gstreamer/subprojects/gst-plugins-good/tests/examples
François Laignel 0f7be28eb1 rtspsrc: client-managed MIKEY KeyMgmt
Some servers (e.g. Axis cameras) expect the client to propose the encryption
key(s) to be used for SRTP / SRTCP. This is required to allow re-keying so
as to evade cryptanalysis. Note that the behaviour is not specified by the
RFCs. By setting the 'client-managed-mikey-mode' property to 'true', rtspsrc
acts as follows:

* For a secured profile (RTP/SAVP or RTP/SAVPF), any media in the SDP
  returned by the server for which a MIKEY key management applies is
  elligible for client managed mode. The MIKEY from the server is then
  ignored.
* rtspsrc sends a SETUP with a MIKEY payload proposed by the user. The
  payload is formed by calling the 'request-rtp-key' signal for each
  elligible stream. During initialisation, 'request-rtcp-key' is also
  called as usual. The keys returned by both signals should be the same
  for a single stream, but the mechanism allows a different approach.
* The user can start re-keying of a stream by calling SET_PARAMETER.
  The convenience signal 'set-mikey-parameter' can be used to build a
  'KeyMgmt' parameter with a MIKEY payload.
* After the server accepts the new parameter, the user can call
  'remove-key' and prepare for the new key(s) to be served by signals
  'request-rtp-key' & 'request-rtcp-key'.
* The signals 'soft-limit' & 'hard-limit' are called when a key
  reaches the limits of its utilisation.

This commit adds support for:

* client-managed MIKEY mode to srtpsrc.
* Master Key Index (MKI) parsing and encoding to GstMIKEYMessage.
* re-keying using the signals 'set-mikey-parameter' & 'remove-key' and
  then by serving the new key via 'request-rtp-key' & 'request-rtcp-key'.
* 'soft-limit' & 'hard-limit' signals, similar to those provided by srtpdec.

See also:

* https://www.rfc-editor.org/rfc/rfc3830
* https://www.rfc-editor.org/rfc/rfc4567

Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/7587>
2024-10-24 12:43:11 +00:00
..
audiofx
cairo
equalizer
gtk examples: gtk: Add example to illustrate usage of accept-certificate with souphttpsrc 2023-06-29 16:27:31 +00:00
jack jack: Dynamically load libjack at runtime instead of linking 2023-04-20 11:10:15 +03:00
level
qt tests/examples/qmlglveray.py: fix formatting for commit lint 2024-09-02 11:19:34 +00:00
qt6 tests/examples/qml6: Add license and copyright information 2024-09-02 11:19:33 +00:00
rpicamsrc good: tests: drop use of GSlice 2023-01-24 15:25:07 +00:00
rtp rtp: examples: client-rtpaux: Provide correct caps by payload type and RTX pt map by session 2022-10-10 14:56:18 +00:00
rtsp rtspsrc: client-managed MIKEY KeyMgmt 2024-10-24 12:43:11 +00:00
shapewipe
spectrum
splitmux splitmuxsrc: Allow adding fragments during playback 2024-08-02 15:30:12 +10:00
v4l2 examples: v4l2: Add v4l2src crop example 2022-03-11 15:02:08 +00:00
meson.build splitmuxsrc: Add add-fragment signal and examples 2024-08-02 15:30:04 +10:00