closed (2nd stage), reason: general

38 views
Skip to first unread message

Jean-Francois Genest

unread,
Jul 15, 2022, 10:48:56 AM7/15/22
to TURN Server (Open-Source project)
What could be the possible reason for a closed (2nd stage), reason: general error? I'm obviously doing something wrong, but I just dont understand.

I have an aws ubuntu (20.04.4 LTS) instance setup with coturn. When I try to access it with https://icetest.info/ or https://webrtc.github.io/samples/src/content/peerconnection/trickle-ice/ everything seems to work just fine, but when I try to access it with my SignalR server, which is installed on another server, I always get the same error:

1832: IPv4. tcp or tls connected to: xxx.xxx.xxx.xx:56474
1832: session 000000000000000006: client socket to be closed in client handler: ss=0x7f15d4004640
1832: session 000000000000000006: usage: realm=<mycompagny.com>, username=<>, rp=1, rb=166, sp=0, sb=0
1832: session 000000000000000006: closed (2nd stage), user <> realm <mycompagny.com> origin <>, local xxx.xxx.xxx.xx:5349, remote xxx.xxx.xxx.xx:56474, reason: general
1832: session 000000000000000006: SSL shutdown received, socket to be closed (local xxx.xxx.xxx.xx:5349, remote xxx.xxx.xxx.xx:56474)

And here is the packets captured from the signalR server:

   79 7.304128695 xxx.xxx.xxx.xx (signalR) → xxx.xxx.xxx.xx (coturn)   TCP 74 56504 → 5349 [SYN] Seq=0 Win=29200 Len=0 MSS=1460 SACK_PERM=1 TSval=2906411661 TSecr=0 WS=128
   80 7.306183009   xxx.xxx.xxx.xx (coturn) → xxx.xxx.xxx.xx (signalR) TCP 74 5349 → 56504 [SYN, ACK] Seq=0 Ack=1 Win=62643 Len=0 MSS=1460 SACK_PERM=1 TSval=2620453910 TSecr=2906411661 WS=128
   81 7.306213940 xxx.xxx.xxx.xx (signalR) → xxx.xxx.xxx.xx (coturn)   TCP 66 56504 → 5349 [ACK] Seq=1 Ack=1 Win=29312 Len=0 TSval=2906411663 TSecr=2620453910
   82 7.306709293 xxx.xxx.xxx.xx (signalR) → xxx.xxx.xxx.xx (coturn)   TLSv1 290 Client Hello
   83 7.308598133   xxx.xxx.xxx.xx (coturn) → xxx.xxx.xxx.xx (signalR) TCP 66 5349 → 56504 [ACK] Seq=1 Ack=225 Win=62464 Len=0 TSval=2620453912 TSecr=2906411664
   84 7.308772787   xxx.xxx.xxx.xx (coturn) → xxx.xxx.xxx.xx (signalR) TLSv1.2 4162 Server Hello
   85 7.308782882 xxx.xxx.xxx.xx (signalR) → xxx.xxx.xxx.xx (coturn)   TCP 66 56504 → 5349 [ACK] Seq=225 Ack=4097 Win=37504 Len=0 TSval=2906411666 TSecr=2620453913
   86 7.309601235   xxx.xxx.xxx.xx (coturn) → xxx.xxx.xxx.xx (signalR) TLSv1.2 413 Certificate, Server Key Exchange, Server Hello Done
   87 7.309608900 xxx.xxx.xxx.xx (signalR) → xxx.xxx.xxx.xx (coturn)   TCP 66 56504 → 5349 [ACK] Seq=225 Ack=4444 Win=40320 Len=0 TSval=2906411667 TSecr=2620453914
   88 7.309958374 xxx.xxx.xxx.xx (signalR) → xxx.xxx.xxx.xx (coturn)   TLSv1.2 159 Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
   89 7.311794641   xxx.xxx.xxx.xx (coturn) → xxx.xxx.xxx.xx (signalR) TCP 66 5349 → 56504 [ACK] Seq=4444 Ack=318 Win=62464 Len=0 TSval=2620453916 TSecr=2906411667
   90 7.312147499   xxx.xxx.xxx.xx (coturn) → xxx.xxx.xxx.xx (signalR) TLSv1.2 292 New Session Ticket, Change Cipher Spec, Encrypted Handshake Message
   91 7.313321654 xxx.xxx.xxx.xx (signalR) → xxx.xxx.xxx.xx (coturn)   TLSv1.2 261 Application Data
   92 7.315081463   xxx.xxx.xxx.xx (coturn) → xxx.xxx.xxx.xx (signalR) TCP 66 5349 → 56504 [ACK] Seq=4670 Ack=513 Win=62336 Len=0 TSval=2620453919 TSecr=2906411670
   93 7.315274675   xxx.xxx.xxx.xx (coturn) → xxx.xxx.xxx.xx (signalR) TLSv1.2 97 Encrypted Alert
   94 7.315284085   xxx.xxx.xxx.xx (coturn) → xxx.xxx.xxx.xx (signalR) TCP 66 5349 → 56504 [RST, ACK] Seq=4701 Ack=513 Win=62336 Len=0 TSval=2620453919 TSecr=2906411670

The only message I obtain on the signalR server is:
     Error: An error occurred while sending the request.
     InnerException: The response ended prematurely.


Iam using a letsencrypt SSL certificate and all my ports are open on both servers.

Here is my turnserver.config:

listening-port=3478
tls-listening-port=5349

fingerprint
lt-cred-mech

user=l4signal:u0eu14S2I00fDdj8
server-name=mycompagny.com
realm=mycompagny.com

total-quota=100
stale-nonce=10

external-ip=publicIP/privateIP
listening-ip=privateIP
relay_ip=privateIP

cert=/etc/letsencrypt/live/looking4-turn.mobileappslabs.ca/fullchain.pem
pkey=/etc/letsencrypt/live/looking4-turn.mobileappslabs.ca/privkey.pem
dh-file=/etc/ssl/certs/dhparam.pem

proc-user=turnserver
proc-group=turnserver

verbose
log-file=/var/log/turn.log
new-log-timestamp-format "%FT%T%z"

no-sslv3
no-tlsv1
no-tlsv1_1

Any ideas what could be the problem? Thanks

Reply all
Reply to author
Forward
0 new messages