Can Janus use DTLS v1.2 only?

[Eugene F.]

Hello everyone.
We`ve faced a very peculiar problem: a firewall that we can't control blocks DTLS v1.0 handshakes but allows DTLS v1.2 ones. This is why we can make videocalls only if a browser and Janus decided to use DTLS v1.2.
Can we configure Janus to use only DTLS v1.2? Or maybe there are ways to set DTLS v1.2 from JavaScript code in a browser? So far I haven't found straightforward options.

[Lorenzo Miniero]

You'll have to edit the code for that, I think. Anyway, I think the DTLS allows for both 1.0 and 1.2.

L.

[Lorenzo Miniero]

*the DTLS we send

[Ильгам Габдуллин]

We are facing the same problem :(

Is it possible to implement this configuration in janus so we could specify the version of DTLS?

Or may be you could show us where to change the code?

среда, 2 марта 2022 г. в 11:07:44 UTC+3, lmin...@gmail.com:

[Lorenzo Miniero]

Check the code here, we do different things depending on the crypto library:

https://github.com/meetecho/janus-gateway/blob/master/src/dtls.c#L398

When using OpenSSL, we just call the version-flexible DTLS_method() that offers both.

https://www.openssl.org/docs/manmaster/man3/DTLS_method.html

L.

[Eugene F.]

Thanks a lot!!

[Ильгам Габдуллин]

Did you try to use only DTLS v1.2 ?

I am interested if it solved the problem 

среда, 2 марта 2022 г. в 17:15:34 UTC+3, evgenyf...@gmail.com:

[Eugene F.]

Actually, the thing that helped was an UDP relay: it packs all the DTLS into STUN packets so firewalls don't cut em off