GitLab/ocserv
1
0
Fork 0
mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-02-10 00:37:00 +08:00
Code Issues Packages Projects Releases Wiki Activity

DTLS rekey time and method was aligned with CSTP.

Browse Source
This commit is contained in:
Nikos Mavrogiannopoulos
2014-02-12 10:48:06 +01:00
parent 001fd57c71
commit 22ffb526dd
1 changed files with 12 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
src/worker-vpn.c
View File

@@ -1309,10 +1309,18 @@ static int connect_handler(worker_st * ws)
ws->config->udp_port);
SEND_ERR(ret);
ret =
tls_printf(ws->session, "X-DTLS-Rekey-Time: %u\r\n",
(unsigned)(2 * ws->config->cookie_validity) / 3);
SEND_ERR(ret);
if (ws->config->rekey_time > 0) {
ret =
tls_printf(ws->session, "X-DTLS-Rekey-Time: %u\r\n",
(unsigned)(ws->config->rekey_time+10));
SEND_ERR(ret);
ret = tls_puts(ws->session, "X-DTLS-Rekey-Method: ssl\r\n");
SEND_ERR(ret);
} else {
ret = tls_puts(ws->session, "X-DTLS-Rekey-Method: none\r\n");
SEND_ERR(ret);
}
ret =
tls_printf(ws->session, "X-DTLS-Keepalive: %u\r\n",