1
0
mirror of https://github.com/coturn/coturn.git synced 2025-10-24 12:31:00 +02:00

166 Commits

Author SHA1 Message Date
Hyorin Choi
ab1292059f
Update turnserver.conf (#1009)
Made some text proofreading
2022-10-26 22:53:32 +02:00
Pavel Punsky
ae2673959b
Use single SSL_CTX for DTLS support (#996)
Similar to #989, use a single SSL context for all versions of DTLS
protocol

- Add support for modern API (protocol version independent APIs)
- Add DTLS test to the CI test
- Removing calls to `SSL_CTX_set_read_ahead` in DTLS context (does
nothing as DTLS is datagram protocol - we always get the whole datagram
so this call has no impact)

Fixes #924
2022-10-05 10:26:46 +02:00
Pavel Punsky
73c14d6b10
Replace references to non-existent pdf file with links (#1002)
Fixes #800
2022-09-29 11:09:10 -07:00
Pavel Punsky
4bab2adba4
Use a single SSL context object (#989)
openssl allows multiple TLS version support through a single SSL_CTX
object.

This PR replaces 4 per-version SSL_CTX objects with a single object
(DTLS is not yet changed).
SSL context initialization code for openssl with modern API (>=1.1.0)
uses `TLS_server_method` and `SSL_CTX_set_min_proto_version` instead of
enabling specific TLS version. Byproduct of this is TLSv1_3 support when
used with openssl-1.1.1 and above

TLS 1.2 and TLS 1.3 cannot be disabled (as before)

Test plan:
- run_tests.sh script now runs turnserver with SSL certificate (which
enables TLS support)
- run_tests.sh now has one more basic test that uses TLS protocol

Co-authored-by: Pavel Punsky <pavel.punsky@epicgames.com>
2022-09-28 09:50:25 +02:00
Pavel Punsky
483c7223be
Fix duplicate TCP flag in run_tests.sh script (#971)
Typo that caused UDP test to actually run TCP
2022-09-04 14:56:10 +02:00
Pavel Punsky
41a8aa09ff Document dependency between new-log-timestamp-format and new-log-timestamp 2022-08-27 20:34:35 -07:00
Pavel Punsky
0cb8535de6 Update example turnserver.conf file to reflect that dh2066 is default 2022-08-14 15:20:59 -07:00
Gustavo Garcia
38c4055cb0
Merge pull request #789 from korayvt/syslog_facility
Add syslog facility configuration
2022-08-10 11:40:43 +02:00
Gustavo Garcia
ff1952033f
Add running turn tests 2022-08-05 13:27:09 +02:00
KORAY VATANSEVER
22af3ea567 Add syslog facility configuration 2021-07-07 15:56:30 +03:00
Mészáros Mihály
708b83ea78 RESPONSE_ORIGIN attribute only if rfc5780 is on 2021-06-05 22:10:31 +02:00
Mészáros Mihály
54ef051844 Disable stun backward compatibility 2021-06-05 22:10:31 +02:00
Mészáros Mihály
e7ddfb4f4b Tidy in turnserver.conf rfc5780 option 2021-06-05 22:10:31 +02:00
Mészáros Mihály
eda11698f0 Add option no-rfc5780
To avoid any amplifiaction STUN binding attacks.
2021-06-05 22:10:31 +02:00
Mészáros Mihály
8fbe513300 Fix typo (---allow-loopback-peers) 2021-05-07 21:25:40 +02:00
Mészáros Mihály
27cd04194e
Merge pull request #717 from marcoschum/patch-1
Update turnserver.conf
2021-03-23 09:35:42 +01:00
Mészáros Mihály
2204778ce1 Replace keep-address-family with allocation-default-address-family 2021-03-12 23:05:18 +01:00
marcoschum
cfb03bb934
Update turnserver.conf
fixed typo mor --> more
2021-02-24 09:19:03 +01:00
Mészáros Mihály
104ab83f09 Automatically notify systemd if compiled 2021-01-10 20:57:43 +01:00
Mészáros Mihály
a66e5cd286 Remove pid handling from systemd service files 2021-01-10 20:57:06 +01:00
Mészáros Mihály
ef7916842d Add systemd notification support 2021-01-07 17:51:34 +00:00
Mészáros Mihály
14f1630ec6 Fix stale-nonce documentation Resolves #604 2021-01-05 10:25:10 +00:00
Mészáros Mihály
27b261eb58 Disable binding logging to avoid DoS attack
* Add new option log-binding
2021-01-05 09:55:55 +00:00
Mészáros Mihály
d73a8e85d7 Add acme to config file 2020-12-18 08:05:19 +00:00
Mészáros Mihály
b0fb4a9a0a Rename new timestamp options, and fix these cli handling 2020-12-08 11:51:25 +01:00
Mészáros Mihály
37b61993e5 Add new log options to config file 2020-12-08 11:10:15 +01:00
Mészáros Mihály
3b3c5849cc bump version 2020-12-07 15:26:00 +01:00
David Florness
2baacbf895
Delete trailing whitespace in example configuration files 2020-10-17 13:49:07 -04:00
Mészáros Mihály
388d939ed9 Change prometheus exporter port to 9641 2020-08-03 14:24:20 +02:00
Mészáros Mihály
c9cd99e4f5 Disable prometheus by default 2020-08-03 10:25:56 +02:00
Mészáros Mihály
063def2c0a Merge branch 'prometheus' 2020-07-07 20:23:08 +02:00
wolmi
a5d1fbba57
Merge branch 'master' into prometheus 2020-06-29 09:33:20 +02:00
Mészáros Mihály
6d605d353f Bump version 2020-06-24 17:05:18 +02:00
Mészáros Mihály
e8dd65870c
Merge pull request #566 from bpcurse/patch-1
Remove reference to SSLv3
2020-06-24 11:46:49 +02:00
Ilya Kisleyko
283d7c5749 tell tar to not include the metadata into release 2020-06-09 18:30:30 +00:00
bpcurse
1a4b4cc63a
Remove reference to SSLv3
Judging from the information provided here https://github.com/coturn/coturn/issues/220#issuecomment-371916988,
SSL isn't supported anymore so the reference should be removed from the config file.
2020-05-29 15:24:21 +02:00
Mészáros Mihály
113f13855a
Fix missing DH2066 default update in config 2020-05-18 08:24:40 +02:00
Miquel Ortega
83cf9ea6c4 Merge branch 'prometheus' of github.com:wolmi/coturn into prometheus 2020-05-05 19:44:16 +02:00
Miquel Ortega
fdfa4b8594 Added no-prometheus flag on example configuration 2020-05-05 19:32:25 +02:00
Mészáros Mihály
2b2f116c2d Bump version 2020-04-30 20:41:17 +02:00
Mészáros Mihály
7d1c1e0f89 Add new test certs 2020-04-28 09:26:31 +00:00
Mészáros Mihály
991a82e104
Merge branch 'master' into master 2020-04-28 09:47:20 +02:00
Mészáros Mihály
1e4456ea92
Merge pull request #506 from dbrgn/rename-prod
Rename "prod" config option to "no-software-attribute"
2020-04-28 09:18:51 +02:00
Paul Menzel
801832e94f Replace coTURN by Coturn
The official spelling of *Coturn* seems to be just with a capital
starting letter, replace all occurrences of *coTURN* with the command
below.

    git grep -l coTURN | xargs sed -i 's/coTURN/Coturn/g'
2020-03-30 19:28:28 +02:00
Danilo Bargen
520e172b22 Rename "prod" config option to "no-software-attribute"
As discussed in https://github.com/coturn/coturn/pull/478, if the
parameter only controls whether or not to send the software attribute
and not other production-relevant configurations, it should be named
accordingly.

The old --prod configuration option still works, but is now deprecated
and undocumented.
2020-03-13 11:03:05 +01:00
Bertold Van den Bergh
ace903fd07 Add support for loadbalanced TCP connections (haproxy protocol v2) 2020-02-13 01:56:43 +01:00
Mészáros Mihály
04d7cd1486
Merge pull request #478 from alepolidori/prod-opt
turnserver.conf: add --prod section to enhance security
2020-02-12 11:23:06 +01:00
Alessandro Polidori
3f3a3623c8 turnserver.conf: add --prod section to enhance security 2019-12-19 17:41:02 +01:00
xthursdayx
d355b992a7
Updated turnserver.conf
Edited turnserver.conf for typos and language clarity.
2019-11-09 15:52:37 -05:00
chanduthedev
c317a19334 Some more typo's fixed 2019-10-16 13:56:32 +08:00