OpenSSL: What's the supported version of OpenSSL, and how do I build it?

[winlinvip]

The following OpenSSL versions are supported.

• OpenSSL 1.0.1k and newer. Note that OpenSSL 1.0.1j does not work, please refer to this link.
• OpenSSL 1.0.2 and newer.
• OpenSSL 1.1.0h and newer. Note that the compilation of OpenSSL 1.1.0g failed, but the API should work if you can fix the compilation bug.
• OpenSSl 3.0.0 and newer.
• OpenSSl 3.1.0 and newer.
• OpenSSl 3.5.0 and newer.

In short, OpenSSL 1.0.1k and newer versions should work. However, OpenSSL 1.1.0h and newer verions are highly recommended.

Execute the command below to compile OpenSSL.

./config && make && make install_sw

Note: For macOS, please use command KERNEL_BITS=64 ./config instead.

Note: To make sure pkg-config can find your specified OpenSSL, you can configure with --prefix=$HOME/.release/openssl and set the PKG_CONFIG_PATH="$HOME/.release/openssl/lib/pkgconfig:$HOME/.release/openssl/lib64/pkgconfig" when you configure FFmpeg.

Note: You can link with static library instead, to avoid the shared library issues. However, if run FFmpeg failed with find libssl.so.3, you need to specify the LD_LIBRARY_PATH="$HOME/.release/openssl/lib:$HOME/.release/openssl/lib64" for FFmpeg.

Note: For OpenSSL 1.0, if OpenSSL not found even after confirming that the PKG_CONFIG_PATH is correctly set, then use --extra-libs="-ldl" while configuring FFmpeg.

Configure FFmpeg with your OpenSSL:

PKG_CONFIG_PATH="$HOME/.release/openssl/lib/pkgconfig:$HOME/.release/openssl/lib64/pkgconfig" \
  ./configure --enable-muxer=whip --enable-openssl --enable-version3 \
    --enable-libx264 --enable-gpl --enable-libopus

RUn FFmpeg with your OpenSSL shared library:

LD_LIBRARY_PATH="$HOME/.release/openssl/lib:$HOME/.release/openssl/lib64" \
  ~/git/ffmpeg-webrtc/ffmpeg

If you are using OpenSSL version earlier than 3.0, you may encounter the error ERROR: OpenSSL <3.0.0 is incompatible with the gpl. This is because you cannot use --enable-gpl, which is required by libx264; therefore, you should remove these options and avoid using them.

PKG_CONFIG_PATH="$HOME/.release/openssl/lib/pkgconfig:$HOME/.release/openssl/lib64/pkgconfig" \
  ./configure --enable-muxer=whip --enable-openssl --enable-version3

As you cannot use libx264, you need to copy the video stream from the file and encode the audio stream to Opus. So, you need to prepare a video file with baseline video and Opus audio. Note that you need another instance of FFmpeg with support for libx264 and libopus. For example:

mkdir -p ~/git/ffmpeg-webrtc/.tmp
ffmpeg -i ~/git/srs/trunk/doc/source.flv \
    -c:v libx264 -profile:v baseline -preset fast -c:a libopus \
    -y ~/git/ffmpeg-webrtc/.tmp/baseline.mp4

Then, you are able to copy the source file as a WHIP stream without encoding; the file is streamed directly because it already uses the Baseline H.264 profile and Opus codec.

~/git/ffmpeg-webrtc/ffmpeg -re -i ~/git/ffmpeg-webrtc/.tmp/baseline.mp4 -c copy \
    -f whip "http://localhost:1985/rtc/v1/whip/?app=live&stream=livestream"