How to force DTLS

225 views
Skip to first unread message

Nadeen Nilanka

unread,
Aug 5, 2019, 9:40:51 AM8/5/19
to TURN Server (Open-Source project)
We want to force DTLS over turn server.
And in the app(angular) we turns:domain:5349?transport=udp //is this way possible to force DTLS?

But i cannot see the DTLS handshake in wireshark instead it uses TLS and connection is very bad. When app not using TURN server i can see DTLS being used. So question is when connection go through TURN server can we force every-time to use DTLS?

our configs.
no-udp
no-tcp
tls-listening-port=5349
listening-ip=public-ip-of-turn-server
relay-ip=public-ip-of-turn-server
min-port=32355
max-port=65535
verbose
fingerprint
lt-cred-mech
user=user:password
realm=our-domain-name
cert=/etc/ssl/key.pem
pkey=/etc/ssl/key.pem
cipher-list="ALL"
log-file=/var/tmp/turn.log
simple-log
no-tlsv1
no-tlsv1_1

Philipp Hancke

unread,
Aug 5, 2019, 9:57:30 AM8/5/19
to TURN Server (Open-Source project)
STUN/TURN over DTLS isn't implemented in WebRTC, see https://bugs.chromium.org/p/webrtc/issues/detail?id=3644 for the past discussion.
It would be somewhat surprising if the ?transport=udp would be ignored though and went for TURN/TLS.

--
You received this message because you are subscribed to the Google Groups "TURN Server (Open-Source project)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to turn-server-project-rfc57...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/turn-server-project-rfc5766-turn-server/72030092-b2bc-4e9e-8734-565215b9283f%40googlegroups.com.

Ntwobike

unread,
Aug 5, 2019, 10:14:03 AM8/5/19
to Philipp Hancke, TURN Server (Open-Source project)
Thanks for the Reference Philipp. Thats quite an unfortunate spent 2 days thought its a configuration issue in coturn. 



--
NN     NN     NNNNNN
NNN   NN              NN
NN   NNN      NNN
NN     NN      NNNNNN
Reply all
Reply to author
Forward
0 new messages