Name: coturn Version: 4.5.1.3 Release: 1%{?dist} Summary: TURN/STUN & ICE Server License: BSD URL: https://github.com/coturn/coturn/ Source0: https://github.com/coturn/coturn/archive/%{version}/%{name}-%{version}.tar.gz Source1: coturn.service Source2: coturn.tmpfilesd Source3: coturn.logrotate BuildRequires: gcc BuildRequires: hiredis-devel BuildRequires: libevent-devel >= 2.0.0 BuildRequires: make BuildRequires: mariadb-devel BuildRequires: openssl-devel BuildRequires: postgresql-devel BuildRequires: sqlite-devel BuildRequires: systemd Requires(pre): shadow-utils %if 0%{?fedora} || 0%{?rhel} >= 8 Recommends: perl-interpreter Recommends: perl(DBI) Recommends: perl(HTTP::Request::Common) Recommends: perl(strict) Recommends: perl(warnings) Recommends: telnet %else Requires: perl-interpreter Requires: perl(DBI) Requires: perl(HTTP::Request::Common) Requires: perl(strict) Requires: perl(warnings) Requires: telnet %endif Provides: turnserver = %{version} %{?systemd_requires} %description The Coturn TURN Server is a VoIP media traffic NAT traversal server and gateway. It can be used as a general-purpose network traffic TURN server/gateway, too. This implementation also includes some extra features. Supported RFCs: TURN specs: - RFC 5766 - base TURN specs - RFC 6062 - TCP relaying TURN extension - RFC 6156 - IPv6 extension for TURN - Experimental DTLS support as client protocol. STUN specs: - RFC 3489 - "classic" STUN - RFC 5389 - base "new" STUN specs - RFC 5769 - test vectors for STUN protocol testing - RFC 5780 - NAT behavior discovery support The implementation fully supports the following client-to-TURN-server protocols: - UDP (per RFC 5766) - TCP (per RFC 5766 and RFC 6062) - TLS (per RFC 5766 and RFC 6062); TLS1.0/TLS1.1/TLS1.2 - DTLS (experimental non-standard feature) Supported relay protocols: - UDP (per RFC 5766) - TCP (per RFC 6062) Supported user databases (for user repository, with passwords or keys, if authentication is required): - SQLite - MySQL - PostgreSQL - Redis Redis can also be used for status and statistics storage and notification. Supported TURN authentication mechanisms: - long-term - TURN REST API (a modification of the long-term mechanism, for time-limited secret-based authentication, for WebRTC applications) The load balancing can be implemented with the following tools (either one or a combination of them): - network load-balancer server - DNS-based load balancing - built-in ALTERNATE-SERVER mechanism. %package utils Summary: Coturn utils %description utils This package contains the TURN client utils. %package client-libs Summary: TURN client static library %description client-libs This package contains the TURN client static library. %package client-devel Summary: Coturn client development headers %description client-devel This package contains the TURN client development headers. %prep %setup -q # NOTE: Use Fedora Default Ciphers %if 0%{?fedora} || 0%{?rhel} >= 8 sed -i \ -e 's|#define DEFAULT_CIPHER_LIST "DEFAULT"|#define DEFAULT_CIPHER_LIST "PROFILE=SYSTEM"|g' \ -e 's|/* "ALL:eNULL:aNULL:NULL" */|/* Fedora Defaults */|g' \ src/apps/relay/mainrelay.h sed -i \ -e 's|*csuite = "ALL"; //"AES256-SHA" "DH"|*csuite = "PROFILE=SYSTEM"; // Fedora Defaults|g' \ src/apps/uclient/mainuclient.c %endif %build %configure \ --confdir=%{_sysconfdir}/%{name} \ --examplesdir=%{_docdir}/%{name} \ --schemadir=%{_datadir}/%{name} \ --manprefix=%{_datadir} \ --docdir=%{_docdir}/%{name} \ --turndbdir=%{_localstatedir}/lib/%{name} \ --disable-rpath %make_build %install %make_install mkdir -p %{buildroot}{%{_sysconfdir}/pki/coturn/{public,private},{%{_rundir},%{_localstatedir}/{lib,log}}/%{name}} install -Dpm 0644 %{SOURCE1} %{buildroot}%{_unitdir}/coturn.service install -Dpm 0644 %{SOURCE2} %{buildroot}%{_tmpfilesdir}/coturn.conf install -Dpm 0644 %{SOURCE3} %{buildroot}%{_sysconfdir}/logrotate.d/%{name} sed -i \ -e "s|^syslog$|#syslog|g" \ -e "s|^#*log-file=.*|log-file=/var/log/coturn/turnserver.log|g" \ -e "s|^#*simple-log|simple-log|g" \ -e "s|^#*cert=.*|#cert=/etc/pki/coturn/public/turn_server_cert.pem|g" \ -e "s|^#*pkey=.*|#pkey=/etc/pki/coturn/private/turn_server_pkey.pem|g" \ %{buildroot}%{_sysconfdir}/%{name}/turnserver.conf.default touch -c -r examples/etc/turnserver.conf %{buildroot}%{_sysconfdir}/%{name}/turnserver.conf.default mv %{buildroot}%{_sysconfdir}/%{name}/turnserver.conf.default %{buildroot}%{_sysconfdir}/%{name}/turnserver.conf # NOTE: Removing sqlite db, certs and keys rm %{buildroot}%{_localstatedir}/lib/%{name}/turndb rm %{buildroot}%{_docdir}/%{name}/etc/{cacert,turn_{client,server}_{cert,pkey}}.pem rm %{buildroot}%{_docdir}/%{name}/etc/coturn.service %check make test %pre getent group coturn >/dev/null || groupadd -r coturn getent passwd coturn >/dev/null || \ useradd -r -g coturn -d %{_datadir}/%{name} -s /sbin/nologin \ -c "Coturn TURN Server daemon" coturn exit 0 %post %systemd_post coturn.service %preun %systemd_preun coturn.service %postun %systemd_postun_with_restart coturn.service %files %license LICENSE %{_bindir}/turnserver %{_bindir}/turnadmin %dir %{_datadir}/%{name} %{_datadir}/%{name}/*.redis %{_datadir}/%{name}/*.sql %{_datadir}/%{name}/*.sh %dir %{_docdir}/%{name} %{_docdir}/%{name}/README.* %exclude %{_docdir}/%{name}/README.turnutils %exclude %{_docdir}/%{name}/INSTALL %exclude %{_docdir}/%{name}/LICENSE %exclude %{_docdir}/%{name}/postinstall.txt %dir %{_docdir}/%{name}/etc %doc %{_docdir}/%{name}/etc/* %dir %{_docdir}/%{name}/scripts %dir %{_docdir}/%{name}/scripts/* %{_docdir}/%{name}/scripts/*.sh %{_docdir}/%{name}/scripts/readme.txt %doc %{_docdir}/%{name}/scripts/*/* # NOTE: These schema files are installed twice. Excluding copies in docs. %exclude %doc %{_docdir}/%{name}/schema.mongo.sh %exclude %doc %{_docdir}/%{name}/schema.sql %exclude %doc %{_docdir}/%{name}/schema.stats.redis %exclude %doc %{_docdir}/%{name}/schema.userdb.redis %{_mandir}/man1/coturn.1.* %{_mandir}/man1/turnserver.1.* %{_mandir}/man1/turnadmin.1.* %dir %attr(0750,root,%{name}) %{_sysconfdir}/%{name} %config(noreplace) %attr(0640,root,%{name}) %{_sysconfdir}/%{name}/turnserver.conf %dir %{_sysconfdir}/pki/%{name} %dir %{_sysconfdir}/pki/%{name}/public %dir %attr(0750,root,%{name}) %{_sysconfdir}/pki/%{name}/private %{_unitdir}/coturn.service %{_tmpfilesdir}/coturn.conf %dir %attr(0750,%{name},%{name}) %{_rundir}/%{name} %dir %attr(0750,%{name},%{name}) %{_localstatedir}/lib/%{name} %dir %attr(0750,%{name},%{name}) %{_localstatedir}/log/%{name} %config(noreplace) %{_sysconfdir}/logrotate.d/%{name} %files utils %license LICENSE %{_bindir}/turnutils_peer %{_bindir}/turnutils_stunclient %{_bindir}/turnutils_uclient %{_bindir}/turnutils_oauth %{_bindir}/turnutils_natdiscovery %doc %{_docdir}/%{name}/README.turnutils %{_mandir}/man1/turnutils.1.* %{_mandir}/man1/turnutils_*.1.* %files client-libs %license LICENSE %{_libdir}/libturnclient.a %files client-devel %license LICENSE %dir %{_includedir}/turn %{_includedir}/turn/*.h %dir %{_includedir}/turn/client %{_includedir}/turn/client/* %changelog * Tue Jun 30 2020 Robert Scheck - 4.5.1.3-1 - Update to 4.5.1.3 * Sat May 16 2020 Robert Scheck - 4.5.1.2-1 - Update to 4.5.1.2 * Mon Mar 23 2020 Robert Scheck - 4.5.1.1-3 - Added upstream patch for CVE-2020-6061 (#1816159) - Backported upstream patch for CVE-2020-6062 (#1816163) * Tue Jan 28 2020 Fedora Release Engineering - 4.5.1.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Sat Jul 27 2019 Robert Scheck - 4.5.1.1-1 - Update to 4.5.1.1 * Fri Jul 26 2019 Robert Scheck - 4.5.1.0-3 - Added patch to append only to log files rather to override always - Relocate SQLite database to FHS conform /var/lib/coturn/turndb path - Include default log file directory with logrotate configuration - Provide /run/coturn and correct PID file handling (#1705146) - Ensure private keys for SSL certs can be only read by coturn user - Ensure /etc/coturn/turnserver.conf can be only read by coturn user - Correct subpackage licensing as per Fedora Packaging Guidelines * Wed Jul 24 2019 Fedora Release Engineering - 4.5.1.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Mon Feb 18 2019 Christian Glombek - 4.5.1.0-1 - Initial Fedora Package - Update to 4.5.1.0 - Introduce consistent naming, rename service to coturn - Add configure, make and systemd macros - Remove dependencies on mariadb, mysql, postgresql and sqlite - Forked from https://github.com/coturn/coturn/blob/af674368d120361603342ff4ff30b44f147a38ff/rpm/turnserver.spec