search

MUsman89 / rfc5766-turn-server

Automatically exported from code.google.com/p/rfc5766-turn-server
0 stars 0 forks source link

file descriptors to public/private ssl keys left open #118

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
1. start the turn server with ssl on (cert/pkey)
2.
3.

What is the expected output? What do you see instead?
ssl cert and pkey loaded in memory, file descriptors closed. However they are 
left open after startup.

$ grep -ir ssl-ai /etc/turnserver.conf
cert=/etc/ssl/cert.pem
pkey=/etc/ssl/pkey.key

$ sudo lsof -p $(pidof turnserver)  | grep -i ssl
turnserve 32420 root    5r   REG      253,6     7196         20 
/etc/ssl/cert.pem
turnserve 32420 root    6r   REG      253,6     1704         52 
/etc/ssl/pkey.key

this prevents for example to unmount /etc/ssl, in cases where e.g. it is being 
kept encrypted via cryptsetup

What version of the product are you using? On what operating system?

debian linux

ii  rfc5766-turn-server                    3.2.3.2-1                i386        
             TURN and STUN server for VoIP

Original issue reported on code.google.com by fgiunch...@gmail.com on 4 Apr 2014 at 11:09

GoogleCodeExporter commented 9 years ago 
Will be fixed in 3.2.3.3

Original comment by mom040...@gmail.com on 4 Apr 2014 at 11:13

GoogleCodeExporter commented 9 years ago

Original comment by mom040...@gmail.com on 6 Apr 2014 at 5:28