[Galene] Re: coturn config

["Michael Ströder" <michael@stroeder.com>]

On 1/1/21 11:55 PM, Juliusz Chroboczek wrote:
>> ...And it turns out that I completely misunderstood how this is supposed
>> to work: there's not supposed to be any communication between the WebRTC
>> server and Coturn. Rather, there's a configured shared secret that the
>> WebRTC server can use to generate as many ephemeral credentials as it
>> wants.
> 
> I just pushed an implementation.
> [..]
> In other words, I've kept the standard configuration syntax, just added
> a non-standard value for "credentialType".
> 
> Your turnserver.conf should look like this:
> 
>     use-auth-secret
>     static-auth-secret=secret
>     realm=trun.example.org
> 
> I've done some testing, but I didn't test that it will properly rotate the
> key — please let me know if it survives 24h.

I'm already using this (with git revision d2f7010) since 2+ days. No
issues so far.

How to ensure that it survived key rotation?
Does key rotation affect existing TURN sessions?

Maybe some logging would be good.

Ciao, Michael.