obs-outputs: Refine certificate selection on macOS

Query for trusted and valid (based on datetime) certificates only.
This commit is contained in:
PatTheMav
2023-08-03 15:58:30 +02:00
committed by Lain
parent 6a42d88ca7
commit 57849bb0e7
+5 -5
View File
@@ -315,13 +315,13 @@ RTMP_TLS_LoadCerts(RTMP *r) {
CertFreeCertificateContext(pCertContext);
CertCloseStore(hCertStore, 0);
#elif defined(__APPLE__)
CFTypeRef keys[4] = {kSecClass, kSecMatchLimit, kSecReturnAttributes,
kSecReturnData};
CFTypeRef keys[6] = {kSecClass, kSecMatchLimit, kSecReturnAttributes,
kSecReturnData, kSecMatchTrustedOnly, kSecMatchValidOnDate};
CFTypeRef values[4] = {kSecClassCertificate, kSecMatchLimitAll,
kCFBooleanFalse, kCFBooleanTrue};
CFTypeRef values[6] = {kSecClassCertificate, kSecMatchLimitAll,
kCFBooleanFalse, kCFBooleanTrue, kCFBooleanTrue, kCFNull};
CFDictionaryRef query =
CFDictionaryCreate(kCFAllocatorDefault, keys, values, 4,
CFDictionaryCreate(kCFAllocatorDefault, keys, values, 6,
&kCFTypeDictionaryKeyCallBacks,
&kCFTypeDictionaryValueCallBacks);