]> git.ipfire.org Git - thirdparty/knot-resolver.git/commit
daemon/worker: fixes for handling of some non-fatal TLS errors, metrics
authorMarek Vavruša <mvavrusa@cloudflare.com>
Fri, 3 Aug 2018 22:04:45 +0000 (15:04 -0700)
committerMarek Vavruša <mvavrusa@cloudflare.com>
Fri, 7 Sep 2018 17:45:21 +0000 (10:45 -0700)
commit64e7575dcc2399f49dd6b681dc55632468e8914c
tree1c03eb8c03ef592d47d4e8458af9d1bc05704bc3
parent5ca255d3d8fd97d687abd850b714883e05e21536
daemon/worker: fixes for handling of some non-fatal TLS errors, metrics

The handshake now properly deals with GNUTLS_E_INTERRUPTED to retry,
and GNUTLS_E_WARNING_ALERT_RECEIVED and GNUTLS_E_GOT_APPLICATION_DATA
during session resumption.

Added a metric for monitoring TLS handshake errors.

Added `net.tls_handshake_timeout([milliseconds])` for configurable
TLS handshake timeout (default is 6000ms), and documentation for
`net.tcp_in_idle([milliseconds])`.
daemon/README.rst
daemon/bindings.c
daemon/network.c
daemon/network.h
daemon/tls.c
daemon/worker.c
daemon/worker.h