Dominique Leuenberger
a7fb71b993
Accepting request 1083949 from network:telephony
...
OBS-URL: https://build.opensuse.org/request/show/1083949
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/coturn?expand=0&rev=14
2023-05-02 14:19:11 +00:00
Johannes Weberhofer
3e5baa7af9
Accepting request 1083916 from home:Kieltux:branches:network:telephony
...
- Update to 4.6.2
* Make sure microhttpd starts using epoll if supported
* Add sessioncount to prometheus metrics
* Add STUN request/response/error prometheus counters
* Cleanup logs on turnserver start
* Fix duplicate stdout log output
* Log threadId to logs to aid in multi-threaded debugging
* Optional build info compiled into turnserver binary
* Fix arguments expansion in docker-entrypoint.sh
* Santise database connection strings before printing to log
* Support Windows MSVC
* Add configuration option for TLS 1.3 ciphersuites
* Improve openssl3 and FIPS support
* Use single SSL_CTX for TLS and DTLS support
* Update openssl API use to non-deprecated version
* Set string bytes to null to prevent random origin
* Fix memory corruption on socket close
* Fix packet backlog fifo that processed packets in reverse
order in some scenarios
* Fix off-by-one when terminating gcm_nonce
* Fixes to Redis memleaks and socketleaks
* Fix malformed response to mobility refresh request
* Fuzzing support
* Ignore raw UDP if no_udp is enabled
* Better detect availability of SCTP protocol
- Drop coturn-no-FIPS-140-mode.patch, fixed upstream, see
https://github.com/coturn/coturn/issues/1170
OBS-URL: https://build.opensuse.org/request/show/1083916
OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=28
2023-05-02 08:00:56 +00:00
Dominique Leuenberger
f4cee882e1
Accepting request 1069852 from network:telephony
...
OBS-URL: https://build.opensuse.org/request/show/1069852
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/coturn?expand=0&rev=13
2023-03-07 15:50:31 +00:00
Johannes Weberhofer
21cb408c61
Accepting request 1069711 from home:Kieltux:branches:network:telephony
...
- Add coturn-no-FIPS-140-mode.patch, fixes build against OpenSSL 3.0
OBS-URL: https://build.opensuse.org/request/show/1069711
OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=26
2023-03-07 08:12:18 +00:00
Dominique Leuenberger
21bff67a29
Accepting request 1040252 from network:telephony
...
OBS-URL: https://build.opensuse.org/request/show/1040252
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/coturn?expand=0&rev=12
2022-12-05 17:02:06 +00:00
Johannes Weberhofer
b8d51b0b8b
Accepting request 1040008 from home:stroeder:network
...
update to 4.6.1
seems to work for me on Tumbleweed x64-64
OBS-URL: https://build.opensuse.org/request/show/1040008
OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=24
2022-12-05 12:21:03 +00:00
Dominique Leuenberger
787d48788a
Accepting request 1000026 from network:telephony
...
OBS-URL: https://build.opensuse.org/request/show/1000026
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/coturn?expand=0&rev=11
2022-08-30 12:49:39 +00:00
Johannes Weberhofer
2155609804
Accepting request 998247 from home:crameleon:branches:network:telephony
...
Adjust hardening, README and license year
OBS-URL: https://build.opensuse.org/request/show/998247
OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=22
2022-08-29 13:07:53 +00:00
Dominique Leuenberger
2784664041
Accepting request 926044 from network:telephony
...
OBS-URL: https://build.opensuse.org/request/show/926044
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/coturn?expand=0&rev=10
2021-10-19 21:03:40 +00:00
Michael Ströder
cb404f5020
Accepting request 926042 from home:stroeder:network
...
- Dropped harden_coturn.service.patch because systemd units are
created from own source anyway and are proven to work
OBS-URL: https://build.opensuse.org/request/show/926042
OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=21
2021-10-18 15:04:18 +00:00
Dominique Leuenberger
4405ce6f6d
Accepting request 925475 from network:telephony
...
OBS-URL: https://build.opensuse.org/request/show/925475
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/coturn?expand=0&rev=9
2021-10-15 21:04:30 +00:00
Johannes Weberhofer
df6f7fba40
Accepting request 925450 from home:jsegitz:branches:systemdhardening_protectclock
...
- Drop ProtectClock hardening, can cause issues if other device acceess is needed
OBS-URL: https://build.opensuse.org/request/show/925450
OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=20
2021-10-15 14:04:20 +00:00
Dominique Leuenberger
749bc10c47
Accepting request 915145 from network:telephony
...
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort (forwarded request 915053 from jsegitz)
OBS-URL: https://build.opensuse.org/request/show/915145
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/coturn?expand=0&rev=8
2021-08-31 17:55:30 +00:00
Michael Ströder
23890538db
Accepting request 915053 from home:jsegitz:branches:systemdhardening:network:telephony
...
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
OBS-URL: https://build.opensuse.org/request/show/915053
OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=19
2021-08-30 22:28:45 +00:00
Dominique Leuenberger
848a3bf905
Accepting request 862258 from network:telephony
...
OBS-URL: https://build.opensuse.org/request/show/862258
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/coturn?expand=0&rev=7
2021-01-11 16:15:48 +00:00
Michael Ströder
36f26e008a
Accepting request 862256 from home:weberho:branches:network:telephony
...
- Version 4.5.2
* Fix for CVE-2020-26262 (boo#1180764)
- Fix ipv6 ::1 loopback check
- Not allow allocate peer address 0.0.0.0/8 and ::/128
- For more details see the github security advisory:
https://github.com/coturn/coturn/security/advisories/GHSA-6g6j-r9rf-cm7p
* fix null pointer dereference in case of out of memory.
* Fix: Null pointer dereference on tcp_client_input_handler_rfc6062data function
* Fix: use-after-free vulnerability on write_to_peerchannel function
* Fix: use-after-free vulnerability on write_client_connection function
* add prometheus metrics
* Delete trailing whitespace in example configuration files
* Add architecture ppc64le to travis build
* Fix misleading option in doc (prometheus)
* Allow RFC6062 TCP relay data to look like TLS
* Add support for proxy protocol V1
* Print full date and time in logs
* Add new options: "new-log-timestamp" and "new-log-timestamp-format"
* Do not use FIPS and remove hardcode OPENSSL_VERSION_NUMBER with LibreSSL
* Add ACME redirect url
* support of --acme-redirect <URL>
* fix acme security, redundancy, consistency
* Add new --log-binding option to enable binding request logging
* Fix stale-nonce documentation
* Version number is changed to semver 2.0
* pkg-config, and various cleanups in configure file
* Add systemd notification for better systemd integration
* Fix c++ support
* Remove session id/allocation labels
* Remove per session metrics. We should later add more counters.
OBS-URL: https://build.opensuse.org/request/show/862256
OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=17
2021-01-11 10:58:27 +00:00
Dominique Leuenberger
6bb24fcf2e
Accepting request 859264 from network:telephony
...
OBS-URL: https://build.opensuse.org/request/show/859264
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/coturn?expand=0&rev=6
2020-12-30 16:12:44 +00:00
Johannes Weberhofer
a23b99d3d2
Accepting request 858909 from home:stroeder:branches:network:telephony
...
- AppArmor profile has ABI 3.0 and some minor changes
- Modified systemd unit:
* do not use daemon mode
* Type=simple
* added security settings
- added multi-instance systemd unit
OBS-URL: https://build.opensuse.org/request/show/858909
OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=15
2020-12-29 16:21:36 +00:00
Dominique Leuenberger
46c1e2ac87
Accepting request 830616 from network:telephony
...
OBS-URL: https://build.opensuse.org/request/show/830616
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/coturn?expand=0&rev=5
2020-08-31 14:52:30 +00:00
Lars Vogdt
828e7289d2
Accepting request 827858 from home:gmbr3:libexecdir
...
- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)
OBS-URL: https://build.opensuse.org/request/show/827858
OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=13
2020-08-31 00:11:00 +00:00
Dominique Leuenberger
db0ec01376
Accepting request 817876 from network:telephony
...
OBS-URL: https://build.opensuse.org/request/show/817876
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/coturn?expand=0&rev=4
2020-06-30 19:58:31 +00:00
Johannes Weberhofer
8d0cf978e9
Accepting request 817875 from home:weberho:branches:network:telephony
...
added reference to boo#1173510
OBS-URL: https://build.opensuse.org/request/show/817875
OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=11
2020-06-30 13:14:54 +00:00
Johannes Weberhofer
ab957dfa08
Accepting request 817809 from home:weberho:branches:network:telephony
...
- Version 4.5.1.3:
* Remove reference to SSLv3: gh#coturn/coturn#566
* Ignore MD5 for BoringSSL: gh#coturn/coturn#579
* STUN response buffer not initialized properly; he issue found and
reported gh#coturn/coturn#583 by Felix Dörre all credits belongs to
him. CVE-2020-4067
- Let coturn allow binding to ports below 1024 per default
OBS-URL: https://build.opensuse.org/request/show/817809
OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=10
2020-06-30 08:03:55 +00:00
Dominique Leuenberger
4fede8b0d9
Accepting request 800070 from network:telephony
...
OBS-URL: https://build.opensuse.org/request/show/800070
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/coturn?expand=0&rev=3
2020-05-04 16:43:36 +00:00
Johannes Weberhofer
a08f36789d
Accepting request 800069 from home:weberho:branches:network:telephony
...
Fixed typo in changelog
OBS-URL: https://build.opensuse.org/request/show/800069
OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=8
2020-05-04 13:50:12 +00:00
Johannes Weberhofer
7ec561df97
Accepting request 800058 from home:weberho:branches:network:telephony
...
- Version 4.5.1.2:
- Extended Readme.SUSE with description on how to bind to ports below 1024
- Fixes and enhancements in service-file
- /etc/sysconfig/coturn defaults now to not show software's version to the public
OBS-URL: https://build.opensuse.org/request/show/800058
OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=7
2020-05-04 13:08:12 +00:00
Dominique Leuenberger
e2ca95f41c
Accepting request 795874 from network:telephony
...
OBS-URL: https://build.opensuse.org/request/show/795874
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/coturn?expand=0&rev=2
2020-04-21 11:12:44 +00:00
Johannes Weberhofer
c4ca41a9dd
Accepting request 795858 from home:lrupp:branches:network:telephony
...
allow /etc/pki/coturn/** in apparmor to allow loading of certificates from the standard location.
- added apparmor profile (coturn-apparmor-usr.bin.turnserver)
- fix executable permissions in devel package by using defattr
OBS-URL: https://build.opensuse.org/request/show/795858
OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=5
2020-04-20 15:32:53 +00:00
Dominique Leuenberger
250745ef83
Accepting request 793417 from network:telephony
...
Polished spec
OBS-URL: https://build.opensuse.org/request/show/793417
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/coturn?expand=0&rev=1
2020-04-13 10:52:54 +00:00
Johannes Weberhofer
de4232263d
Accepting request 793234 from home:jengelh:branches:network:telephony
...
- Shorten description by stripping the long list of all RFCs.
- Drop %defattr; use %autosetup.
OBS-URL: https://build.opensuse.org/request/show/793234
OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=3
2020-04-12 15:17:22 +00:00
Johannes Weberhofer
ab5075b12c
Accepting request 793282 from home:weberho:branches:network:telephony
...
- Use pkgconfig(systemd) for packaging
OBS-URL: https://build.opensuse.org/request/show/793282
OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=2
2020-04-12 05:55:26 +00:00
f0c86398b7
Accepting request 793075 from home:weberho:tools
...
Coturn is a STUN/TURN server which works nicely e.g. nextcloud. I'd like to offer that project in factory and Leap.
Please review. If you like the package I'll request the coturn user/group for factory.
OBS-URL: https://build.opensuse.org/request/show/793075
OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=1
2020-04-11 13:08:03 +00:00