#define EPHEMERAL_CERT_EXPIRATION_SECONDS_RENEW_BEFORE (60*60*24*7)
#define GNUTLS_PIN_MIN_VERSION 0x030400
+#define UNWRAP_BUF_SIZE 131072
#define TLS_CHUNK_SIZE (16 * 1024)
#define VERBOSE_MSG(cl_side, ...)\
}
tls->client_side = false;
- wire_buf_init(&tls->unwrap_buf, manager->wire_buf.size);
+ wire_buf_init(&tls->unwrap_buf, UNWRAP_BUF_SIZE);
gnutls_transport_set_pull_function(tls->tls_session, kres_gnutls_pull);
gnutls_transport_set_vec_push_function(tls->tls_session, kres_gnutls_vec_push);
}
tls->client_side = true;
- wire_buf_init(&tls->unwrap_buf, manager->wire_buf.size);
+ wire_buf_init(&tls->unwrap_buf, UNWRAP_BUF_SIZE);
gnutls_transport_set_pull_function(tls->tls_session, kres_gnutls_pull);
gnutls_transport_set_vec_push_function(tls->tls_session, kres_gnutls_vec_push);