From a16e9a0eeaa005019b3cfb727f261a7d58a92465 Mon Sep 17 00:00:00 2001
From: Frank Wall <fw@moov.de>
Date: Tue, 22 Apr 2025 22:57:41 +0200
Subject: [PATCH] net/turnserver: hide protocol violating options, refs #4495

---
 net/turnserver/pkg-descr                                 | 9 +++++++++
 .../controllers/OPNsense/Turnserver/forms/settings.xml   | 6 ++++--
 2 files changed, 13 insertions(+), 2 deletions(-)

diff --git a/net/turnserver/pkg-descr b/net/turnserver/pkg-descr
index f80121742..c2673e293 100644
--- a/net/turnserver/pkg-descr
+++ b/net/turnserver/pkg-descr
@@ -2,3 +2,12 @@ Coturn is a free open source implementation of TURN and STUN Server.
 The TURN Server is a VoIP media traffic NAT traversal server and gateway.
 
 WWW: https://github.com/coturn/coturn
+
+1.1
+
+Changed:
+* hide protocol violating options
+
+1.0
+
+Initial release
diff --git a/net/turnserver/src/opnsense/mvc/app/controllers/OPNsense/Turnserver/forms/settings.xml b/net/turnserver/src/opnsense/mvc/app/controllers/OPNsense/Turnserver/forms/settings.xml
index 37f6633cb..4f6c322d3 100644
--- a/net/turnserver/src/opnsense/mvc/app/controllers/OPNsense/Turnserver/forms/settings.xml
+++ b/net/turnserver/src/opnsense/mvc/app/controllers/OPNsense/Turnserver/forms/settings.xml
@@ -116,12 +116,14 @@
         <id>turnserver.settings.ChannelLifetime</id>
         <label>Channel Lifetime</label>
         <type>text</type>
-        <help>The lifetime for the channel (in seconds). Default value is 600 secs (10 minutes).</help>
+        <help>The lifetime for the channel (in seconds). Default value is 600 secs (10 minutes). MUST NOT be changed, because this would violate RFC 5766.</help>
+        <advanced>true</advanced>
     </field>
     <field>
         <id>turnserver.settings.PermissionLifetime</id>
         <label>Permission Lifetime</label>
         <type>text</type>
-        <help>The permission lifetime (in seconds). Default value is 300 secs (5 minutes).</help>
+        <help>The permission lifetime (in seconds). Default value is 300 secs (5 minutes). MUST NOT be changed, because this would violate RFC 5766.</help>
+        <advanced>true</advanced>
     </field>
 </form>