denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ike: Set default IKE fragment size to 1280

Browse Source 
This is the minimum size an IPv6 implementation must support.  This makes
it the default for IPv4 too, which presumably is also generally routable
(otherwise, setting this to 0 falls back to the minimum of 576 for IPv4).
This commit is contained in:
Tobias Brunner
2016-10-04 10:08:21 +02:00
parent 6b2814ab0e
commit 0642f42bbe
2 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
conf/options/charon.opt
+5 -4
View File
@@ -100,11 +100,12 @@ charon.flush_auth_cfg = no
charon.follow_redirects = yes charon.follow_redirects = yes
Whether to follow IKEv2 redirects (RFC 5685). Whether to follow IKEv2 redirects (RFC 5685).
charon.fragment_size = 0 charon.fragment_size = 1280
Maximum size (complete IP datagram size in bytes) of a sent IKE fragment Maximum size (complete IP datagram size in bytes) of a sent IKE fragment
when using proprietary IKEv1 or standardized IKEv2 fragmentation (0 for when using proprietary IKEv1 or standardized IKEv2 fragmentation, defaults
address family specific default values). If specified this limit is used to 1280 (use 0 for address family specific default values, which uses a
for both IPv4 and IPv6. lower value for IPv4). If specified this limit is used for both IPv4 and
IPv6.
charon.group charon.group
Name of the group the daemon changes to after startup. Name of the group the daemon changes to after startup.
src/libcharon/sa/ike_sa.c
+1 -1
View File
@@ -2979,7 +2979,7 @@ ike_sa_t * ike_sa_create(ike_sa_id_t *ike_sa_id, bool initiator,
.flush_auth_cfg = lib->settings->get_bool(lib->settings, .flush_auth_cfg = lib->settings->get_bool(lib->settings,
"%s.flush_auth_cfg", FALSE, lib->ns), "%s.flush_auth_cfg", FALSE, lib->ns),
.fragment_size = lib->settings->get_int(lib->settings, .fragment_size = lib->settings->get_int(lib->settings,
"%s.fragment_size", 0, lib->ns), "%s.fragment_size", 1280, lib->ns),
.follow_redirects = lib->settings->get_bool(lib->settings, .follow_redirects = lib->settings->get_bool(lib->settings,
"%s.follow_redirects", TRUE, lib->ns), "%s.follow_redirects", TRUE, lib->ns),
); );