Hyorin Choi
ab1292059f
Update turnserver.conf ( #1009 )
...
Made some text proofreading
2022-10-26 22:53:32 +02:00
Pavel Punsky
ae2673959b
Use single SSL_CTX for DTLS support ( #996 )
...
Similar to #989 , use a single SSL context for all versions of DTLS
protocol
- Add support for modern API (protocol version independent APIs)
- Add DTLS test to the CI test
- Removing calls to `SSL_CTX_set_read_ahead` in DTLS context (does
nothing as DTLS is datagram protocol - we always get the whole datagram
so this call has no impact)
Fixes #924
2022-10-05 10:26:46 +02:00
Pavel Punsky
73c14d6b10
Replace references to non-existent pdf file with links ( #1002 )
...
Fixes #800
2022-09-29 11:09:10 -07:00
Pavel Punsky
4bab2adba4
Use a single SSL context object ( #989 )
...
openssl allows multiple TLS version support through a single SSL_CTX
object.
This PR replaces 4 per-version SSL_CTX objects with a single object
(DTLS is not yet changed).
SSL context initialization code for openssl with modern API (>=1.1.0)
uses `TLS_server_method` and `SSL_CTX_set_min_proto_version` instead of
enabling specific TLS version. Byproduct of this is TLSv1_3 support when
used with openssl-1.1.1 and above
TLS 1.2 and TLS 1.3 cannot be disabled (as before)
Test plan:
- run_tests.sh script now runs turnserver with SSL certificate (which
enables TLS support)
- run_tests.sh now has one more basic test that uses TLS protocol
Co-authored-by: Pavel Punsky <pavel.punsky@epicgames.com>
2022-09-28 09:50:25 +02:00
Pavel Punsky
483c7223be
Fix duplicate TCP flag in run_tests.sh script ( #971 )
...
Typo that caused UDP test to actually run TCP
2022-09-04 14:56:10 +02:00
Pavel Punsky
41a8aa09ff
Document dependency between new-log-timestamp-format and new-log-timestamp
2022-08-27 20:34:35 -07:00
Pavel Punsky
0cb8535de6
Update example turnserver.conf file to reflect that dh2066 is default
2022-08-14 15:20:59 -07:00
Gustavo Garcia
38c4055cb0
Merge pull request #789 from korayvt/syslog_facility
...
Add syslog facility configuration
2022-08-10 11:40:43 +02:00
Gustavo Garcia
ff1952033f
Add running turn tests
2022-08-05 13:27:09 +02:00
KORAY VATANSEVER
22af3ea567
Add syslog facility configuration
2021-07-07 15:56:30 +03:00
Mészáros Mihály
708b83ea78
RESPONSE_ORIGIN attribute only if rfc5780 is on
2021-06-05 22:10:31 +02:00
Mészáros Mihály
54ef051844
Disable stun backward compatibility
2021-06-05 22:10:31 +02:00
Mészáros Mihály
e7ddfb4f4b
Tidy in turnserver.conf rfc5780 option
2021-06-05 22:10:31 +02:00
Mészáros Mihály
eda11698f0
Add option no-rfc5780
...
To avoid any amplifiaction STUN binding attacks.
2021-06-05 22:10:31 +02:00
Mészáros Mihály
8fbe513300
Fix typo (---allow-loopback-peers)
2021-05-07 21:25:40 +02:00
Mészáros Mihály
27cd04194e
Merge pull request #717 from marcoschum/patch-1
...
Update turnserver.conf
2021-03-23 09:35:42 +01:00
Mészáros Mihály
2204778ce1
Replace keep-address-family with allocation-default-address-family
2021-03-12 23:05:18 +01:00
marcoschum
cfb03bb934
Update turnserver.conf
...
fixed typo mor --> more
2021-02-24 09:19:03 +01:00
Mészáros Mihály
104ab83f09
Automatically notify systemd if compiled
2021-01-10 20:57:43 +01:00
Mészáros Mihály
a66e5cd286
Remove pid handling from systemd service files
2021-01-10 20:57:06 +01:00
Mészáros Mihály
ef7916842d
Add systemd notification support
2021-01-07 17:51:34 +00:00
Mészáros Mihály
14f1630ec6
Fix stale-nonce documentation Resolves #604
2021-01-05 10:25:10 +00:00
Mészáros Mihály
27b261eb58
Disable binding logging to avoid DoS attack
...
* Add new option log-binding
2021-01-05 09:55:55 +00:00
Mészáros Mihály
d73a8e85d7
Add acme to config file
2020-12-18 08:05:19 +00:00
Mészáros Mihály
b0fb4a9a0a
Rename new timestamp options, and fix these cli handling
2020-12-08 11:51:25 +01:00
Mészáros Mihály
37b61993e5
Add new log options to config file
2020-12-08 11:10:15 +01:00
Mészáros Mihály
3b3c5849cc
bump version
2020-12-07 15:26:00 +01:00
David Florness
2baacbf895
Delete trailing whitespace in example configuration files
2020-10-17 13:49:07 -04:00
Mészáros Mihály
388d939ed9
Change prometheus exporter port to 9641
2020-08-03 14:24:20 +02:00
Mészáros Mihály
c9cd99e4f5
Disable prometheus by default
2020-08-03 10:25:56 +02:00
Mészáros Mihály
063def2c0a
Merge branch 'prometheus'
2020-07-07 20:23:08 +02:00
wolmi
a5d1fbba57
Merge branch 'master' into prometheus
2020-06-29 09:33:20 +02:00
Mészáros Mihály
6d605d353f
Bump version
2020-06-24 17:05:18 +02:00
Mészáros Mihály
e8dd65870c
Merge pull request #566 from bpcurse/patch-1
...
Remove reference to SSLv3
2020-06-24 11:46:49 +02:00
Ilya Kisleyko
283d7c5749
tell tar to not include the metadata into release
2020-06-09 18:30:30 +00:00
bpcurse
1a4b4cc63a
Remove reference to SSLv3
...
Judging from the information provided here https://github.com/coturn/coturn/issues/220#issuecomment-371916988 ,
SSL isn't supported anymore so the reference should be removed from the config file.
2020-05-29 15:24:21 +02:00
Mészáros Mihály
113f13855a
Fix missing DH2066 default update in config
2020-05-18 08:24:40 +02:00
Miquel Ortega
83cf9ea6c4
Merge branch 'prometheus' of github.com:wolmi/coturn into prometheus
2020-05-05 19:44:16 +02:00
Miquel Ortega
fdfa4b8594
Added no-prometheus flag on example configuration
2020-05-05 19:32:25 +02:00
Mészáros Mihály
2b2f116c2d
Bump version
2020-04-30 20:41:17 +02:00
Mészáros Mihály
7d1c1e0f89
Add new test certs
2020-04-28 09:26:31 +00:00
Mészáros Mihály
991a82e104
Merge branch 'master' into master
2020-04-28 09:47:20 +02:00
Mészáros Mihály
1e4456ea92
Merge pull request #506 from dbrgn/rename-prod
...
Rename "prod" config option to "no-software-attribute"
2020-04-28 09:18:51 +02:00
Paul Menzel
801832e94f
Replace coTURN by Coturn
...
The official spelling of *Coturn* seems to be just with a capital
starting letter, replace all occurrences of *coTURN* with the command
below.
git grep -l coTURN | xargs sed -i 's/coTURN/Coturn/g'
2020-03-30 19:28:28 +02:00
Danilo Bargen
520e172b22
Rename "prod" config option to "no-software-attribute"
...
As discussed in https://github.com/coturn/coturn/pull/478 , if the
parameter only controls whether or not to send the software attribute
and not other production-relevant configurations, it should be named
accordingly.
The old --prod configuration option still works, but is now deprecated
and undocumented.
2020-03-13 11:03:05 +01:00
Bertold Van den Bergh
ace903fd07
Add support for loadbalanced TCP connections (haproxy protocol v2)
2020-02-13 01:56:43 +01:00
Mészáros Mihály
04d7cd1486
Merge pull request #478 from alepolidori/prod-opt
...
turnserver.conf: add --prod section to enhance security
2020-02-12 11:23:06 +01:00
Alessandro Polidori
3f3a3623c8
turnserver.conf: add --prod section to enhance security
2019-12-19 17:41:02 +01:00
xthursdayx
d355b992a7
Updated turnserver.conf
...
Edited turnserver.conf for typos and language clarity.
2019-11-09 15:52:37 -05:00
chanduthedev
c317a19334
Some more typo's fixed
2019-10-16 13:56:32 +08:00