diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2017-03-13 12:15:25 +0100 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2017-05-23 18:05:58 +0200 |
| commit | 70855696adb5bf363c0b91af0af9fe09db4a9e6c (patch) | |
| tree | 8777d914191845d0a380fb276a8cabc4eada0051 /conf | |
| parent | bfbd3af8506052fa3a331bd151453795913d3645 (diff) | |
| download | strongswan-70855696adb5bf363c0b91af0af9fe09db4a9e6c.tar.bz2 strongswan-70855696adb5bf363c0b91af0af9fe09db4a9e6c.tar.xz | |
kernel-netlink: Use total retransmit timeout as acquire timeout
By using the total retransmit timeout, modifications of timeout settings
automatically reflect on the value of xfrm_acq_expires. If set, the
value of xfrm_acq_expires configured by the user takes precedence over
the calculated value.
Diffstat (limited to 'conf')
| -rw-r--r-- | conf/plugins/kernel-netlink.opt | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/conf/plugins/kernel-netlink.opt b/conf/plugins/kernel-netlink.opt index 1136af1be..3d9c4a7a9 100644 --- a/conf/plugins/kernel-netlink.opt +++ b/conf/plugins/kernel-netlink.opt @@ -113,6 +113,6 @@ charon.plugins.kernel-netlink.xfrm_acq_expires = 165 trap policy. The value gets written to /proc/sys/net/core/xfrm_acq_expires. Indirectly controls the delay between XFRM acquire messages triggered by the kernel for a trap policy. The same value is used as timeout for SPIs - allocated by the kernel. The default value equals the default total - retransmission timeout for IKE messages, see IKEv2 RETRANSMISSION - in **strongswan.conf**(5). + allocated by the kernel. The default value equals the total retransmission + timeout for IKE messages, see IKEv2 RETRANSMISSION in + **strongswan.conf**(5). |