Chauvet --- libavformat/tls_gnutls.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavformat/tls_gnutls.c b/libavformat/tls_gnutls.c index f32bc2821b..b30e8ea007 100644 --- a/libavformat/tls_gnutls.c +++ b/libavformat/tls_gnutls.c @@ -181,7 +181,7 @@ static int tls_open(URLContext *h, const char *uri, int flags, AVDictionary **op gnutls_transport_set_pull_function(p->session, gnutls_url_pull); gnutls_transport_set_push_function(p->session, gnutls_url_push); gnutls_transport_set_ptr(p->session, c->tcp); - gnutls_priority_set_direct(p->session, "NORMAL", NULL); + gnutls_set_default_priority (p->session); do { ret = gnutls_handshake(p->session); if (gnutls_error_is_fatal(ret)) {