Messages

Hi all, I just signed up on this forum to confirm this.
In my case SCTP is disabled, so I always had the errors in OP, however after upgrading yesterday to 26.7.3 (with patch _8), turnserver wouldn't start. My errors instead are:

Code Select Expand

WARNING: Certificate file not found or not readable: /usr/local/etc/turnserver_cert.pem
WARNING: cannot find private key file: /usr/local/etc/turnserver_pkey.pem (1)
WARNING: cannot start TLS and DTLS listeners because private key file is not set properlyI am not much of a programmer, but a little AI help indicates that the process is now started by user _turnserver, which doesn't have rights on the certificate and private key path above.
The same AI suggested to modify the file "export_certs.php" in path "/usrlocal/opnsense/scripts/OPNsense/Turnserver/" at line 58 and change from

Code Select Expand

chmod($pkey_filename, 0600);to

Code Select Expand

            chgrp($pkey_filename, '_turnserver');
            chmod($pkey_filename, 0640);
After this modification DTLS and TLS listener started and could test successful connection from my nextcloud instance, even if the process seems stopped in the GUI (shows up red) and there is still some problem with the PID with following error in log "WARNING: Cannot create pid file: /var/run/turnserver.pid". It gets created afterwards in another path "INFO: pid file created: /var/tmp/turnserver.pid".
I honestly don't know if this is the correct way to solve the problem, just to indicate as much info as I can to developers.
The problem may be related to the turnserver sync to upstream from this commit but I am not sure: https://github.com/opnsense/ports/commit/7a54f4907505d0a78ef4000daa17d7f84996e6d8
Thank you!