Added cookie key rotation

This commit is contained in:
Nikos Mavrogiannopoulos
2015-11-14 10:41:22 +01:00
parent fd5f9df898
commit 2473633b8d
13 changed files with 120 additions and 4 deletions

View File

@@ -298,6 +298,13 @@ ban-reset-time = 300
# between different networks.
cookie-timeout = 300
# Cookie rekey time (in seconds)
# The time after which the key used to encrypt cookies will be
# refreshed. After this time the previous key will also be valid
# for verification. It is recommended not to modify the default
# value.
cookie-rekey-time = 14400
# If this is enabled (not recommended) the cookies will stay
# valid even after a user manually disconnects, and until they
# expire. This may improve roaming with some broken clients.