denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

kernel-netlink: Use total retransmit timeout as acquire timeout

Browse Source 
By using the total retransmit timeout, modifications of timeout settings
automatically reflect on the value of xfrm_acq_expires.  If set, the
value of xfrm_acq_expires configured by the user takes precedence over
the calculated value.
This commit is contained in:
Tobias Brunner
2017-05-23 18:05:58 +02:00
parent bfbd3af850
commit 70855696ad
3 changed files with 26 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
conf/plugins/kernel-netlink.opt
+3 -3
View File
@@ -113,6 +113,6 @@ charon.plugins.kernel-netlink.xfrm_acq_expires = 165
trap policy. The value gets written to /proc/sys/net/core/xfrm_acq_expires.
Indirectly controls the delay between XFRM acquire messages triggered by the
kernel for a trap policy. The same value is used as timeout for SPIs
allocated by the kernel. The default value equals the default total
retransmission timeout for IKE messages, see IKEv2 RETRANSMISSION
in **strongswan.conf**(5).
allocated by the kernel. The default value equals the total retransmission
timeout for IKE messages, see IKEv2 RETRANSMISSION in
**strongswan.conf**(5).