comparison sysoptions.h @ 746:465fefc4f6e0 kexguess

Put some #ifdef options around first-follows options in case they need to be disabled
author Matt Johnston <matt@ucc.asn.au>
date Wed, 03 Apr 2013 00:43:31 +0800
parents 15999b098cc9
children 8dcdfd44e769
comparison
equal deleted inserted replaced
745:15999b098cc9 746:465fefc4f6e0
20 #endif 20 #endif
21 /* Close connections to clients which haven't authorised after AUTH_TIMEOUT */ 21 /* Close connections to clients which haven't authorised after AUTH_TIMEOUT */
22 #ifndef AUTH_TIMEOUT 22 #ifndef AUTH_TIMEOUT
23 #define AUTH_TIMEOUT 300 /* we choose 5 minutes */ 23 #define AUTH_TIMEOUT 300 /* we choose 5 minutes */
24 #endif 24 #endif
25
26 /* A client should try and send an initial key exchange packet guessing
27 * the algorithm that will match - saves a round trip connecting, has little
28 * overhead if the guess was "wrong". */
29 #define USE_KEX_FIRST_FOLLOWS
30 /* Use protocol extension to allow "first follows" to succeed more frequently.
31 * This is currently Dropbear-specific but will gracefully fallback when connecting
32 * to other implementations. */
33 #define USE_KEXGUESS2
25 34
26 /* Minimum key sizes for DSS and RSA */ 35 /* Minimum key sizes for DSS and RSA */
27 #ifndef MIN_DSS_KEYLEN 36 #ifndef MIN_DSS_KEYLEN
28 #define MIN_DSS_KEYLEN 512 37 #define MIN_DSS_KEYLEN 512
29 #endif 38 #endif