PlayerComponent: resolve plex.direct domains internally

This also enables TLS certificate verification in mpv, like the rest of the app

src/player/PlayerComponent.cpp

@@ -20,6 +20,7 @@
 #include <math.h>
 #include <string.h>
 #include <shared/Paths.h>
+#include <unistd.h>
 
 #if !defined(Q_OS_WIN)
 #include <unistd.h>
@@ -118,6 +119,33 @@ bool PlayerComponent::componentInitialize()
   // User-visible stream title used by some audio APIs (at least PulseAudio and wasapi).
   mpv::qt::set_property(m_mpv, "title", QCoreApplication::applicationName());
 
+  mpv::qt::set_property(m_mpv, "tls-verify", "yes");
+
+#if !defined(Q_OS_WIN) && !defined(Q_OS_MAC)
+  QList<QByteArray> list;
+  list << "/etc/ssl/certs/ca-certificates.crt"
+       << "/etc/pki/tls/certs/ca-bundle.crt"
+       << "/usr/share/ssl/certs/ca-bundle.crt"
+       << "/usr/local/share/certs/ca-root-nss.crt"
+       << "/etc/ssl/cert.pem"
+       << "/usr/share/curl/curl-ca-bundle.crt"
+       << "/usr/local/share/curl/curl-ca-bundle.crt";
+
+  bool success = false;
+
+  for (auto path : list)
+  {
+    if (access(path.data(), R_OK) == 0) {
+      mpv::qt::set_property(m_mpv, "tls-ca-file", path.data());
+      success = true;
+      break;
+    }
+  }
+
+  if (!success)
+    throw FatalException(tr("Failed to locate CA bundle."));
+#endif
+
   // Apply some low-memory settings on RPI, which is relatively memory-constrained.
 #ifdef TARGET_RPI
   // The backbuffer makes seeking back faster (without having to do a HTTP-level seek)
@@ -246,6 +274,17 @@ bool PlayerComponent::load(const QString& url, const QVariantMap& options, const
   return true;
 }
 
+///////////////////////////////////////////////////////////////////////////////////////////////////
+static QString ConvertPlexDirectURL(const QString& host)
+{
+    if (!host.endsWith(".plex.direct"))
+        return host;
+
+    QString substr = host.left(host.indexOf('.'));
+    substr.replace('-', '.');
+    return substr;
+}
+
 ///////////////////////////////////////////////////////////////////////////////////////////////////
 void PlayerComponent::queueMedia(const QString& url, const QVariantMap& options, const QVariantMap &metadata, const QString& audioStream, const QString& subtitleStream)
 {
@@ -256,8 +295,12 @@ void PlayerComponent::queueMedia(const QString& url, const QVariantMap& options,
 
   updateVideoSettings();
 
+  QUrl qurl = url;
+  QString host = qurl.host();
+  qurl.setHost(ConvertPlexDirectURL(host));
+
   QVariantList command;
-  command << "loadfile" << url;
+  command << "loadfile" << qurl.toString();
   command << "append-play"; // if nothing is playing, play it now, otherwise just enqueue it
 
   QVariantMap extraArgs;
@@ -286,6 +329,8 @@ void PlayerComponent::queueMedia(const QString& url, const QVariantMap& options,
   extraArgs.insert("ad", "");
   extraArgs.insert("vd", "");
 
+  extraArgs.insert("stream-lavf-o", "verifyhost=" + host);
+
   command << extraArgs;
 
   mpv::qt::command(m_mpv, command);
@@ -773,6 +818,12 @@ void PlayerComponent::reselectStream(const QString &streamSelection, MediaType t
 
   if (!streamName.isEmpty())
   {
+    if (streamName.startsWith("https://")) {
+      QUrl qurl = streamName;
+      qurl.setHost(ConvertPlexDirectURL(qurl.host()));
+      streamName = qurl.toString();
+    }
+
     auto streams = findStreamsForURL(streamName);
     if (streams.isEmpty())
     {