Paul Gregoire mondain

In conf/red5-common.xml the MP3 and M4A entries must be removed to prevent startup exceptions, unless an MP3/M4A support jar is included in the classpath (Not yet available). Remove or comment out the following entries from the streamableFileFactory bean:

  <bean id="mp3FileService" class="org.red5.server.service.mp3.impl.MP3Service"/>
  <bean id="m4aFileService" class="org.red5.server.service.m4a.impl.M4AService"/>

Remove this entire bean entry:

Addressing of critical and high vulerability alerts

The following three updates will cover the majority of issues detected; this report is for Red5 open source specifically and should apply to implementations utilizing the server.

Spring 5.3.31
Slf4j 2.0.11
Logback 1.4.14

The update to Spring 6.0.x is delayed due to its requirement on JDK 17.

Offer from OBS with libdatachannel:

v=0
o=rtc 1749923962 0 IN IP4 127.0.0.1
s=-
t=0 0
a=msid-semantic:WMS *
a=group:BUNDLE 0 1
a=setup:actpass

WHIP with trickle:

sequenceDiagram
    participant wc as WHIP Client
    participant ws as WHIP Server
    wc->>+ws: OPTIONS /whip/endpoint/stream1
    ws-->>wc: HTTP Response with headers and optional Link header containing ICE servers
    wc->>ws: POST /whip/endpoint/stream1 with SDP Offer
 ws--&gt;&gt;wc: HTTP Response with SDP Answer with candidates and Location header "/whip/resource/stream1"

WHEP Mode 1 with trickle:

sequenceDiagram
    participant wc as WHEP Client
    participant ws as WHEP Server
    wc->>+ws: OPTIONS /whep/endpoint/stream1?requestId=subscriber1
    ws-->>wc: HTTP Response with headers and optional Link header containing ICE servers
    wc->>ws: POST /whep/endpoint/stream1?requestId=subscriber1
    ws-->>wc: HTTP Response with SDP Offer with candidates and Location header "/whep/resource/stream1"

Add to red5.sh and red5pro.service: -Dorg.ice4j.ipv6.DISABLED=false red5.sh example:

if [ -z "$JVM_OPTS" ]; then
    JVM_OPTS="-Dorg.ice4j.ipv6.DISABLED=false -XX:+UnlockExperimentalVMOptions -XX:+UseZGC -Xms2g -Xmx2g -Xverify:none -XX:+UseBiasedLocking -XX:InitialCodeCacheSize=8m -XX:MaxGCPauseMillis=500 -XX:ReservedCodeCacheSize=32m"
fi

red5pro.service example:

	#!/bin/bash
	# explanation https://gist.github.com/mohanpedala/1e2ff5661761d3abd0385e8223e16425
	set -exuo pipefail

	WORKDIR="$(pwd)"
	mkdir -p ${WORKDIR}

	SRC="$WORKDIR/ffmpeg_build"
	CMPLD="$WORKDIR/compile"
	NUM_PARALLEL_BUILDS=4


	import java.io.File;
	import java.io.IOException;
	import java.text.SimpleDateFormat;
	import java.util.Date;
	import java.util.HashMap;
	import java.util.List;
	import java.util.Locale;
	import java.util.Map;

	/* Based on code created by Sergio Garcia Murillo, modified by Paul Gregoire to be used with Red5 Pro. */
	class WHIPClient {

	constructor() {
	//Offer SDP
	this.offer = null;
	//Ice properties
	this.iceUsername = null;
	this.icePassword = null;
	//Pending candidates

	<html>
	<head>
	<title>Whip</title>
	<script type="text/javascript" src="whip.js"></script>
	</head>
	<body>
	<b>Whip it! real good</b>
	<br /><br />
	<div id="container"></div>
	<br />