# \[CENTOS 7\] Install secure Coturn UDP DTLS with Nextcloud

**URL:** <https://help.nextcloud.com/t/centos-7-install-secure-coturn-udp-dtls-with-nextcloud/65829>\
**Category:** 💬 Talk (spreed)\
**Created:** [December 9, 2019, 10:01am UTC](https://help.nextcloud.com/t/centos-7-install-secure-coturn-udp-dtls-with-nextcloud/65829 "2019-12-09T10:01:14Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![vincent13011](https://help.nextcloud.com/user_avatar/help.nextcloud.com/vincent13011/32/4094_2.png) [@vincent13011](https://help.nextcloud.com/u/vincent13011)\
**Post date:** [December 9, 2019, 10:01am UTC](https://help.nextcloud.com/t/centos-7-install-secure-coturn-udp-dtls-with-nextcloud/65829/1 "2019-12-09T10:01:14Z")

</div>

Install coturn UDP with DTLS to Centos 7

##Source

> [@HowTo: Setup Nextcloud Talk with TURN server](https://help.nextcloud.com/t/howto-setup-nextcloud-talk-with-turn-server/30794):
>
> Background The configuration of Nextcloud Talk mainly depends on your desired usage: As long as it shall be used only within one local network, nothing should be needed at all. Just verify that all browsers support the underlying [WebRTC](https://en.wikipedia.org/wiki/WebRTC) protocol (all famous ones do on current versions) and you should be good to go. Talk tries to establish a direct [peer-to-peer (P2P)](https://en.wikipedia.org/wiki/Peer-to-peer) connection, thus on connections throughout the local network (behind a [NAT](https://en.wikipedia.org/wiki/Network_address_translation)/router), clients do not only need to know each others …

[https://www.netways.de/blog/2017/08/16/setting-up-a-turn-server-for-nextcloud-video-calls/](https://www.netways.de/blog/2017/08/16/setting-up-a-turn-server-for-nextcloud-video-calls/)

> **[Installer un serveur TURN/STUN pour Talk@Nextcloud - PAB's blog](https://blog.bandinelli.net/index.php?post%2F2019%2F09%2F08%2FInstaller-un-serveur-TURN%2FSTUN-pour-Talk@Nextcloud)**
>
> L'application "Talk" de Nextcloud gagne toujours plus en maturité à chaque nouvelle version. Pour en profiter pleinement, il est nécessaire de paramétrer un serveur

> **[Nextcloud Talk API documentation](https://nextcloud-talk.readthedocs.io/en/latest/)**
>
> None

##installation Coturn

rpm -Uvh [http://download-ib01.fedoraproject.org/pub/epel/7/x86\_64/Packages/c/coturn-4.5.1.1-1.el7.x86\_64.rpm](http://download-ib01.fedoraproject.org/pub/epel/7/x86_64/Packages/c/coturn-4.5.1.1-1.el7.x86_64.rpm)

FOR secretKey : openssl rand -hex 32

nano /etc/coturn/turnserver.conf

```
tls-listening-port=5349 
listening-ip=ip priv
relay-ip=ip priv
min-port=65510 
max-port=65530 
fingerprint 
use-auth-secret 
static-auth-secret=secretkey
realm=domain
user-quota=12 
total-quota=1200 
bps-capacity=0 
no-udp 
no-tcp 
no-tls 
no-tcp-relay 
stale-nonce=600 
cert=/etc/coturn/cert.pem 
pkey=/etc/coturn/privkey.pem 
cipher-list="ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AES:RSA+3DES:!ADH:!AECDH:!MD5" 
dh-file=/etc/coturn/dhparam.pem 
no-stdout-log 
log-file=/var/log/turnserver.log 
syslog 
simple-log 
no-multicast-peers 
mobility 
no-cli 
no-tlsv1 
no-tlsv1_1

```

yes | cp /etc/nginx/cert/dhparam.pem /etc/coturn/

yes | cp /etc/letsencrypt/live/domain/privkey.pem /etc/coturn/

yes | cp /etc/letsencrypt/live/domain/cert.pem /etc/coturn/

##check conf

egrep -v “^$|^[[:space:]]\*#” /etc/coturn/turnserver.conf

##IPTABLES : TurnServer

/sbin/iptables -A INPUT -p udp -m state --state NEW --dport 5349 -j ACCEPT

/sbin/iptables -A OUTPUT -p udp -m state --state NEW -m multiport --sports 65510:65530 -j ACCFEPT

---

<div class="post-metadata">

**Author:** ![grjitu](https://help.nextcloud.com/letter_avatar/grjitu/32/6_22734026db12803ebb3e059622ac3534.png) [@grjitu](https://help.nextcloud.com/u/grjitu)\
**Post date:** [July 24, 2020, 4:11pm UTC](https://help.nextcloud.com/t/centos-7-install-secure-coturn-udp-dtls-with-nextcloud/65829/2 "2020-07-24T16:11:58Z")

</div>

> [@vincent13011](#):
>
> rpm -Uvh [http://download-ib01.fedoraproject.org/pub/epel/7/x86\_64/Packages/c/coturn-4.5.1.1-1.el7.x86\_64.rpm](http://download-ib01.fedoraproject.org/pub/epel/7/x86_64/Packages/c/coturn-4.5.1.1-1.el7.x86_64.rpm)

Hi!

I am trying to install on centos 7 but “[http://download-ib01.fedoraproject.org/pub/epel/7/x86\_64/Packages/c/coturn-4.5.1.1-1.el7.x86\_64.rpm](http://download-ib01.fedoraproject.org/pub/epel/7/x86_64/Packages/c/coturn-4.5.1.1-1.el7.x86_64.rpm)” doesn’t work.

please help.

---

<div class="post-metadata">

**Author:** ![Reiner\_Nippes](https://help.nextcloud.com/user_avatar/help.nextcloud.com/reiner_nippes/32/9479_2.png) [@Reiner\_Nippes](https://help.nextcloud.com/u/Reiner_Nippes)\
**Post date:** [July 24, 2020, 9:07pm UTC](https://help.nextcloud.com/t/centos-7-install-secure-coturn-udp-dtls-with-nextcloud/65829/3 "2020-07-24T21:07:34Z")

</div>

> [@grjitu](#):
>
> “[http://download-ib01.fedoraproject.org/pub/epel/7/x86\_64/Packages/c/coturn-4.5.1.1-1.el7.x86\_64.rpm”](http://download-ib01.fedoraproject.org/pub/epel/7/x86_64/Packages/c/coturn-4.5.1.1-1.el7.x86_64.rpm%E2%80%9D) doesn’t work.

there is a newer version:

[https://download-ib01.fedoraproject.org/pub/epel/7/x86\_64/Packages/c/coturn-4.5.1.3-1.el7.x86\_64.rpm](https://download-ib01.fedoraproject.org/pub/epel/7/x86_64/Packages/c/coturn-4.5.1.3-1.el7.x86_64.rpm)

---

<div class="post-metadata">

**Author:** ![wwe](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wwe/32/72963_2.png) [@wwe](https://help.nextcloud.com/u/wwe)\
**Post date:** [December 4, 2024, 12:24pm UTC](https://help.nextcloud.com/t/centos-7-install-secure-coturn-udp-dtls-with-nextcloud/65829/4 "2024-12-04T12:24:01Z")

</div>



---

<div class="post-metadata">

**Author:** ![wwe](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wwe/32/72963_2.png) [@wwe](https://help.nextcloud.com/u/wwe)\
**Post date:** [December 11, 2024, 4:07pm UTC](https://help.nextcloud.com/t/centos-7-install-secure-coturn-udp-dtls-with-nextcloud/65829/5 "2024-12-11T16:07:03Z")

</div>


