1020 error on iOS devices when using TURN server

[Kieron Etherington]

Since we've added a TURN server to our BBB 2.2.26 instance no iOS device (iOS 13 or 14) has been able to join via mobile safari.

It was working before the TURN server was setup -- We're running the very latest version of coturn 4.5.1.3 and have followed the documentation on it.

Some suggestions online mentioned only running turn: rather than turns: but didn't make a difference.

Anyone had any luck with this?

[Matthew Newell]

Any help with this would be greatly appreciated!

At the moment we are stuck with the choice between having users either behind a firewall (TURN off) or iOS (TURN on) unable to share their webcam.. 

We've tested the same devices on test.bigbluebutton.org and can see that iOS is working there.  We must have miss-configured something, but we've tried multiple configurations without success..

[Toni Förster]

Have you looked here:

https://docs.bigbluebutton.org/2.2/troubleshooting.html#webrtc-errors-1001-1002

https://github.com/bigbluebutton/bigbluebutton/issues/6797#issuecomment-607866043

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/bigbluebutton-dev/dad9973e-c82a-481a-87cc-a66d5a1c9d3en%40googlegroups.com.

[Yiğit ÇÖME]

The problem can be solved if you follow the commands below, it worked for me.

$ sudo ufw disable

$ reboot your server.

after 

$ redis-server

2 Ekim 2020 Cuma tarihinde saat 18:39:40 UTC+3 itibarıyla Kieron Etherington şunları yazdı:

[Brent W. Baccala]

I've found that Safari can't handle encrypted TURN sessions (it doesn't validate the SSL certificates correctly).

So, make sure you're using unencrypted TURN.

[Toni Förster]

I don't think recommending the use of an unencrypted TURN server is the way to go.

Would the use of another browser e.g. Chrome or Firefox help? I know that they all have to use the same render engine, but maybe the ssl handling is different.

Since I lack an iOS device could someone test this?

Best Toni

[Toni Förster]

@Brent Sorry, I completely misunderstood you. You meant disabling TURNs, didn’t you?

@Kieron could you try to disable the TURNs server in: turn-stun-servers.xml and report back? I’m also interested in the outcome.

Best Toni

[sd...@distancelearning.cloud]

Do this... for each turn server have a turn and turns

<bean id="turn0" class="org.bigbluebutton.web.services.turn.TurnServer">
<constructor-arg index="0" value="turnpassword"/>
<constructor-arg index="1" value="turns:bbbturn1.you.com:443?transport=tcp"/>
<constructor-arg index="2" value="86400"/>
</bean>

<bean id="turn1" class="org.bigbluebutton.web.services.turn.TurnServer">
<constructor-arg index="0" value="turnpassword"/>
<constructor-arg index="1" value="turn:bbbturn1.you.com:443?transport=tcp"/>
<constructor-arg index="2" value="86400"/>
</bean>

<bean id="turn2" class="org.bigbluebutton.web.services.turn.TurnServer">
<constructor-arg index="0" value="turnpassword"/>
<constructor-arg index="1" value="turns:bbbturn2.you.com:443?transport=tcp"/>
<constructor-arg index="2" value="86400"/>
</bean>

<bean id="turn3" class="org.bigbluebutton.web.services.turn.TurnServer">
<constructor-arg index="0" value="turnpassword"/>
<constructor-arg index="1" value="turn:bbbturn2.you.com:443?transport=tcp"/>
<constructor-arg index="2" value="86400"/>
</bean>

Regards,
Stephen

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/bigbluebutton-dev/8AE0EC4F-1A67-4FCA-96EA-1A91DBA48D0F%40gmail.com.