]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Fix broken fragment/mssfix with NCP
authorLev Stipakov <lev@openvpn.net>
Mon, 21 Jan 2019 20:04:54 +0000 (22:04 +0200)
committerGert Doering <gert@greenie.muc.de>
Mon, 22 Jul 2019 18:25:53 +0000 (20:25 +0200)
commitd22ba6b2c551fa83d23b5cf668e08a08fde446bc
tree7fecbb9b721cc1c56a99790d60d766c2fb4561d7
parentc454b21e7ce458ce6f5bcaf6c313ab3ba3dd5baf
Fix broken fragment/mssfix with NCP

NCP negotiation replaces worst cast crypto overhead
with actual one in data channel frame. That frame
params are used by mssfix.

Fragment frame still contains worst case overhead.
Because of that TCP packets are fragmented, since
MSS value exceeds max fragment size.

Fix by replacing worst case crypto overhead with
actual one for fragment frame, as it is done for data
channel frame.

Trac #1140

Signed-off-by: Lev Stipakov <lstipakov@gmail.com>
Acked-by: Arne Schwabe <arne@rfc2549.org>
Acked-by: Steffan Karger <steffan.karger@fox-it.com>
Message-Id: <1548101094-4449-1-git-send-email-lstipakov@gmail.com>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg18135.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpn/forward.c
src/openvpn/init.c
src/openvpn/openvpn.h
src/openvpn/push.c
src/openvpn/ssl.c
src/openvpn/ssl.h