diff options
author | Damien Miller <djm@mindrot.org> | 2003-04-01 21:43:39 +1000 |
---|---|---|
committer | Damien Miller <djm@mindrot.org> | 2003-04-01 21:43:39 +1000 |
commit | 2dc074ef4bd925a7c95b9741ab20ab07c79dc2ff (patch) | |
tree | e91aa5d14b0c35f37671b283ba91e92ee9b3df21 /monitor_wrap.c | |
parent | 495dca35186a9a33c85a6fa2bcc1b127512bb688 (diff) |
- markus@cvs.openbsd.org 2003/04/01 10:10:23
[clientloop.c monitor.c monitor_wrap.c packet.c packet.h readconf.c]
[readconf.h serverloop.c sshconnect2.c]
rekeying bugfixes and automatic rekeying:
* both client and server rekey _automatically_
(a) after 2^31 packets, because after 2^32 packets
the sequence number for packets wraps
(b) after 2^(blocksize_in_bits/4) blocks
(see: draft-ietf-secsh-newmodes-00.txt)
(a) and (b) are _enabled_ by default, and only disabled for known
openssh versions, that don't support rekeying properly.
* client option 'RekeyLimit'
* do not reply to requests during rekeying
- markus@cvs.openbsd.org 2003/04/01 10:22:21
[clientloop.c monitor.c monitor_wrap.c packet.c packet.h readconf.c]
[readconf.h serverloop.c sshconnect2.c]
backout rekeying changes (for 3.6.1)
Diffstat (limited to 'monitor_wrap.c')
-rw-r--r-- | monitor_wrap.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/monitor_wrap.c b/monitor_wrap.c index 1395a32f..c9714138 100644 --- a/monitor_wrap.c +++ b/monitor_wrap.c @@ -25,7 +25,7 @@ */ #include "includes.h" -RCSID("$OpenBSD: monitor_wrap.c,v 1.22 2003/02/16 17:30:33 markus Exp $"); +RCSID("$OpenBSD: monitor_wrap.c,v 1.24 2003/04/01 10:22:21 markus Exp $"); #include <openssl/bn.h> #include <openssl/dh.h> |