X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=secnet.git;a=blobdiff_plain;f=README;h=5a4db52c9f2a54166c0ea3e2e5caa9b9e54a4410;hp=da1ea0ba640ef9fc6e0820339b6b7921676ad628;hb=19074a85692b26aac9ae7e2f2a607e26741cbf94;hpb=e3f1375768e53a28a4b5e7b965f2f9f3472aab42 diff --git a/README b/README index da1ea0b..5a4db52 100644 --- a/README +++ b/README @@ -395,8 +395,9 @@ site: dict argument packet [5; mobile: 30] setup-timeout (integer): time between retransmissions of key negotiation packets, in ms [2000; mobile: 1000] - wait-time (integer): after failed key setup, wait this long (in ms) before - allowing another attempt [20000; mobile: 10000] + wait-time (integer): after failed key setup, wait roughly this long + (in ms) before allowing another attempt [20000; mobile: 10000] + Actual wait time is randomly chosen between ~0.5x and ~1.5x this. renegotiate-time (integer): if we see traffic on the link after this time then renegotiate another session key immediately (in ms) [half key-lifetime, or key-lifetime minus 5 mins (mobile: 12 hours),