From: Andreas Steffen <andreas.steffen@strongswan.org>
Date: Tue, 27 May 2014 17:36:36 +0000 (+0200)
Subject: Increased maximum PT-TLS message size to 2MB
X-Git-Tag: 5.2.0dr5~13
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=3a726816a2ca349a7127b23096e2545f8e3ac1d3;p=thirdparty%2Fstrongswan.git

Increased maximum PT-TLS message size to 2MB
---

diff --git a/src/libpttls/pt_tls.h b/src/libpttls/pt_tls.h
index 275dc89e97..b2f3198a4a 100644
--- a/src/libpttls/pt_tls.h
+++ b/src/libpttls/pt_tls.h
@@ -40,7 +40,7 @@
 /**
  * Maximum size of a PT-TLS message
  */
-#define PT_TLS_MAX_MESSAGE_LEN	 8 * TLS_MAX_FRAGMENT_LEN - PT_TLS_HEADER_LEN
+#define PT_TLS_MAX_MESSAGE_LEN	128 * TLS_MAX_FRAGMENT_LEN - PT_TLS_HEADER_LEN
 
 /**
  * Default PT-TLS port
diff --git a/src/libtnccs/plugins/tnccs_20/tnccs_20.c b/src/libtnccs/plugins/tnccs_20/tnccs_20.c
index b593f853fd..dc4da51c60 100644
--- a/src/libtnccs/plugins/tnccs_20/tnccs_20.c
+++ b/src/libtnccs/plugins/tnccs_20/tnccs_20.c
@@ -1040,14 +1040,14 @@ tnccs_t* tnccs_20_create(bool is_server,
 	{
 		case TNC_IFT_TLS_2_0:
 		case TNC_IFT_TLS_1_0:
-			default_max_batch_size = 8 * TLS_MAX_FRAGMENT_LEN - 16;
+			default_max_batch_size = 128 * TLS_MAX_FRAGMENT_LEN - 16;
 			break;
 		case TNC_IFT_EAP_2_0:
 		case TNC_IFT_EAP_1_1:
 		case TNC_IFT_EAP_1_0:
 		case TNC_IFT_UNKNOWN:
 		default:
-			default_max_batch_size = 4 * TLS_MAX_FRAGMENT_LEN - 14;
+			default_max_batch_size =   4 * TLS_MAX_FRAGMENT_LEN - 14;
 			break;
 	}