Skip to content

Conversation

@pielonet
Copy link
Contributor

@pielonet pielonet commented Jul 17, 2023

Hi,

This is a fix for Coturn default configuration set in bbb-install-2.6.sh:

  • TLS and DTLS for Coturn is unneeded locally and must be disabled (TLS termination is done by haproxy)
0: WARNING: cannot find certificate file: turn_server_cert.pem (1)
0: WARNING: cannot start TLS and DTLS listeners because certificate file is not set properly
0: WARNING: cannot find private key file: turn_server_pkey.pem (1)
0: WARNING: cannot start TLS and DTLS listeners because private key file is not set properly
  • "lt-cred-mech" is incompatible with "use-auth-secret" so removing it
CONFIGURATION ALERT: You specified --lt-cred-mech and --use-auth-secret in the same time.
Be aware that you could not mix the username/password and the shared secret based auth methohds. 
Shared secret overrides username/password based auth method. Check your configuration!
  • "cli-password" need not be empty although not used
CONFIG ERROR: Empty cli-password, and so telnet cli interface is disabled! Please set a non empty cli-password!

- TLS is unneeded and must be disabled
- "lt-cred-mech" is incompatible with "use-auth-secret" so removing it
@pielonet
Copy link
Contributor Author

pielonet commented Jul 17, 2023

Also BBB 2.6 default Turn configuration (/etc/bigbluebutton/turn-stun-servers.xml) should be modified to only propose turns (TLS over port 443/TCP) and disable unencrypted configuration for port 3478.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant