./net/coturn, TURN and STUN server (for VoIP/webrtc)

[ Image CVSweb ] [ Image Homepage ] [ Image RSS ] [ Image Required by ] [ Image Add to tracker ]


Branch: CURRENT, Version: 4.9.0, Package name: coturn-4.9.0, Maintainer: gdt

coturn is a free open source implementation of TURN and STUN
Server. The TURN Server is a VoIP media traffic NAT traversal server
and gateway.



Package options: sqlite

Master sites:

Filesize: 533.476 KB

Version history: (Expand)


CVS history: (Expand)


   2026-02-27 17:03:10 by Greg Troxel | Files touched by this commit (1)
Log message:
net/coturn: Require openssl 3

Upstream did not note this rather significant change in NEWS :-(
Restores building on NetBSD 9.

No PKGREVISION, as I think this is a NOP on systems that used openssl
3 anyway, and it didn't build on those that defaulted to 1.1.1.
   2026-02-27 16:29:25 by Greg Troxel | Files touched by this commit (1)
Log message:
net/coturn: Restore wrongly-deleted comment
   2026-02-27 15:29:16 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
coturn: updated to 4.9.0

4.9.0

Changelist:
- Fix thread sanitizer warning
- OpenSSL: migrate to modern API for DH param
- Migrate AES-128 encryption from deprecated OpenSSL API to EVP
- Fix unbounded strcpy in stun_method_str (ns_turn_msg.c)
- Fix missing null termination in addr_to_string (ns_turn_ioaddr.c)
- Fix missing null termination after strncpy in DB drivers
- Fix unbounded strcpy in HTTP response (http_server.c)
- Remove ubuntu20, DEBUG builds from build matrix
- Fix buffer overflow in decryptPassword  in mysql
- Fix missing null termination after strncpy in MongoDB driver (dbd_mongo.c)
- Fix buffer overflow in decrypt_aes_128
- Fix Web Admin Password Check
   2026-02-08 01:52:55 by Greg Troxel | Files touched by this commit (3) | Package updated
Log message:
net/coturn: Update to 4.8.0

Release 4.8.0

Changelist:
- Allow faster packet validation on listener threads (#1768) (Pavel Punsky \ 
<[email protected]>)
- Fix order of arguments to calloc (#1790) (Pavel Punsky \ 
<[email protected]>)
- Fix crashes while setting socket buffer size (#1789) (Pavel Punsky \ 
<[email protected]>)
- Implement configurable buffer sizes (#1780) (Pavel Punsky \ 
<[email protected]>)
- Update Alpine to 3.23.2 version in Docker image (tyranron \ 
<[email protected]>)
- Update Debian "trixie" to 20251208 snapshot in Docker image \ 
(tyranron <[email protected]>)
- Use bool to enable prometheus (#1779) (Pavel Punsky \ 
<[email protected]>)
- Fix memory leak using libevent (#1751) (Pavel Punsky \ 
<[email protected]>)
- Addressed possible null pointer dereferences (#1729) (redraincatching \ 
<[email protected]>)
- Address possible null pointer dereferences (#1744) (redraincatching \ 
<[email protected]>)
- Improve const correctness in coturn (#1424) (Michael Jones \ 
<[email protected]>)
- Update attribute values according to RFC 8656 (#1748) (Pavel Punsky \ 
<[email protected]>)
- Fixing missing dependencies in Makefile (#1739) (Jun Lyu \ 
<[email protected]>)
- Add fuzzing to ci workflows (#1745) (redraincatching \ 
<[email protected]>)
- mainreplay: fix leak in decrypt_aes_128() (#1737) (Lidong Yan \ 
<[email protected]>)
- Upgrade Debian to "trixie" in Docker image (tyranron \ 
<[email protected]>)
- Fix typo in Docker CI spec (tyranron <[email protected]>)
- Verify CHANGELOG date on Docker CI (tyranron <[email protected]>)
- Fix logging before parsing logging cmd line args (#1723) (Gustavo Garcia \ 
<[email protected]>)
- Fix dead link in turnserver.spec Source0 field (#1722) (Copilot \ 
<[email protected]>)
- reduce calls to random (#1710) (redraincatching \ 
<[email protected]>)
- Fix null pointer dereference in set_ssl_ctx function (#1720) (Gustavo Garcia \ 
<[email protected]>)
- Add configurable CPU count option for containerized environments (#1717) \ 
(Copilot <[email protected]>)
- Fix memory and resource leaks in udp_create_server_socket( ) (#1714) (lhywk \ 
<[email protected]>)
- Add define to disable OAuth support (#1713) (Shane <[email protected]>)
- typo correction (#1715) (redraincatching \ 
<[email protected]>)
- refactored tri-state to bools (#1709) (redraincatching \ 
<[email protected]>)
- addressed null pointer deref warnings (#1712) (redraincatching \ 
<[email protected]>)
- removed unnecessary null check (#1706) (redraincatching \ 
<[email protected]>)
- Fix compiler warnings in source files (#1704) (Gustavo Garcia \ 
<[email protected]>)
- Revert random number generation (Pavel Punsky \ 
<[email protected]>)
- guarantee no oob write in strncat (#1702) (redraincatching \ 
<[email protected]>)
- Fix issues with Global Allocation Count for drain mode (#1699) (Scott Godin \ 
<[email protected]>)
- fix: comment out verbose mode by default (#1696) (Amin Farjadi \ 
<[email protected]>)

Contributors:
- Amin Farjadi <[email protected]>
- Copilot <[email protected]>
- dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- Gustavo Garcia <[email protected]>
- Jun Lyu <[email protected]>
- Kai Ren <[email protected]>
- lhywk <[email protected]>
- Lidong Yan <[email protected]>
- Michael Jones <[email protected]>
- Pavel Punsky <[email protected]>
- redraincatching <[email protected]>
- Scott Godin <[email protected]>
- Shane <[email protected]>
- tyranron <[email protected]>

Release 4.7.0

Changelist:
- [BREAKING] Remove support for openssl older than 1.1.1 (#1397) (Michael Jones \ 
<[email protected]>)
- [BREAKING] Cleanup deprecated options (#1599) (Pavel Punsky \ 
<[email protected]>)
- [BREAKING] Reverse SOFTWARE_ATTRIBUTE_OPT to avoid inverse logic (#1598) \ 
(Pavel Punsky <[email protected]>)
- [BREAKING] Deprecate response-origin-only-with-rfc5780 (#1690) (Pavel Punsky \ 
<[email protected]>)
- [BREAKING] Invert no-stun-backward-compatibility to be default on (#1689) \ 
(Pavel Punsky <[email protected]>)
- Make older TLS versions optional (#1693) (Pavel Punsky \ 
<[email protected]>)
- Add missing close socket when ioa_socket call fails (#1694) (tyranron \ 
<[email protected]>)
- Add spdx tags to all source files (#1510) (Michael Jones \ 
<[email protected]>)
- Address various minor clang-tidy warnings (#1513) (Michael Jones \ 
<[email protected]>)
- Update reference to old draft in README to RFC8016 (Gustavo Garcia \ 
<[email protected]>)
- Invert RFC5780 option to default off (#1688) (Pavel Punsky \ 
<[email protected]>)
- Add modules diagram to developer doc (#1685) (Gustavo Garcia \ 
<[email protected]>)
- Fix compilation warning with const - non const conversions (#1686) (Gustavo \ 
Garcia <[email protected]>)
- Makefile.in: Don't install sql schema into DOCSDIR (#1684) (Greg Troxel \ 
<[email protected]>)
- Fix infinite loop in ns_turn_server.c (#1460) (Asmir Mehic \ 
<[email protected]>)
- Fix the ability to compile coturn using C++ compiler (#1546) (Michael Jones \ 
<[email protected]>)
- Restore returning 200 OK on root prometheus path for health check (#1678) \ 
(Gustavo Garcia <[email protected]>)
- Improve MySQL connection error logging to include actual MySQL error message \ 
(#1679) (Gustavo Garcia <[email protected]>)
- redis: use dbname param when redis is unauthenticated (#1668) (maddy \ 
<[email protected]>)
- Show allocations increment/decrement logs behind verbose flag (#1677) (Gustavo \ 
Garcia <[email protected]>)
- [Fix] Fix Repeated Line in Example turnserver.conf (#1671) (Stefan Kieszkowski \ 
<[email protected]>)
- change for incorrect handling of TURN_NO_TLS environment variable (#1663) \ 
(Leonid Gorbachev <[email protected]>)
- Add Content-Type header to prometheus response (#1662) (Pavel Punsky \ 
<[email protected]>)
- Fix infinite loop while triggering SIGHUP and log file reset causing … \ 
(#1630) (nicolas-laduguie \ 
<[email protected]>)
- rename and dependency extraction (#1634) (redraincatching \ 
<[email protected]>)
- updated types to bool in _turn_params_ to reflect C11 (#1406) (redraincatching \ 
<[email protected]>)
- Windows '_WTA' bug (#1624) (guoyingbo <[email protected]>)
- Fix cmake issues detecting mongo and libsystemd on macOS (#1621) (Pavel Punsky \ 
<[email protected]>)
- Fix hiredis detection by cmake (#1620) (Pavel Punsky \ 
<[email protected]>)
- Drop TLS version support detection (#1617) (Pavel Punsky \ 
<[email protected]>)
- Cleanup ALPN_SUPPORTED define usage (#1616) (Pavel Punsky \ 
<[email protected]>)
- Fix warnings type conversion (#1615) (Pavel Punsky \ 
<[email protected]>)
- Add parameter for specifying prometheus path (#1602) (Alex Gustafsson \ 
<[email protected]>)
- Do not build with Ubuntu 18, use 24 (#1613) (Pavel Punsky \ 
<[email protected]>)

Contributors:
- Alex Gustafsson <[email protected]>
- Asmir Mehic <[email protected]>
- Greg Troxel <[email protected]>
- guoyingbo <[email protected]>
- Gustavo Garcia <[email protected]>
- Kai Ren <[email protected]>
- Leonid Gorbachev <[email protected]>
- maddy <[email protected]>
- Michael Jones <[email protected]>
- nicolas-laduguie <[email protected]>
- Pavel Punsky <[email protected]>
- redraincatching <[email protected]>
- Stefan Kieszkowski <[email protected]>
- tyranron <[email protected]>
   2026-01-07 09:49:50 by Thomas Klausner | Files touched by this commit (2525)
Log message:
*: recursive bump for icu 78.1
   2025-04-17 23:53:13 by Thomas Klausner | Files touched by this commit (2449)
Log message:
*: recursive bump for icu 77 and libxml2 2.14
   2025-01-23 18:47:20 by Greg Troxel | Files touched by this commit (1)
Log message:
net/coturn: Take MAINTAINERship

Leave previous MAINTAINER (email timed out) as co-maintainer.

Add upstream bug report about duplicate installed scheme files.
   2025-01-23 18:33:16 by Greg Troxel | Files touched by this commit (1)
Log message:
net/coturn: Set up partitioned data directory with right permissions

(This is step 3 of the 3-way merge from wip, and I think the end.)

Because the daemon runs as a non-root user, it needs to have the state
directory pre-created with the right uid/gid and (probably) also
permissions to prevent randoms from reading the state.

PKGREVISION set to high enough that this will seem newer than the wip packages.