view files/pkg-message.in @ 13:c7cf16351c81

Apply patches for proper STUN message validation: 1. Validate the size of an attribute before returning it to the caller. Previously this was being done in stun_attr_get_next_str() to check that the previous attribute didn't exceed the size of the underlying buffer, however by that point any maliciously crafted attributes would have already had their chance to attack the caller. commit 9b8baa805582ae66d2a1ed68483609f90fcfb4d0 2. Validate the size of the buffer in stun_get_command_message_len_str(). Without this the caller could read off the end of the underlying buffer if it receives a maliciously crafted packet with an invalid header size. commit 14cb1c94e7be98869f45678ba195a26796a797c4 3. Changed type from int to size_t to avoid warning. warning: comparison between signed and unsigned integer expressions commit 4722697645cf033de8cf4f34e4214af750746365 See also: https://github.com/coturn/coturn/pull/472
author Franz Glasner <fzglas.hg@dom66.de>
date Sat, 28 Mar 2020 15:44:52 +0100
parents 1a06bf451a04
children
line wrap: on
line source

[
{ type: install
  message: <<EOM
1) You can start and stop the turnserver manually. But, if you want
to enable turnserver as an automatically started system service,
you have to:

	a) Create and edit %%PREFIX%%/etc/turnserver.conf file.
	Use %%PREFIX%%/etc/turnserver.conf.default as an example.

	b) For user accounts settings: set up SQLite or PostgreSQL or
	MySQL or Redis database for user accounts.
	Use %%DATADIR%%/schema.sql as an SQL database schema,
	or use %%DATADIR%%/schema*redis as Redis database description.

	If SQLite is used, then %%PREFIX%%/var/db/turndb is the default database
	location.

	d) add line turnserver_enable="YES" to /etc/rc.conf.

	e) If you are using a non-default PREFIX (other than /usr/local),
	then edit /usr/local/etc/rc.d/turnserver file, according to
	your system settings.

	f) Restart the system or run the command:
	$ %%PREFIX%%/etc/rc.d/turnserver start

2) If you do not want the turnserver to be a system service,
   then you can start/stop it "manually", using the "turnserver"
   executable with appropriate options (see the documentation).

3) To create database schema, use schema in file %%DATADIR%%/schema.sql.
The TURN Server supports (optionally) SQLite, MySQL, PostgreSQL, Redis.

4) For additional information, run:

   $ man turnserver
   $ man turnadmin
   $ man turnutils
EOM
}
]