Home
last modified time | relevance | path

Searched hist:f7ee28e755820375d5f441e19c1f1376a200e834 (Results 1 – 2 of 2) sorted by relevance

/freebsd/sys/net/
H A Dif_ovpn.hdiff f7ee28e755820375d5f441e19c1f1376a200e834 Mon May 08 16:41:48 CEST 2023 Kristof Provost <kp@FreeBSD.org> if_ovpn: notify userspace when we've used half of the sequence numbers

OpenVPN uses the sequence number (as well as a userspace supplied nonce)
to build the IV. This means we should avoid re-using sequence numbers.
However, userspace doesn't know how many packets we've sent (and thus
what sequence number we're up to).

Notify userspace when we've used half of the available sequence numbers
to tell it that it's time for a key renegotiaton.

Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D39570
H A Dif_ovpn.cdiff f7ee28e755820375d5f441e19c1f1376a200e834 Mon May 08 16:41:48 CEST 2023 Kristof Provost <kp@FreeBSD.org> if_ovpn: notify userspace when we've used half of the sequence numbers

OpenVPN uses the sequence number (as well as a userspace supplied nonce)
to build the IV. This means we should avoid re-using sequence numbers.
However, userspace doesn't know how many packets we've sent (and thus
what sequence number we're up to).

Notify userspace when we've used half of the available sequence numbers
to tell it that it's time for a key renegotiaton.

Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D39570