From 36082a2fe36ecd800d784ae44c14f1f18c66a7e9 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 28 Apr 2024 09:33:12 +0200 Subject: Adding upstream version 3.7.9. Signed-off-by: Daniel Baumann --- doc/functions/gnutls_anti_replay_set_window | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 doc/functions/gnutls_anti_replay_set_window (limited to 'doc/functions/gnutls_anti_replay_set_window') diff --git a/doc/functions/gnutls_anti_replay_set_window b/doc/functions/gnutls_anti_replay_set_window new file mode 100644 index 0000000..85e9100 --- /dev/null +++ b/doc/functions/gnutls_anti_replay_set_window @@ -0,0 +1,20 @@ + + + + +@deftypefun {void} {gnutls_anti_replay_set_window} (gnutls_anti_replay_t @var{anti_replay}, unsigned int @var{window}) +@var{anti_replay}: is a @code{gnutls_anti_replay_t} type. + +@var{window}: is the time window recording ClientHello, in milliseconds + +Sets the time window used for ClientHello recording. In order to +protect against replay attacks, the server records ClientHello +messages within this time period from the last update, and +considers it a replay when a ClientHello outside of the period; if +a ClientHello arrives within this period, the server checks the +database and detects duplicates. + +For the details of the algorithm, see RFC 8446, section 8.2. + +@strong{Since:} 3.6.5 +@end deftypefun -- cgit v1.2.3