[libnice] TURN/TLS support in libnice

Olivier Crête olivier.crete at collabora.com
Tue Jan 4 21:51:49 UTC 2022


Hi,

Sorry for the slow reply.

My great master plan was to remove the libnice specific interface and
replace it with GLib's GDatagramBased + GIOStream.. and then I can just
use glib-networking's abstraction for TLS.. so I get support for both
OpenSSL and GnuTLS for free.

That said, I'd also accept patch that implement it with either of them
directly at this point.. Right now, we have support for OpenSSL, GnuTLS
and the native Windows API. This is also something my team could do if
you're looking to outsource.

Olivier

On Mon, 2021-12-13 at 17:07 +0000, Johan Sternerup wrote:
> Ok.
> Seems like its doable with a reasonable effort then.
> Any thoughts on what TLS library to use and if it should be made
> optional to minimize dependencies?
> I'm thinking libsoup would be a good fit but it does bring in some
> extra dependencies.
> On the other hand you'd also be able to get HTTP1.1 proxy support
> through libsoup in addition to using OpenSSL or GnuTLS directly.
> 
> / Johan
> Från: Olivier Crête <olivier.crete at collabora.com>
> Skickat: den 13 december 2021 15:59:31
> Till: Niklas Andersson; Johan Sternerup
> Kopia: nice at lists.freedesktop.org
> Ämne: Re: [libnice] TURN/TLS support in libnice 
> Hi,
> 
> This is indeed the status. I'd love to add the feature, but up to
> now,
> no one has cared enough to speed a couple weeks implementing it (or
> to
> hire us to do it).
> 
> We have a socket abstraction layer, so we just need to sandwich a TLS
> library in there.
> 
> Olivier
> 
> On Mon, 2021-12-13 at 01:10 +0100, Niklas Andersson wrote:
> > Looks like there are no plans [1], but that the feature makes
> sense,
> > so with adequate funding and working with the right people it would
> > be possible to make it happen.
> > 
> > I have had features sponsored and successfully added to libnice and
> > other libraries in the past. Just let me know and I'll point you in
> > the right direction.
> > 
> > [1]
> >
> https://lists.freedesktop.org/archives/nice/2016-December/001351.html
> > 
> > - Niklas
> > 
> > On Sun, Dec 12, 2021 at 10:22 PM Johan Sternerup
> > <Johan.Sternerup at axis.com> wrote:
> > > Hi!
> > > 
> > > I'm wondering if there is any interest in implementing support
> for
> > > TURN/TLS in libnice. Maybe even plans?
> > > 
> > > TURN/TLS is actually a MUST requirement in RFC8835 (Transports
> for
> > > WebRTC) so it should be a feature of general interest I think.
> > > 
> > > / Johan
> > > 
> 

-- 
Olivier Crête
olivier.crete at collabora.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/nice/attachments/20220104/7e0656cf/attachment.htm>


More information about the nice mailing list