server/keyexch.c: Lower the validity time for a challenge.

[tripe] / server / keyexch.c

diff --git a/server/keyexch.c b/server/keyexch.c
index c2f035d47e082b3c2a77b93e62347a2df2cca43b..6490dd7358adc118dc055ec62fffc7976f68cd0c 100644 (file)
--- a/server/keyexch.c
+++ b/server/keyexch.c
@@ -77,7 +77,7 @@
 
 /*----- Tunable parameters ------------------------------------------------*/
 
-#define T_VALID MIN(2)                 /* Challenge validity period */
+#define T_VALID SEC(20)                        /* Challenge validity period */
 #define T_RETRY SEC(10)                        /* Challenge retransmit interval */
 
 #define VALIDP(kx, now) ((now) < (kx)->t_valid)