gnutls_anti_replay_set_window3
Api function
Usage
#include <gnutls/gnutls.h>
void gnutls_anti_replay_set_window(gnutls_anti_replay_t anti_replay, unsigned int window);
Arguments
gnutls_anti_replay_t anti_replay
|
is a |
|---|---|
unsigned int window
|
is the time window recording ClientHello, in milliseconds |
Overview
Sets the time window used for ClientHello recording. In order to protect against replay attacks, the server records ClientHello messages within this time period from the last update, and considers it a replay when a ClientHello outside of the period; if a ClientHello arrives within this period, the server checks the database and detects duplicates.
For the details of the algorithm, see RFC 8446, section 8.2.
Since
3.6.5
Releases
5 releases since Debian 10 (Buster); the text changed 4 times.