Fixed bug introduced with the --port-share directive

back in r893 which causes TLS soft resets
(1 per hour by default) in TCP server mode to force
a blockage of tunnel packets and later time-out and
restart the connection.

git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@1076 e7ae566f-a301-0410-adde-c780ea21d3b5

diff --git a/ssl.c b/ssl.c
index c7f1e7325e7515615a8d2cbbf6c36912ee2a9bd0..3f0c664b62917ec6d2a0c59ea063a9a5f82c3833 100644 (file)
--- a/ssl.c
+++ b/ssl.c
@@ -1795,7 +1795,7 @@ key_state_init (struct tls_session *session, struct key_state *ks)
   ks->ack_write_buf = alloc_buf (BUF_SIZE (&session->opt->frame));
   reliable_init (ks->send_reliable, BUF_SIZE (&session->opt->frame),
                 FRAME_HEADROOM (&session->opt->frame), TLS_RELIABLE_N_SEND_BUFFERS,
-                session->opt->xmit_hold);
+                ks->key_id ? false : session->opt->xmit_hold);
   reliable_init (ks->rec_reliable, BUF_SIZE (&session->opt->frame),
                 FRAME_HEADROOM (&session->opt->frame), TLS_RELIABLE_N_REC_BUFFERS,
                 false);