eden-emu/mbedtls
14
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add warnings about disabling replay detection

Browse source
This commit is contained in:
Manuel Pégourié-Gonnard 2014-10-13 18:15:52 +02:00 • committed by Paul Bakker
parent 37e08e1689
commit a6fcffe516
2 changed files with 13 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

9
include/polarssl/ssl.h
View file

@ -1279,10 +1279,17 @@ void ssl_set_dtls_cookies( ssl_context *ssl,
/**
* \brief Enable or disable anti-replay protection for DTLS.
* (DTLS only, no effect on TLS.)
* Default: enebled.
* Default: enabled.
*
* \param ssl SSL context
* \param mode SSL_ANTI_REPLAY_ENABLED or SSL_ANTI_REPLAY_DISABLED.
*
* \warning Disabling this is a security risk unless the application
* protocol handles duplicated packets in a safe way. You
* should not disable this without careful consideration.
* However, if your application already detects duplicated
* packets and needs information about them to adjust its
* transmission strategy, then you'll want to disable this.
*/
void ssl_set_dtls_anti_replay( ssl_context *ssl, char mode );
#endif /* POLARSSL_SSL_DTLS_ANTI_REPLAY */