secure_relay_with_db_mysql_ssl.sh 2.1 KB

12345678910111213141516171819202122232425262728293031323334353637
  1. #!/bin/sh
  2. #
  3. # This is an example how to start a TURN Server in
  4. # secure mode with SSL connection to a MySQL database for users
  5. # with the long-term credentials mechanism.
  6. #
  7. # We start here a TURN Server listening on IPv4 address
  8. # 127.0.0.1 and on IPv6 address ::1. We use 127.0.0.1 as
  9. # IPv4 relay address, and we use ::1 as IPv6 relay address.
  10. #
  11. # Other options:
  12. #
  13. # 1) set bandwidth limit on client session 3000000 bytes per second (--max-bps).
  14. # 2) use fingerprints (-f)
  15. # 3) use 3 relay threads (-m 3)
  16. # 4) use min UDP relay port 32355 and max UDP relay port 65535
  17. # 5) "-r north.gov" means "use authentication realm north.gov"
  18. # 6) --mysql-userdb="host=localhost dbname=coturn user=turn password=turn cipher=DHE-RSA-AES256-SHA connect_timeout=30 read_timeout=30"
  19. # means that local MySQL database "coturn" will be used, with database user "turn" and
  20. # database user password "turn", and with SSL connection with cipher DHE-RSA-AES256-SHA,
  21. # and connection timeout 30 seconds.
  22. # 7) "--cert=example_turn_server_cert.pem" sets the OpenSSL certificate file name.
  23. # 8) "--pkey=example_turn_server_pkey.pem" sets the OpenSSL private key name.
  24. # 9) "--log-file=stdout" means that all log output will go to the stdout.
  25. # 10) --cipher-list=ALL means that we support all OpenSSL ciphers
  26. # 11) --oauth - support oAuth security dialog
  27. # 12) --cli-password=secret means that cli password set to "secret"
  28. # Other parameters (config file name, etc) are default.
  29. if [ -d examples ] ; then
  30. cd examples
  31. fi
  32. export LD_LIBRARY_PATH=${LD_LIBRARY_PATH}:/usr/local/lib/:/usr/local/mysql/lib/
  33. export DYLD_LIBRARY_PATH=${DYLD_LIBRARY_PATH}:/usr/local/lib/:/usr/local/mysql/lib/
  34. PATH="./bin/:../bin/:../../bin/:${PATH}" turnserver --server-name="blackdow.carleon.gov" -v --syslog -a -L 127.0.0.1 -L ::1 -E 127.0.0.1 -E ::1 --allow-loopback-peers --max-bps=3000000 -f -m 3 --min-port=32355 --max-port=65535 -r north.gov --mysql-userdb="host=localhost dbname=coturn user=turn password=turn cipher=DHE-RSA-AES256-SHA connect_timeout=30 read_timeout=30" --cert=turn_server_cert.pem --pkey=turn_server_pkey.pem --log-file=stdout --cipher-list=ALL --oauth --cli-password=secret $@