diff options
| author | Lev Stipakov | 2019-01-21 22:04:54 +0200 |
|---|---|---|
| committer | Gert Doering | 2019-07-22 20:25:53 +0200 |
| commit | d22ba6b2c551fa83d23b5cf668e08a08fde446bc (patch) | |
| tree | 7fecbb9b721cc1c56a99790d60d766c2fb4561d7 /src/openvpn/openvpn.h | |
| parent | c454b21e7ce458ce6f5bcaf6c313ab3ba3dd5baf (diff) | |
| download | openvpn-d22ba6b2c551fa83d23b5cf668e08a08fde446bc.zip openvpn-d22ba6b2c551fa83d23b5cf668e08a08fde446bc.tar.gz | |
Fix broken fragment/mssfix with NCP
NCP negotiation replaces worst cast crypto overhead
with actual one in data channel frame. That frame
params are used by mssfix.
Fragment frame still contains worst case overhead.
Because of that TCP packets are fragmented, since
MSS value exceeds max fragment size.
Fix by replacing worst case crypto overhead with
actual one for fragment frame, as it is done for data
channel frame.
Trac #1140
Signed-off-by: Lev Stipakov <lstipakov@gmail.com>
Acked-by: Arne Schwabe <arne@rfc2549.org>
Acked-by: Steffan Karger <steffan.karger@fox-it.com>
Message-Id: <1548101094-4449-1-git-send-email-lstipakov@gmail.com>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg18135.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
Diffstat (limited to 'src/openvpn/openvpn.h')
| -rw-r--r-- | src/openvpn/openvpn.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/openvpn/openvpn.h b/src/openvpn/openvpn.h index fca33f2..29d21f0 100644 --- a/src/openvpn/openvpn.h +++ b/src/openvpn/openvpn.h @@ -265,6 +265,7 @@ struct context_2 /* Object to handle advanced MTU negotiation and datagram fragmentation */ struct fragment_master *fragment; struct frame frame_fragment; + struct frame frame_fragment_initial; struct frame frame_fragment_omit; #endif |