Let’s Encrypt certificates for TURNS are rejected

[532910]

TURNS doesn't work.

With
turn_uris: [ "turns:domain.tld:5349?transport=udp", "turns:domain.tld:5349?transport=tcp" ]
or
turn_uris: [ "turns:domain.tld:3478?transport=udp", "turns:domain.tld:3478?transport=tcp" ]

turnserver reports an error: session closed ... reason: TLS/TCP socket buffer operation error (callback)

riot-web works fine, testssl.sh domain.tld:5349 and testssl.sh domain.tld:3478 also shows no errors.

[verymilan]

i would like to +1 this.
it is related to element-hq/element-android#1533 and element-hq/riot-android#3299

[Dabada]

May be this helps : I'v used a fullchain certificate instead of a single one, no more socket error ! I'm using the same fullchain certificate on my reverse proxy. Certificate are generate by Let's Encrypt.

[font44]

I think this issue is now resolved. See more details here.