[Bug 2252] RekeyLimit breaks ClientAlive

[bugzilla-daemon at bugzilla.mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=2252

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Assignee|unassigned-bugs at mindrot.org |djm at mindrot.org
                 CC|                            |dtucker at zip.com.au
             Status|NEW                         |ASSIGNED
   Attachment #2793|                            |ok?(dtucker at zip.com.au)
              Flags|                            |

--- Comment #5 from Damien Miller <djm at mindrot.org> ---
Created attachment 2793
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2793&action=edit
fix rekey/clientalive interaction

This fixes the rekey/clientalive interaction, though a little
inexactly. 

It will work correctly if clientalivetimeout is less than the timed
rekeylimit, but will send extra client alive pings if the rekeylimit
timeout is smaller. In practice, I don't think this is a huge problem
since rekey timeouts are likely to be long and extra client alive
packets are quite harmless.

Fixing it properly would require a more comprehensive timekeeping
system to separately manage the rekey and client-alive deadlines.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.