summaryrefslogtreecommitdiff
path: root/scripts/git.orderFile
diff options
context:
space:
mode:
authorMarco Baffo <marco@mandelbit.com>2026-06-08 16:06:42 +0200
committerAntonio Quartulli <antonio@openvpn.net>2026-07-20 16:29:31 +0200
commitf7e6287ccd3abeed9e638b581dc3fdf742106ba3 (patch)
treeb8b17cdd3d703c4fde523e3ca83421c9aa0a301d /scripts/git.orderFile
parente1ad6fe5db719874efa45b2caf9934552e09fc43 (diff)
ovpn: use monotonic clock for peer keepalive timeouts
Replace ktime_get_real_seconds() with the monotonic ktime_get_boottime_seconds() to ensure the keepalive mechanism is robust against system clock modifications. Right now, the driver uses ktime_get_real_seconds() to track peer timeouts, relying on the system wall-clock. An administrative time adjustment or an NTP sync that steps the clock forward can cause `now' to instantly exceed `last_recv + timeout'. When this occurs, the driver artificially expires healthy peers. Depending on the OpenVPN user-space configuration, this triggers a premature tunnel restart (if --keepalive or --ping-restart is used) or a complete disconnection of the client (if --ping-exit is used). Fixes: 3ecfd9349f40 ("ovpn: implement keepalive mechanism") Signed-off-by: Marco Baffo <marco@mandelbit.com> Signed-off-by: Antonio Quartulli <antonio@openvpn.net>
Diffstat (limited to 'scripts/git.orderFile')
0 files changed, 0 insertions, 0 deletions