DTLS support issue

61 views
Skip to first unread message

Julio Carlos Barrera Juez

unread,
Feb 19, 2015, 3:56:29 AM2/19/15
to turn-server-project...@googlegroups.com
I have compiled coturn in a SUSE Enterprise Linux 11 SP1 x86_64 machine with OpenSSL 0.9.8h 28 May 2008 (I know, it is an old version). Theoretically this version of OpenSSL has DTLS support because it was added in 0.9.8 version (OpenSSL changelog). But when I launch coturn server I see this log lines:

...
0: TLS supported
0: DTLS is not supported
0: AEAD is not supported
...

And my server is not listening in UDP port 5349 as this netstat output exposes:

tcp        0      0 10.0.0.40:3478          0.0.0.0:*               LISTEN      3753/turnserver     
tcp        0      0 10.0.0.40:5349          0.0.0.0:*               LISTEN      3753/turnserver     
tcp        0      0 127.0.0.1:5766          0.0.0.0:*               LISTEN      3753/turnserver     
udp        0      0 10.0.0.40:3478          0.0.0.0:*                           3753/turnserver

In more modern distros with higher OpenSSL versions I achieved using DTLS over UDP port 5349 and my WebRTC client successfully connect.

How can I get DTLS support in my old SUSE Enterprise?

Oleg Moskalenko

unread,
Feb 19, 2015, 10:24:27 AM2/19/15
to Julio Carlos Barrera Juez, turn-server-project...@googlegroups.com
The DTLS support prior to OpenSSL 1.0 was not complete. The
"configure" script could not compile the test program on your system
so it decided to turn off the DTLS.

Read the INSTALL file about different OpenSSL versions on the same
system. You can install a separate OpeNSSL version on your old system,
compile and run the TURN server with the new OpenSSL.

Regards,
Oleg
> --
> You received this message because you are subscribed to the Google Groups
> "TURN Server (Open-Source project)" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to
> turn-server-project-rfc57...@googlegroups.com.
> To post to this group, send email to
> turn-server-project...@googlegroups.com.
> Visit this group at
> http://groups.google.com/group/turn-server-project-rfc5766-turn-server.
> For more options, visit https://groups.google.com/d/optout.

Julio Carlos Barrera Juez

unread,
Feb 19, 2015, 10:26:09 AM2/19/15
to Oleg Moskalenko, turn-server-project...@googlegroups.com
Great. Thank you for the answer ;)

Julio C. Barrera Juez  View my profile on LinkedIn
Office phone: (+34) 93 357 99 27
Office mobile phone: (+34) 625 66 77 26
Distributed Applications and Networks Area (DANA)
i2cat Foundation
Gran Capità 2-4, Nexus I building, 2nd floor, room 107, 08034 Barcelona
  
Reply all
Reply to author
Forward
0 new messages