Skip to content

Conversation

@backportbot-nextcloud
Copy link

backport of #5086

Until now no scheme could be configured to connect to the TURN server
and "turn:" was used by default. The "turns:" scheme defines a
connection over TLS, which in some cases is needed by clients behind a
very restrictive firewall that only allows TLS connections. However,
encrypted TURN connections also require a certificate to be set in the
TURN server, which may not be always available. Moreover, encrypted TURN
connections also require a domain. Due to all this now it is possible to
set the TURN server scheme to "turn:", "turns:" or both, so the
administrator can set the best suiting one.

Already configured TURN servers that have no scheme configured yet
defaults to "turn:" to keep the same behaviour as before. New configured
TURN servers also default to "turn:", as "turns:" has some additional
requirements as explained above.

Signed-off-by: Daniel Calviño Sánchez <[email protected]>
"turns:" scheme must be used with a domain. Moreover, in the case of
Firefox using "turns:" with an IP address not only prevents connecting
with the TURN server even if "turn:" is also specified, it fully breaks
the gathering of all candidates.

Signed-off-by: Daniel Calviño Sánchez <[email protected]>
The STUN scheme can not be specified (browsers do not support "stuns:"),
but a literal text was added to clarify that the scheme does not need to
be included in the input field.

Signed-off-by: Daniel Calviño Sánchez <[email protected]>
Copy link
Member

@danxuliu danxuliu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested and works 👍

@danxuliu
Copy link
Member

danxuliu commented Feb 5, 2021

Test failures are unrelated.

@danxuliu danxuliu merged commit dad03b9 into stable21 Feb 5, 2021
@danxuliu danxuliu deleted the backport/5086/stable21 branch February 5, 2021 23:22
This was referenced Feb 12, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug feature: call 📹 Voice and video calls

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants