suggestion : no need to replace ws with wss for kurento server

[Girish Kumar Gupta]

Hi Folks,

I was following manual steps using http://docs.bigbluebutton.org/2.2/install.html to install bbb using ssl on ubuntu. When I replace ws with wss, it does not work. even same is not done in here as well. 

It works without replacing ws with wss. 

So It would be good if we remove these steps from documentation if really not required. 

Open /usr/share/meteor/bundle/programs/server/assets/app/config/settings.yml editing and change:

  kurento:
    wsUrl: ws://bbb.example.com/bbb-webrtc-sfu

to

  kurento:
    wsUrl: wss://bbb.example.com/bbb-webrtc-sfu

[Fred Dixon]

Hi Girish,

Did your server have a SSL certificate configured for nginx when you made the changes? 

  http://docs.bigbluebutton.org/2.2/install.html#configure-bigbluebutton-to-load-session-via-https

Regards,... Fred

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/bigbluebutton-dev/c17d66f6-5b40-491b-967f-0bfe05c2fa3b%40googlegroups.com.

--

BigBlueButton Developer

http://bigbluebutton.org/

@bigbluebutton

[Girish Kumar Gupta]

yes my configured server has ssl and it is working well now without changes from ws to wss for kurento.

Regards

Girish

On Wednesday, October 23, 2019 at 7:21:26 PM UTC+5:30, Fred Dixon wrote:

Hi Girish,

Did your server have a SSL certificate configured for nginx when you made the changes? 

  http://docs.bigbluebutton.org/2.2/install.html#configure-bigbluebutton-to-load-session-via-https

Regards,... Fred

On Wed, Oct 23, 2019 at 9:25 AM Girish Kumar Gupta <gir...@greatlearning.in> wrote:

Hi Folks,

I was following manual steps using http://docs.bigbluebutton.org/2.2/install.html to install bbb using ssl on ubuntu. When I replace ws with wss, it does not work. even same is not done in here as well. 

It works without replacing ws with wss. 

So It would be good if we remove these steps from documentation if really not required. 

Open /usr/share/meteor/bundle/programs/server/assets/app/config/settings.yml editing and change:

  kurento:
    wsUrl: ws://bbb.example.com/bbb-webrtc-sfu

to

  kurento:
    wsUrl: wss://bbb.example.com/bbb-webrtc-sfu

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-dev" group.

To unsubscribe from this group and stop receiving emails from it, send an email to bigblueb...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/bigbluebutton-dev/c17d66f6-5b40-491b-967f-0bfe05c2fa3b%40googlegroups.com.

[Chad Pilkey]

It's impossible for webcams, screenshare, and listen-only through Kurento, to work with an unsecured websocket if the page is being served over HTTPS. The documentation is correct and it works as directed. If your browsers are up to date they will also completely reject WebRTC functions if the page is unsecured.

[Girish Kumar Gupta]

I had done one more setup using install.sh. When I checked the /usr/local/bigbluebutton/bbb-webrtc-sfu/config/default.yml after installation, I can see this entry: 

kurento:
- ip: xx.xxx.240.251
  url: ws://127.0.0.1:8888/kurento

So there is no wss. And same is verified in at https://github.com/bigbluebutton/bbb-install/blob/410132c6406f6fec523a59377c7cc7c339e43174/bbb-install.sh#L807 where changes are done by script for changing public ip of bbb. there is no change for ws to wss.

Even i am able to access  webcams, screenshare, and listen-only features of Kurento.

Thanks 

Girish

[Fred Dixon]

Hi Girish,

We think you might be confusing two different parameters.  There are two configuration files at play for communicating with Kurento.

In

   /usr/local/bigbluebutton/bbb-webrtc-sfu/config/default.yml

it will be 'ws' because the components for bbb-webrtc-sfu run on the same server as Kurento, so they can connect locally vi 'ws'.  Changing this to 'wss' will cause this connection to fail.

In the docs

   /usr/local/bigbluebutton/bbb-webrtc-sfu/config/default.yml

the file it describes to edit is different.  It is

  /usr/share/meteor/bundle/programs/server/assets/app/config/settings.yml

This is the file that passes key configuration parameters to the HTML5 client.  In this file, when you have your server configured to use a SSL certificate, the BigBlueButton client must communicate with Kurento via a secure web socket connection ('wss'), hence the need to change the wsUrl from 'ws' to 'wss'.

If you want a diagram of the details of how the components communicate with each other, see

  http://docs.bigbluebutton.org/2.2/architecture.html#internal-network-connections

Regards,... Fred

To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/bigbluebutton-dev/66f9285f-3d4b-43dc-9e81-b7b59c7b4938%40googlegroups.com.

--

BigBlueButton Developer

http://bigbluebutton.org/

Like BigBlueButton?  Tweet us at @bigbluebutton

[Girish Kumar Gupta]

Thanks Fred for clarification.

Now this is clear to me.

To view this discussion on the web visit https://groups.google.com/d/msgid/bigbluebutton-dev/66f9285f-3d4b-43dc-9e81-b7b59c7b4938%40googlegroups.com.