From 584a6cdf9bf8a892c9b1f7585e41764948ef247c Mon Sep 17 00:00:00 2001 From: skystar-p Date: Mon, 3 Jul 2017 12:06:18 +0900 Subject: [PATCH] added config warning about using use-auth-secret --- src/apps/relay/mainrelay.c | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/src/apps/relay/mainrelay.c b/src/apps/relay/mainrelay.c index 7aba10c2..f991ddf2 100644 --- a/src/apps/relay/mainrelay.c +++ b/src/apps/relay/mainrelay.c @@ -39,6 +39,8 @@ static int use_lt_credentials = 0; static int anon_credentials = 0; +static int use_lt_credentials_only = 0; +static int timestamp_credentials = 0; ////// ALPN ////////// @@ -1156,6 +1158,7 @@ static void set_option(int c, char *value) if (get_bool_value(value)) { turn_params.ct = TURN_CREDENTIALS_LONG_TERM; use_lt_credentials=1; + use_lt_credentials_only=1; } else { turn_params.ct = TURN_CREDENTIALS_UNDEFINED; use_lt_credentials=0; @@ -1217,12 +1220,14 @@ static void set_option(int c, char *value) #endif case AUTH_SECRET_OPT: turn_params.use_auth_secret_with_timestamp = 1; + timestamp_credentials = 1; turn_params.ct = TURN_CREDENTIALS_LONG_TERM; use_lt_credentials = 1; break; case STATIC_AUTH_SECRET_VAL_OPT: add_to_secrets_list(&turn_params.default_users_db.ram_db.static_auth_secrets,value); turn_params.use_auth_secret_with_timestamp = 1; + timestamp_credentials = 1; turn_params.ct = TURN_CREDENTIALS_LONG_TERM; use_lt_credentials = 1; break; @@ -1983,6 +1988,10 @@ int main(int argc, char **argv) exit(-1); } + if(use_lt_credentials_only && timestamp_credentials) { + TURN_LOG_FUNC(TURN_LOG_LEVEL_ERROR, "\nCONFIGURATION ALERT: you specified --lt-cred-mech and --use-auth-secret both. Check your configuration.\n"); + } + if(!use_lt_credentials && !anon_credentials) { if(turn_params.default_users_db.ram_db.users_number) { TURN_LOG_FUNC(TURN_LOG_LEVEL_WARNING, "\nCONFIGURATION ALERT: you specified long-term user accounts, (-u option) \n but you did not specify the long-term credentials option\n (-a or --lt-cred-mech option).\n I am turning --lt-cred-mech ON for you, but double-check your configuration.\n");