GitLab/ocserv
1
0
Fork 0
mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-02-10 16:57:00 +08:00
Code Issues Packages Projects Releases Wiki Activity

TLS sessions expire the at cookie timeout.

Browse Source
This commit is contained in:
Nikos Mavrogiannopoulos
2014-05-27 15:18:30 +02:00
parent a872850b1e
commit aaa06e3157
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/main-resume.c
View File

@@ -178,7 +178,7 @@ void expire_tls_sessions(main_server_st * s)
exp = gnutls_db_check_entry_time(&d);
if (now - exp > TLS_SESSION_EXPIRATION_TIME) {
if (now - exp > TLS_SESSION_EXPIRATION_TIME(s->config)) {
cache->session_id_size = 0;
htable_delval(s->tls_db.ht, &iter);

2
src/tlslib.h
View File

@@ -113,7 +113,7 @@ typedef struct
unsigned int session_data_size;
} tls_cache_st;
#define TLS_SESSION_EXPIRATION_TIME 600
#define TLS_SESSION_EXPIRATION_TIME(config) ((config)->cookie_timeout)
#define DEFAULT_MAX_CACHED_TLS_SESSIONS 64
void tls_cache_init(void *pool, tls_sess_db_st* db);

2
src/worker-vpn.c
View File

@@ -713,7 +713,7 @@ void vpn_server(struct worker_st *ws)
set_resume_db_funcs(session);
gnutls_session_set_ptr(session, ws);
gnutls_db_set_ptr(session, ws);
gnutls_db_set_cache_expiration(session, TLS_SESSION_EXPIRATION_TIME);
gnutls_db_set_cache_expiration(session, TLS_SESSION_EXPIRATION_TIME(ws->config));
gnutls_handshake_set_timeout(session, GNUTLS_DEFAULT_HANDSHAKE_TIMEOUT);
do {