TURN windows version login account information? about eturnal HOT 9 CLOSED

Dear All,

Yes, I understand.
It's working.
Thank you for your support.

from eturnal.

For reference, the eturnal log shows the following

2022-09-05 11:35:31.313000+09:00 [info] Non-numeric expiration field: inventis [UDP, session bsrd4pd09ti3, user inventis, client 13.124.71.4:49353]
2022-09-05 11:35:31.313000+09:00 [notice] Failed long-term STUN/TURN authentication [UDP, session bsrd4pd09ti3, user inventis, client 13.124.71.4:49353]

from eturnal.

I don't know where to put the turn server login account information.(username,password)

eturnal currently doesn't support static credentials. What it does instead is deriving temporary credentials from a secret as described in this IETF spec and at the top of the eturnal docs. That's what most WebRTC applications do these days; i.e., they typically use a few lines of Node.js/whatever code to generate credentials on the web server sie as described in those docs, and hand them out to the client.

If you'd prefer static credentials, you could configure a random secret: … and then use PowerShell code such as the following to derive a username/password from that secret:

$username = "1735686000"         # For credentials valid until 2025-01-01.
$secret = "1pIFIj70BPsgBI92j5ux" # As specified in your eturnal.yml.

$sha = [System.Security.Cryptography.KeyedHashAlgorithm]::Create("HMACSHA1")
$sha.Key = [System.Text.Encoding]::UTF8.Getbytes($secret)
$password = [Convert]::Tobase64String($sha.ComputeHash([System.Text.Encoding]::UTF8.Getbytes(${username})))

echo $username
echo $password

That said, we do plan to allow for specifying hard-coded credentials in the configuration file for testing purposes or simple cases where that's really all you need. So far, nobody actually asked for this, so we kept delaying it. I'll have a look.

from eturnal.

Dear Mr. weiss
Thanks for your reply.

I have a question.
If it is a dynamic credential, what values should I put in the username and password on the turn test site?

https://webrtc.github.io/samples/src/content/peerconnection/trickle-ice/
https://icetest.info/

from eturnal.

If it is a dynamic credential, what values should I put in the username and password on the turn test site?

Once you created a username/password using e.g. the PowerShell code shown above you can use it for that test site.

from eturnal.

So where should I input the PowerShell code you told me?
I'm not sure.
Sorry. Can you tell me in detail?

from eturnal.

So where should I input the PowerShell code you told me?

You can put it into you PowerShell in Windows or use an online tool to generate the username/ password to input in the ICE Test, e.g. here.

Username:
1735686000
Password:
6rj3WhfZzhmc8DjnI2aHs8cyd5o=

The Output provides credentials based on the

$secret = "inventis" # As specified in your eturnal.yml.

The secret part is defined in the eturnal.yml configuration file.

eturnal:

  ## Shared secret for deriving temporary TURN credentials (default: $RANDOM):
  secret: "inventis"

from eturnal.

Dear All,

Yes, I understand. It's working. Thank you for your support.

hi, YoonJiBum:

Username: 1735686000 Password: 6rj3WhfZzhmc8DjnI2aHs8cyd5o=
based on the same secret "inventis" as yours
test page trickle-ice still report err:

`

The server stun:xxx.com:3478 returned an error with code=701:STUN host lookup received error.

The server turn:xxx.com:3478?transport=udp returned an error with code=701:TURN host lookup received error.

The server turn:xxx.com:3478?transport=udp returned an error with code=401:Unauthorized

in eturnal.log:
2022-12-01 08:59:04.434000+08:00 [notice] Failed long-term STUN/TURN authentication [UDP, session u8uqy22l5acf, user 1735686000, client 22.7.97.224:11096]

any ideas? thanks

from eturnal.

Dear All,
Yes, I understand. It's working. Thank you for your support.

hi, YoonJiBum:

Username: 1735686000 Password: 6rj3WhfZzhmc8DjnI2aHs8cyd5o= based on the same secret "inventis" as yours test page trickle-ice still report err:

`

Time Type Foundation Protocol Address Port Priority URL (if present) relayProtocol (if present)
0.003 host 3075462482 udp 481dac3a-0f51-4c70-bba1-c2be0e1ef816.local 51131 126 | 30 | 255    
0.038 srflx 842163049 udp 22.7.97.224 12696 100 | 30 | 255    
0.123 Authentication failed?
`
The server stun:xxx.com:3478 returned an error with code=701:STUN host lookup received error.

The server turn:xxx.com:3478?transport=udp returned an error with code=701:TURN host lookup received error.

The server turn:xxx.com:3478?transport=udp returned an error with code=401:Unauthorized

in eturnal.log: 2022-12-01 08:59:04.434000+08:00 [notice] Failed long-term STUN/TURN authentication [UDP, session u8uqy22l5acf, user 1735686000, client 22.7.97.224:11096]

any ideas? thanks

solved, my fault: forgot to restart eturnal... 😭

from eturnal.