If you are going to use openob over anything except a private network, I strongly recommend accessing its redis database through an encrypted pipe.

Redis is a database with NO default user or administrator authentication.  Anyone finding it on port 6379 can screw with everything on the server. 

Since version 3.2.0 the redis default is to respond only to the loopback interface in protected mode.  No other computers can access it

Ideally you would do well not to put in unprotected mode it on a local network that includes wifi, since the security there is not so great.  Here is an article -

https://redis.io/topics/security

The simplest way I have found to use redis outside of the local network is to use spipe  (not the mod_ssl extension of apache2), but the utility described here

https://github.com/Tarsnap/spiped

which you can install using  

sudo apt-get install spiped     (good for Ubuntu and R pi at least)

spiped connects two computers via an encrypted pipe that makes an encrypted link from the loopback interface on the client on another port, through any network   to an spipe at the server that talks to redis on that computer's loopback interface.  Both ends have to have a pre-shared key to talk.  It isn't hard to set up.  Any spipe client with the key can access the redis server, so it is pretty easy.  Obviously this is a hardware only authorization issue, but that is fine for an STL or emergency management studio.  You don't want to have any hardware with the key getting in the wrong hands.

If you want to encrypt the audio, you can also pipe openob over another instance of spipe.

Apparently new versions of redis support TLS, but I have not tried that out.

On 7/16/2020 08:35:35, Richard Graham wrote:

Is this the correct version of g-streamer?

 

Below is a copy of a ‘crib-sheet’ that I put together for putting a Pi together for using OpenOB – this is using a Pi 3 not a 4 though and the ‘Audio Injector’ hat – but the OOB installation should be the same. This uses the April 2019 version of Raspbian, and the OpenOB version available in August 2019.

 

---

 

Install the prerequisites for OpenOB plus a couple other bits that are needed:

 

sudo apt install gstreamer1.0-plugins-base gstreamer1.0-plugins-good gir1.2-gstreamer-1.0 python-gst-1.0 python-redis python-gi python-setuptools gstreamer1.0-alsa python-pip screen

 

Install redis-server on the receiver:

 

sudo apt install redis-server

 

and configure:

 

sudo sed -i.bak 's/bind 127.*/bind 0.0.0.0/' /etc/redis/redis.conf && sudo service redis-server restart

 

Install OpenOB:

 

sudo pip install openob

 

---

 

For a previous build, I did at some point find a repository that had older versions of gstreamer in it and use it that way, but that was with the older openOB version.

 

Hope that's somewhat helpful at least!

 

Richard.

 

 

From: Phil Biehl <fylbeall@gmail.com>
Sent: Thursday, 16 July 2020 03:19
To: openob-users@lists.talkunafraid.co.uk
Subject: [openob-users] Prerequisites

 

I am having difficulty getting prerequisites loaded on a raspberry pi 4. I’ve fixed this problem before but I cant seem to remember how I did it! Help please.

 

As an update for you all, I gave up on the Behringer UCA202s and its inherent mono problem have substituted a HifiBerry DAC+ ADC Pro for the input to the transmitter side, and a DAC+ Pro XLR for the output at the receiver side.

 

 

Thanks

 

pi@OpenOB-TX:~ $ sudo apt-get install python-gst0.10 python-setuptools gstreamer0.10-plugins-base gstreamer0.10-plugins-bad gstreamer0.10-plugins-good gstreamer0.10-plugins-ugly gstreamer0.10-ffmpeg gstreamer0.10-tools python-gobject python-gobject-2 gstreamer0.10-alsa python-argparse

Reading package lists... Done

Building dependency tree      

Reading state information... Done

Package python-gst0.10 is not available, but is referred to by another package.

This may mean that the package is missing, has been obsoleted, or

is only available from another source

 

Package gstreamer0.10-plugins-good is not available, but is referred to by another package.

This may mean that the package is missing, has been obsoleted, or

is only available from another source

 

Package gstreamer0.10-plugins-bad is not available, but is referred to by another package.

This may mean that the package is missing, has been obsoleted, or

is only available from another source

However the following packages replace it:

  gstreamer0.10-plugins-base

 

Package gstreamer0.10-plugins-ugly is not available, but is referred to by another package.

This may mean that the package is missing, has been obsoleted, or

is only available from another source

 

Package gstreamer0.10-ffmpeg is not available, but is referred to by another package.

This may mean that the package is missing, has been obsoleted, or

is only available from another source

 

E: Package 'python-gst0.10' has no installation candidate

E: Package 'gstreamer0.10-plugins-bad' has no installation candidate

E: Package 'gstreamer0.10-plugins-good' has no installation candidate

E: Package 'gstreamer0.10-plugins-ugly' has no installation candidate

E: Package 'gstreamer0.10-ffmpeg' has no installation candidate

pi@OpenOB-TX:~ $

_______________________________________________
openob-users mailing list -- openob-users@lists.talkunafraid.co.uk
To unsubscribe send an email to openob-users-leave@lists.talkunafraid.co.uk