Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Let’s Encrypt certificates for TURNS are rejected #2712

Open
532910 opened this issue Sep 12, 2019 · 3 comments
Open

Let’s Encrypt certificates for TURNS are rejected #2712

532910 opened this issue Sep 12, 2019 · 3 comments

Comments

@532910
Copy link

532910 commented Sep 12, 2019

TURNS doesn't work.

With
turn_uris: [ "turns:domain.tld:5349?transport=udp", "turns:domain.tld:5349?transport=tcp" ]
or
turn_uris: [ "turns:domain.tld:3478?transport=udp", "turns:domain.tld:3478?transport=tcp" ]

turnserver reports an error: session closed ... reason: TLS/TCP socket buffer operation error (callback)

riot-web works fine, testssl.sh domain.tld:5349 and testssl.sh domain.tld:3478 also shows no errors.
@532910 532910 mentioned this issue Sep 12, 2019
Closed
@verymilan
Copy link

i would like to +1 this.
it is related to element-hq/element-android#1533 and element-hq/riot-android#3299

@Dabada
Copy link

Dabada commented Jun 28, 2021

May be this helps : I'v used a fullchain certificate instead of a single one, no more socket error ! I'm using the same fullchain certificate on my reverse proxy. Certificate are generate by Let's Encrypt.

@pushytoxin pushytoxin mentioned this issue Jul 5, 2021
Closed
@AndrewFerr AndrewFerr mentioned this issue Dec 14, 2021
Merged
4 tasks
@AndrewFerr AndrewFerr mentioned this issue Jan 5, 2022
Merged
4 tasks
@richvdh richvdh changed the title TURNS (TURN with TLS/DTLS) socket buffer operation error Let’s Encrypt certificates for TURNS are rejected Jan 5, 2022
DMRobertson pushed a commit to matrix-org/synapse that referenced this issue Jan 17, 2022
@AndrewFerr
Warn against using Let's Encrypt certs for encrypted TURN (#11686)
cefd4b8 
* Warn against using Let's Encrypt certs for encrypted TURN

This helps to avoid client-side issues:
* element-hq/element-android#1533
* element-hq/element-ios#2712

Signed-off-by: Andrew Ferrazzutti <[email protected]>
@ketan-vijayvargiya
Copy link

I think this issue is now resolved. See more details here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@ketan-vijayvargiya @Dabada @verymilan @532910