]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Introduce connection state for reconnecting peer in p2p
authorArne Schwabe <arne@rfc2549.org>
Wed, 30 Nov 2022 16:57:05 +0000 (17:57 +0100)
committerGert Doering <gert@greenie.muc.de>
Wed, 30 Nov 2022 19:21:25 +0000 (20:21 +0100)
commitcde3edb132abd5091b2fbee83c0af43ee4e6e009
treec33889e3611987fa882a4826e6ee595262055c01
parent816eae83a57df4fa3ffd49b1794779ae9054a6ee
Introduce connection state for reconnecting peer in p2p

We introduce this state to make the reconnecting of a client more
obvious and what is called again instead of making it implicit. The
new state CAS_RECONNECT_PENDING is between CAS_WAITING_OPTIONS_IMPORT and
CAS_CONNECT_DONE as we need to redo some of the steps of the connection
setup, so this new state is going a "half step" back in the state machine.

We also do no longer generate data channel keys for untrusted session. This
is done for clarity but also to allow them being generated after the
session has become actually active.

These changes allow a reconnect in p2p mode with DCO to work as the initial
reconnect working.

Signed-off-by: Arne Schwabe <arne@rfc2549.org>
Acked-by: Gert Doering <gert@greenie.muc.de>
Message-Id: <20221130165705.159610-1-arne@rfc2549.org>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg25595.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpn/forward.c
src/openvpn/init.c
src/openvpn/ssl.c
src/openvpn/ssl.h
src/openvpn/ssl_common.h