GitLab/ocserv
1
0
Fork 0
mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-03-16 06:49:19 +08:00
Code Issues Packages Projects Releases Wiki Activity

increased the default cookie rekey time to 3 days

Browse Source
This commit is contained in:
Nikos Mavrogiannopoulos
2016-02-21 08:55:06 +01:00
parent 796b5e0648
commit aa6bd829d4
3 changed files with 6 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
doc/sample.config
View File

@@ -311,9 +311,8 @@ cookie-timeout = 300
# Cookie rekey time (in seconds) # Cookie rekey time (in seconds)
# The time after which the key used to encrypt cookies will be # The time after which the key used to encrypt cookies will be
# refreshed. After this time the previous key will also be valid # refreshed. After this time the previous key will also be valid
# for verification. It is recommended not to modify the default # for verification until the next rotation cycle.
# value. cookie-rekey-time = 259200
cookie-rekey-time = 14400
# If this is enabled (not recommended) the cookies will stay # If this is enabled (not recommended) the cookies will stay
# valid even after a user manually disconnects, and until they # valid even after a user manually disconnects, and until they

3
src/cookies.h
View File

@@ -30,7 +30,8 @@
/* The time after a disconnection the cookie is valid */ /* The time after a disconnection the cookie is valid */
#define DEFAULT_COOKIE_RECON_TIMEOUT 120 #define DEFAULT_COOKIE_RECON_TIMEOUT 120
#define DEFAULT_COOKIE_REKEY_TIME 14400 /* The time after a cookie key is rotated */
#define DEFAULT_COOKIE_REKEY_TIME 259200
int encrypt_cookie(void *pool, gnutls_datum_t *key, const Cookie *msg, int encrypt_cookie(void *pool, gnutls_datum_t *key, const Cookie *msg,
uint8_t** ecookie, unsigned *ecookie_size); uint8_t** ecookie, unsigned *ecookie_size);

5
src/ocserv-args.def
View File

@@ -405,9 +405,8 @@ cookie-timeout = 300
# Cookie rekey time (in seconds) # Cookie rekey time (in seconds)
# The time after which the key used to encrypt cookies will be # The time after which the key used to encrypt cookies will be
# refreshed. After this time the previous key will also be valid # refreshed. After this time the previous key will also be valid
# for verification. It is recommended not to modify the default # for verification until the next rotation cycle.
# value. cookie-rekey-time = 259200
cookie-rekey-time = 14400
# If this is enabled (not recommended) the cookies will stay # If this is enabled (not recommended) the cookies will stay
# valid even after a user manually disconnects, and until they # valid even after a user manually disconnects, and until they