diff options
author | Matthias Schiffer <mschiffer@universe-factory.net> | 2012-04-19 17:42:56 +0200 |
---|---|---|
committer | Matthias Schiffer <mschiffer@universe-factory.net> | 2012-04-19 17:42:56 +0200 |
commit | 8c91443808ce376947ff387eaffca6e8cfbe9251 (patch) | |
tree | 227a4367a2c013bbee40dc99c8abafc52da5ee2e /src/handshake.h | |
parent | c5b12202c834fe484634131ee9a91465b9e6e7bc (diff) | |
download | fastd-8c91443808ce376947ff387eaffca6e8cfbe9251.tar fastd-8c91443808ce376947ff387eaffca6e8cfbe9251.zip |
Don't regenerate session handshake keypair for every handshake so a global state can be used; remove the concept of temporary peers
These changes will fix the possibility of a TCP-SYN-Flood-like DoS attack, at the cost of another
protocol change: as we can't count request IDs when we don't know have temporary peers, request IDs
are removed completely.
Diffstat (limited to 'src/handshake.h')
-rw-r--r-- | src/handshake.h | 7 |
1 files changed, 3 insertions, 4 deletions
diff --git a/src/handshake.h b/src/handshake.h index 9bb1a56..5e7ee1d 100644 --- a/src/handshake.h +++ b/src/handshake.h @@ -61,16 +61,15 @@ typedef struct _fastd_handshake_record { } fastd_handshake_record; struct _fastd_handshake { - uint8_t req_id; uint8_t type; fastd_handshake_record records[RECORD_MAX]; }; -fastd_buffer fastd_handshake_new_init(fastd_context *ctx, fastd_peer *peer, size_t tail_space); -fastd_buffer fastd_handshake_new_reply(fastd_context *ctx, fastd_peer *peer, const fastd_handshake *handshake, size_t tail_space); +fastd_buffer fastd_handshake_new_init(fastd_context *ctx, size_t tail_space); +fastd_buffer fastd_handshake_new_reply(fastd_context *ctx, const fastd_handshake *handshake, size_t tail_space); -void fastd_handshake_handle(fastd_context *ctx, fastd_peer *peer, fastd_buffer buffer); +void fastd_handshake_handle(fastd_context *ctx, const fastd_peer_address *address, const fastd_peer_config *peer_conf, fastd_buffer buffer); static inline void fastd_handshake_add(fastd_context *ctx, fastd_buffer *buffer, fastd_handshake_record_type type, size_t len, const void *data) { |