[Openvpn-devel] [PATCH] mbedTLS: Make sure TLS session survives move

2020-03-31 Thread Tom van Leeuwen
From: Tom van Leeuwen When a client disconnects from a server compiled with mbedTLS, the server cannot process the PUSH_REQUEST from a new connection with the same client IP and port number. This is the case when the client binds to a static port. This behavior is initiated by move_session

[Openvpn-devel] mbedTLS: Make sure TLS session survives move

2020-03-24 Thread Tom van Leeuwen
From: Tom van Leeuwen When an mbedTLS session is moved in move_session(), the contents of the the tls_session is copied to the new session and the old session is reinitialized. This tls_session contains, amongst other things, an mbedtls_ssl_config and bio_ctx structure. However, the mbedtls

[Openvpn-devel] [PATCH] mbedTLS: Make sure TLS session survives move

2020-03-24 Thread Tom van Leeuwen
When an mbedTLS session is moved in move_session(), the contents of the the tls_session is copied to the new session and the old session is reinitialized. This tls_session contains, amongst other things, an mbedtls_ssl_config and bio_ctx structure. However, the mbedtls context has internal