X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ian/git?p=secnet.git;a=blobdiff_plain;f=README;fp=README;h=0109cfaf6f754a5371be4c5312d0feccacefafe4;hp=73679c2acd3695fd0a4377ffa4c685736cccaca2;hb=e7f8ec2afddd169361d598ab79ebf9452a6016bc;hpb=a15faeb2b12e9cc0e3d1352cf4c233fc61c51c1c diff --git a/README b/README index 73679c2..0109cfa 100644 --- a/README +++ b/README @@ -285,11 +285,12 @@ site: dict argument setup-retries (integer): max number of times to transmit a key negotiation packet [5] setup-timeout (integer): time between retransmissions of key negotiation - packets, in ms [1000] + packets, in ms [2000] wait-time (integer): after failed key setup, wait this long (in ms) before allowing another attempt [20000] renegotiate-time (integer): if we see traffic on the link after this time - then renegotiate another session key immediately [depends on key-lifetime] + then renegotiate another session key immediately (in ms) + [half key-lifetime, or key-lifetime minus 5 mins, whichever is longer]. keepalive (bool): if True then attempt always to keep a valid session key. Not actually currently implemented. [false] log-events (string list): types of events to log for this site