[Galene] Re: coturn config

["Toke Høiland-Jørgensen" <toke@toke.dk>]

Michael Ströder <michael@stroeder.com> writes:

> On 1/1/21 11:55 PM, Juliusz Chroboczek wrote:
>>> ...And it turns out that I completely misunderstood how this is supposed
>>> to work: there's not supposed to be any communication between the WebRTC
>>> server and Coturn. Rather, there's a configured shared secret that the
>>> WebRTC server can use to generate as many ephemeral credentials as it
>>> wants.
>> 
>> I just pushed an implementation.
>> [..]
>> In other words, I've kept the standard configuration syntax, just added
>> a non-standard value for "credentialType".
>> 
>> Your turnserver.conf should look like this:
>> 
>>     use-auth-secret
>>     static-auth-secret=secret
>>     realm=trun.example.org
>> 
>> I've done some testing, but I didn't test that it will properly rotate the
>> key — please let me know if it survives 24h.
>
> I'm already using this (with git revision d2f7010) since 2+ days. No
> issues so far.
>
> How to ensure that it survived key rotation?
> Does key rotation affect existing TURN sessions?
>
> Maybe some logging would be good.

+1 on the logging - in particular at startup. I messed up the JSON
syntax and didn't notice until the video started failing for some
people...

-Toke