Increased maximum PT-TLS message size to 2MB
authorAndreas Steffen <andreas.steffen@strongswan.org>
Tue, 27 May 2014 17:36:36 +0000 (19:36 +0200)
committerAndreas Steffen <andreas.steffen@strongswan.org>
Sat, 31 May 2014 18:37:56 +0000 (20:37 +0200)
src/libpttls/pt_tls.h
src/libtnccs/plugins/tnccs_20/tnccs_20.c

index 275dc89..b2f3198 100644 (file)
@@ -40,7 +40,7 @@
 /**
  * Maximum size of a PT-TLS message
  */
-#define PT_TLS_MAX_MESSAGE_LEN  8 * TLS_MAX_FRAGMENT_LEN - PT_TLS_HEADER_LEN
+#define PT_TLS_MAX_MESSAGE_LEN 128 * TLS_MAX_FRAGMENT_LEN - PT_TLS_HEADER_LEN
 
 /**
  * Default PT-TLS port
index b593f85..dc4da51 100644 (file)
@@ -1040,14 +1040,14 @@ tnccs_t* tnccs_20_create(bool is_server,
        {
                case TNC_IFT_TLS_2_0:
                case TNC_IFT_TLS_1_0:
-                       default_max_batch_size = 8 * TLS_MAX_FRAGMENT_LEN - 16;
+                       default_max_batch_size = 128 * TLS_MAX_FRAGMENT_LEN - 16;
                        break;
                case TNC_IFT_EAP_2_0:
                case TNC_IFT_EAP_1_1:
                case TNC_IFT_EAP_1_0:
                case TNC_IFT_UNKNOWN:
                default:
-                       default_max_batch_size = 4 * TLS_MAX_FRAGMENT_LEN - 14;
+                       default_max_batch_size =   4 * TLS_MAX_FRAGMENT_LEN - 14;
                        break;
        }