Enable replay-window usage for configurations with both UDP and TCP remotes

PATCH New Lev Stipakov 1 participant 1 message Nov 5, 2015

lore

Share & tools

lore

Lev Stipakov

author

2015-11-05 16:06 UTC #0 lore raw

PATCH 1/1 Enable replay-window usage for configurations with both UDP and TCP remotes

Signed-off-by Lev Stipakov <[email protected]...>

---
 src/openvpn/options.c | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

src/openvpn/options.c +3 -2

index 2f8915d..de6e453 100644
@@ -2110,12 +2110,13 @@ options_postprocess_verify_ce (const struct options *options, const struct conne
 #ifdef ENABLE_CRYPTO
 
   /*
-   * Check consistency of replay options
+   * Check consistency of replay options.
+   * Use nonfatal warning in case of config contains both UDP and TCP remotes.
    */
   if ((!proto_is_udp(ce->proto))
       && (options->replay_window != defaults.replay_window
 	  || options->replay_time != defaults.replay_time))
-    msg (M_USAGE, "--replay-window only makes sense with --proto udp");
+    msg (M_WARN, "--replay-window only makes sense with --proto udp");
 
   if (!options->replay
       && (options->replay_window != defaults.replay_window

Signature · 1 line

1.9.1