Skip to content

Added WithDTLSEllipticCurves ConnectOption for FIPS#869

Merged
cnderrauber merged 1 commit intolivekit:mainfrom
samthesloth:fips-dtls-curves
Mar 30, 2026
Merged

Added WithDTLSEllipticCurves ConnectOption for FIPS#869
cnderrauber merged 1 commit intolivekit:mainfrom
samthesloth:fips-dtls-curves

Conversation

@samthesloth
Copy link
Copy Markdown
Contributor

Resolves #866

Adds WithDTLSEllipticCurves ConnectOption so callers can configure the DTLS elliptic curves used for WebRTC key exchange. This is needed on FIPS 140-enabled systems where Go's crypto stack rejects X25519 (the pion default) since it's not NIST-approved.

Usage:

room, err := lksdk.ConnectToRoomWithToken(url, token, callback,
    lksdk.WithDTLSEllipticCurves(dtlsElliptic.P256, dtlsElliptic.P384),
)

When no curves are specified, behavior is unchanged (pion defaults apply).

@CLAassistant
Copy link
Copy Markdown

CLAassistant commented Mar 27, 2026

CLA assistant check
All committers have signed the CLA.

Copy link
Copy Markdown
Contributor

@cnderrauber cnderrauber left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good!!

@cnderrauber cnderrauber merged commit 06b4e89 into livekit:main Mar 30, 2026
2 of 3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

DTLS handshake fails on FIPS-enabled Linux: X25519 not allowed

3 participants